JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

104.211.77.81

Recent Activity

Abuse confidence score ?

92% Critical

22 reports

19 reporters · latest 2 days ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇳 India
City	Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 104.211.77.81

Export CSV

This IP address has been reported a total of 22 times from 19 distinct sources. 104.211.77.81 was first reported on October 8th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: France with 10 reports; United States of America with 5 reports; Germany with 3 reports. The most common categories in these recent reports were: Web App Attack 14 times; Port Scan 11 times; Hacking 4 times; Bad Web Bot 4 times; SQL Injection 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-18 19:51:34 (2 days ago)	104.211.77.81 - - [18/Oct/2026:16:51:31 -0300] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux; ... show more 104.211.77.81 - - [18/Oct/2026:16:51:31 -0300] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 104.211.77.81 - - [18/Oct/2026:16:51:32 -0300] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Port Scan
🇫🇷 Phenix Info	2026-10-18 19:40:10 (2 days ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇫🇮 oh.mg	2026-10-18 19:34:50 (2 days ago)	[Sun Oct 18 21:34:48.189531 2026] [security2:error] [pid 1295500:tid 1295517] [client 104.211.77.81: ... show more [Sun Oct 18 21:34:48.189531 2026] [security2:error] [pid 1295500:tid 1295517] [client 104.211.77.81:54615] [client 104.211.77.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.env"] [unique_id "atUfWHjbx_UeQQMqmSrDLQAAAE8"] [Sun Oct 18 21:34:49.047207 2026] [security2:error] [pid 1314027:tid 1314055] [client 104.211.77.81:59227] [client 104.211.77.81] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag " ... show less	Web App Attack Bad Web Bot
🇫🇷 j-tap	2026-10-18 19:19:38 (2 days ago)	WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)	Web App Attack
Anonymous	2026-10-18 19:14:10 (2 days ago)	104.211.77.81 - - [18/Oct/2026:19:14:09 +0000] "GET /.env HTTP/1.1" 404 6852 "-" "Mozilla/5.0 (Linux ... show more 104.211.77.81 - - [18/Oct/2026:19:14:09 +0000] "GET /.env HTTP/1.1" 404 6852 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Brute-Force Web App Attack
Anonymous	2026-10-18 19:10:07 (2 days ago)	[server.techsupportltd.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples= ... show more [server.techsupportltd.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/.env \| /.env \| fast_lane=true kernel_at=2026-10-18T19:08:29+00:00 show less	Hacking Web App Attack
🇫🇷 abdullahmughal	2026-10-18 18:09:54 (3 days ago)	Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: HTTP:80 (3 sessions between ... show more Jaal Deceptive Lab: Unauthorized malicious activity observed. • Targets: HTTP:80 (3 sessions between 2026-10-10 15:40 UTC and 2026-10-17 17:04 UTC) • Activity: - Probes / input: GET / • Attribution: Zero-egress deception sensor; passed 24h quarantine; research scanners excluded. show less	Bad Web Bot Web App Attack
🇫🇷 carpes0708	2026-10-18 00:45:29 (3 days ago)		Port Scan Web App Attack
🇺🇸 LotPhantom	2026-10-17 19:19:28 (3 days ago)	104.211.77.81 - - [17/Oct/2026:19:18:27 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT ... show more 104.211.77.81 - - [17/Oct/2026:19:18:27 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "0" ... show less	Web App Attack
🇫🇷 vtchost.com	2026-10-17 15:54:58 (4 days ago)	portscan 80/443 on honeypot system ...	Port Scan
🇫🇷 carpes0708	2026-10-15 00:40:08 (6 days ago)		Port Scan Web App Attack
🇫🇮 sonot	2026-10-14 16:34:34 (1 week ago)	Blocked by UFW on mail [80/tcp] \| SPT: 56368 \| TTL: 97 \| LEN: 52 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on mail [80/tcp] \| SPT: 56368 \| TTL: 97 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 thetomtaylor.co.uk	2026-10-14 05:53:02 (1 week ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [ice01,ice02]	Hacking SQL Injection Web App Attack
🇫🇷 vtchost.com	2026-10-13 01:21:23 (1 week ago)	portscan 80/443 on honeypot system ...	Port Scan
🇺🇸 knock	2026-10-12 08:35:05 (1 week ago)	Knock-Knock honeypot brute-force: HTTP (1 total hits)	Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 154.16.44.99

🇧🇩 103.94.129.7

🇮🇩 103.59.161.217

🇬🇧 154.16.44.72

🇩🇪 130.12.180.170

🇰🇷 106.247.22.181

🇨🇦 104.207.60.141

🇮🇩 103.235.74.107

🇮🇳 103.217.245.28

🇵🇰 103.179.240.154

🇦🇲 45.159.75.233

🇩🇪 195.179.228.145

🇳🇱 193.47.62.69

🇺🇸 192.155.90.220

🇲🇽 187.216.224.85

🇬🇧 154.16.44.64

🇬🇧 154.16.44.44

🇩🇪 109.160.32.36

🇮🇩 103.180.123.42

🇧🇩 103.135.134.102