JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.41.162.106

104.41.162.106 was found in our database!

This IP was reported 267 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.41.162.106

Whois 104.41.162.106

IP Abuse Reports for 104.41.162.106:

This IP address has been reported a total of 267 times from 207 distinct sources. 104.41.162.106 was first reported on July 7th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SiyCah	2026-07-08 03:00:01 (1 hour ago)	IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.	Hacking Brute-Force Web App Attack
🇩🇪 Vegascosmetics	2026-07-07 22:28:42 (5 hours ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after attack pattern. Vegas Security	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 22:26:57 (5 hours ago)		Brute-Force Web App Attack
🇮🇩 soc-yk	2026-07-07 22:18:11 (5 hours ago)	Type: web_scanning Risk: 100 Events: 1734 Evidence: - Automated hostile web probing detected - Repe ... show more Type: web_scanning Risk: 100 Events: 1734 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇺🇸 Charlesiv	2026-07-07 22:01:44 (6 hours ago)	Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /main.php Timestamp: 2026-07-07T20:50:39Z Ray ID: a179b9040a6b8a72 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2026-07-07 22:00:08 (6 hours ago)	Auto-ban: >3000 req/min op 2026-07-07	Web App Attack SSH Hacking
🇩🇪 macrob	2026-07-07 21:52:30 (6 hours ago)	2026/07/07 21:52:27 [error] 2077150#2077150: 358648594 access forbidden by rule, client: 104.41.162 ... show more 2026/07/07 21:52:27 [error] 2077150#2077150: 358648594 access forbidden by rule, client: 104.41.162.106, server: binixo.ro, request: "GET /wp-admin/js/index.php HTTP/2.0", host: "binixo.ro" 2026/07/07 21:52:28 [error] 2077150#2077150: 358648605 access forbidden by rule, client: 104.41.162.106, server: binixo.ro, request: "GET /admin/controller/extension/extension/ HTTP/2.0", host: "binixo.ro" 2026/07/07 21:52:28 [error] 2077150#2077150: 358648611 access forbidden by rule, client: 104.41.162.106, server: binixo.ro, request: "GET /wp-content/about.php HTTP/2.0", host: "binixo.ro" ... show less	Web App Attack
🇺🇸 fazar	2026-07-07 21:49:53 (6 hours ago)	crowdsecurity/http-admin-interface-probing on node: us01	Web App Attack Hacking
🇹🇭 MWA SOC	2026-07-07 21:47:48 (6 hours ago)		Hacking
🇩🇪 Admin-Gito	2026-07-07 21:45:48 (6 hours ago)	104.41.162.106 - - [07/Jul/2026:23:38:25 +0200] "GET /wp-includes/about.php HTTP/1.1" 404 358310 "-" ... show more 104.41.162.106 - - [07/Jul/2026:23:38:25 +0200] "GET /wp-includes/about.php HTTP/1.1" 404 358310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.41.162.106 - - [07/Jul/2026:23:38:43 +0200] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 404 358327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.41.162.106 - - [07/Jul/2026:23:38:54 +0200] "GET /wp-includes/customize/chosen.php HTTP/1.1" 404 358321 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.41.162.106 - - [07/Jul/2026:23:39:07 +0200] "GET /wp-includes/pomo/about.php HTTP/1.1" 404 358315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 104.41.162.106 - - [07/Jul/2026:23:39:10 +0200] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 404 358319 " ... show less	Web App Attack
🇺🇸 dpinse	2026-07-07 21:39:50 (6 hours ago)	Malicious activity detected from 8075 Microsoft Corporation (GET HTTP/1.1 /wp-conf.php) @ 2026-07-07 ... show more Malicious activity detected from 8075 Microsoft Corporation (GET HTTP/1.1 /wp-conf.php) @ 2026-07-07T21:39:50Z show less	Brute-Force
🇬🇧 blik2108	2026-07-07 21:25:24 (6 hours ago)	beta.sleepylizard.com:443 104.41.162.106 - - [07/Jul/2026:22:25:22 +0100] "GET /images/images/about. ... show more beta.sleepylizard.com:443 104.41.162.106 - - [07/Jul/2026:22:25:22 +0100] "GET /images/images/about.php HTTP/1.1" 200 697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-07-07 21:14:24 (6 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 Epimetheus	2026-07-07 21:12:23 (6 hours ago)	Zombie network / Bot scanner detected: [GET] /ms-edit.php [GET] /wp-content/uploads/index.php [GET] ... show more Zombie network / Bot scanner detected: [GET] /ms-edit.php [GET] /wp-content/uploads/index.php [GET] /files/index.php [GET] /tes.php [GET] /wp-admin/css/colors/midnight/ [GET] /wp-admin/js/widgets/ [GET] /wp-good.php [GET] /wp-includes/rest-api/ [GET] /sf.php [GET] /wp-login.php [GET] /wp-content/uploads/goods.php [GET] /an.php [GET] /404.php [GET] /cgi-bin/index.php [GET] /wp-config-sample.php [GET] /as.php [GET] /wp-content/index.php [GET] /1.php [GET] /wk/index.php [GET] /akcc.php [GET] /abc.php [GET] /ioxi-o.php [GET] /wp-admin/user/index.php [GET] /wp-includes/pomo/ [GET] /system_log.php [GET] /wp-content/upgrade/index.php [GET] /wp-includes/js/tinymce/plugins/compat3x/css/ [GET] /cah.php [GET] /HLA-dd.php [GET] /wicked.php [GET] /www.php [GET] /zxz.php [GET] /0x.php [GET] /wp-includes/ [GET] /aa.php [GET] /wp-content/cache/ [GET] /gecko.php [GET] /wp-includes/images/ [GET] /wp-admin/js/ [GET] /403.php [GET] /k.php [GET] /wp-admin/network/index.php [GET] /wp-include ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack
🇺🇸 ruusvuu	2026-07-07 21:08:16 (7 hours ago)	Automated abuse report: 15 attack/probe requests from Microsoft Corporation / JP. Targeted paths: /w ... show more Automated abuse report: 15 attack/probe requests from Microsoft Corporation / JP. Targeted paths: /wp-content/plugins/hellopress/wp_filemanager.php, /this_is_a_new_hello_world.php, /admin.php, /classwithtostring.php, /wp-content/admin.php. Sample log lines: [helpdesk] 7/7/2026 14:08:15 104.41.162.106 GET /wp-admin/css/colors/ 404 159 1.0 ms [helpdesk] 7/7/2026 14:08:15 104.41.162.106 GET /alfa.php 404 147 1.0 ms [helpdesk] 7/7/2026 14:08:16 104.41.162.106 GET /flower.php 404 149 1.2 ms Detected by an automated web-server log monitor. show less	Web App Attack

Showing 1 to 15 of 267 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.254.97.154

🇺🇸 172.71.194.157

🇪🇸 172.68.134.35

🇸🇪 155.4.244.169

🇦🇺 123.209.101.43

🇳🇱 91.92.42.195

🇬🇧 77.103.254.15

🇺🇸 65.49.20.87

🇺🇸 65.49.1.188

🇻🇳 27.79.41.251

🇺🇸 20.55.2.194

🇨🇳 14.103.115.159

🇬🇧 5.226.140.89

🇬🇧 2.57.17.112

🇰🇷 1.214.42.172

🇪🇸 208.85.17.8

🇩🇪 194.88.98.101

🇸🇬 172.69.176.171

🇻🇳 171.231.177.47

🇰🇪 129.222.187.201