JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.43.131.157

104.43.131.157 was found in our database!

This IP was reported 758 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Des Moines, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.43.131.157

Whois 104.43.131.157

IP Abuse Reports for 104.43.131.157:

This IP address has been reported a total of 758 times from 458 distinct sources. 104.43.131.157 was first reported on June 25th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-06-27 20:14:43 (7 minutes ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇳🇱 i-turnradio.nl	2026-06-27 20:10:58 (10 minutes ago)	2026-06-27 @ 22:10:58 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-06-27 @ 22:10:58 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇫🇷 sthoyer.de	2026-06-27 20:04:34 (17 minutes ago)	104.43.131.157 - - [27/Jun/2026:22:04:33 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 104.43.131.157 - - [27/Jun/2026:22:04:33 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 794 "-" "-" ... show less	Web App Attack
🇺🇸 jfz-abuse	2026-06-27 19:56:41 (25 minutes ago)	fail2ban: apache-php-recon ...	Web App Attack
🇺🇸 Epimetheus	2026-06-27 19:56:11 (25 minutes ago)	Unauthorized access attempts: [GET] /heat1.php [GET] /wp-blink.php [GET] /tfm.php [GET] /mh.php [GE ... show more Unauthorized access attempts: [GET] /heat1.php [GET] /wp-blink.php [GET] /tfm.php [GET] /mh.php [GET] /abc.php [GET] /SrHD3odefault.php [GET] /xml.php [GET] /ms-edit.php [GET] /wp.php [GET] /k.php [GET] /solo1.php [GET] /mg.php [GET] /alfa.php [GET] /av.php [GET] /hosty.php [GET] /15ef5.php [GET] /wp-access.php [GET] /ioxi-o.php [GET] /heat1.php [GET] /ops.php [GET] /themes.php [GET] /wp-content/admin.php [GET] /eee.php [GET] /one.php [GET] /wp-blog.php [GET] /.well-known/about.php [GET] /as.php UA: Unknown show less	Web App Attack
🇩🇰 ScamAware	2026-06-27 19:37:46 (44 minutes ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 44. Unique request paths counted internally: 44. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Bad Web Bot
🇫🇷 dusfor72	2026-06-27 19:37:17 (44 minutes ago)	stupid access attempts on non-existant files ...	Brute-Force Web App Attack
🇩🇪 Skyrider	2026-06-27 19:29:20 (52 minutes ago)	crowdsecurity/http-probing	Web App Attack
🇧🇷 vfAcceloReporter	2026-06-27 18:43:50 (1 hour ago)	104.43.131.157 - - [27/Jun/2026:15:43:48 -0300] "GET /0.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 ... show more 104.43.131.157 - - [27/Jun/2026:15:43:48 -0300] "GET /0.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:43:48 -0300] "GET /ms-edit.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:43:48 -0300] "GET /sss.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:43:49 -0300] "GET /k.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:43:50 -0300] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 404 11 "-" "-" ... show less	Brute-Force Web App Attack Exploited Host
🇮🇹 VHosting	2026-06-27 18:40:06 (1 hour ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 i-turnradio.nl	2026-06-27 18:36:29 (1 hour ago)	2026-06-27 @ 20:36:29 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ... show more 2026-06-27 @ 20:36:29 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php show less	Web App Attack
🇫🇷 Lunix	2026-06-27 18:27:26 (1 hour ago)		Brute-Force Web App Attack
🇧🇷 vfAcceloReporter	2026-06-27 18:23:31 (1 hour ago)	104.43.131.157 - - [27/Jun/2026:15:23:29 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 104.43.131.157 - - [27/Jun/2026:15:23:29 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:23:29 -0300] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:23:30 -0300] "GET /xyn.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:23:30 -0300] "GET /5.php HTTP/1.1" 404 11 "-" "-" 104.43.131.157 - - [27/Jun/2026:15:23:31 -0300] "GET /joomla.php HTTP/1.1" 404 11 "-" "-" ... show less	Brute-Force Web App Attack Exploited Host
🇩🇪 8legz.net	2026-06-27 18:21:32 (2 hours ago)	[Sat Jun 27 19:21:30.858374 2026] [php:error] [pid 1592590] [client 104.43.131.157:7622] script '/va ... show more [Sat Jun 27 19:21:30.858374 2026] [php:error] [pid 1592590] [client 104.43.131.157:7622] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Sat Jun 27 19:21:31.104450 2026] [php:error] [pid 1592590] [client 104.43.131.157:7622] script '/var/www/html/xyn.php' not found or unable to stat [Sat Jun 27 19:21:31.338960 2026] [php:error] [pid 1592590] [client 104.43.131.157:7622] script '/var/www/html/5.php' not found or unable to stat ... show less	Brute-Force
Anonymous	2026-06-27 18:14:19 (2 hours ago)	XSS Attempt	Hacking

Showing 1 to 15 of 758 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.28

🇨🇳 120.85.115.183

🇺🇸 20.80.104.29

🇺🇸 207.90.244.14

🇬🇧 194.50.235.134

🇩🇪 172.70.240.8

🇨🇳 113.222.1.216

🇨🇳 111.228.36.44

🇺🇸 99.92.204.98

🇳🇱 93.123.118.31

🇳🇱 45.156.87.82

🇳🇱 45.148.10.152

🇷🇸 24.135.74.36

🇯🇵 207.56.229.32

🇭🇰 207.56.18.239

🇸🇬 172.188.89.41

🇳🇬 165.154.177.119

🇺🇸 162.216.149.14

🇨🇳 111.228.13.226

🇧🇩 103.86.198.253