JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.46.220.175

104.46.220.175 was found in our database!

This IP was reported 253 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.46.220.175

Whois 104.46.220.175

IP Abuse Reports for 104.46.220.175:

This IP address has been reported a total of 253 times from 198 distinct sources. 104.46.220.175 was first reported on June 29th 2026, and the most recent report was 31 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 walkintoadmin	2026-06-30 02:41:22 (31 minutes ago)	datacenter scanner — 0 real-user 200s, scanner_paths, high 4xx ratio	Bad Web Bot Web App Attack
🇫🇷 Campus France	2026-06-30 00:50:30 (2 hours ago)	[Tue Jun 30 02:50:29.455592 2026] [php:error] [pid 515926] [client 104.46.220.175:25074] script '/va ... show more [Tue Jun 30 02:50:29.455592 2026] [php:error] [pid 515926] [client 104.46.220.175:25074] script '/var/www/html/campus-perpignan/this_is_a_new_hello_world.php' not found or unable to stat [Tue Jun 30 02:50:30.206054 2026] [php:error] [pid 515926] [client 104.46.220.175:25074] script '/var/www/html/campus-perpignan/inputs.php' not found or unable to stat [Tue Jun 30 02:50:30.206054 2026] [php:error] [pid 515926] [client 104.46.220.175:25074] script '/var/www/html/campus-perpignan/inputs.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇳🇱 Joop	2026-06-30 00:50:16 (2 hours ago)	2026-06-30 02:50:14 +0200 s39 /this_is_a_new_hello_world.php	Web App Attack
🇩🇪 Stefan Dreher	2026-06-30 00:45:16 (2 hours ago)	104.46.220.175 - - [30/Jun/2026:02:45:14 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.p ... show more 104.46.220.175 - - [30/Jun/2026:02:45:14 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 153 "-" "-" 104.46.220.175 - - [30/Jun/2026:02:45:14 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 153 "-" "-" 104.46.220.175 - - [30/Jun/2026:02:45:14 +0200] "GET /inputs.php HTTP/1.1" 404 153 "-" "-" 104.46.220.175 - - [30/Jun/2026:02:45:15 +0200] "GET /admin.php HTTP/1.1" 404 153 "-" "-" 104.46.220.175 - - [30/Jun/2026:02:45:15 +0200] "GET /goods.php HTTP/1.1" 404 153 "-" "-" ... show less	Hacking Brute-Force
🇺🇸 SiliSoftware	2026-06-30 00:36:10 (2 hours ago)	/wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇦🇺 clapper	2026-06-30 00:32:59 (2 hours ago)	(mod_security) mod_security (id:949110) triggered by 104.46.220.175 (JP/Japan/-): 5 in the last 600 ... show more (mod_security) mod_security (id:949110) triggered by 104.46.220.175 (JP/Japan/-): 5 in the last 600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇺🇸 Major Hostility	2026-06-30 00:31:15 (2 hours ago)	"GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 "POST /wp-plain.php HTTP/1.1" 404 "GET /wp-c ... show more "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 404 "POST /wp-plain.php HTTP/1.1" 404 "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 404 "GET /qydxrjyp.php?Fox=d3wL7 HTTP/1.1" 404 "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 404 "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 404 "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 404 show less	Web App Attack
🇩🇪 Marco711	2026-06-30 00:26:46 (2 hours ago)	port/URL scanning	Port Scan Web App Attack
🇩🇪 Philister11	2026-06-30 00:24:27 (2 hours ago)	CrowdSec: crowdsecurity/http-admin-interface-probing (JP/AS8075)	Web App Attack Hacking
🇨🇭 Mario Bretscher	2026-06-30 00:24:25 (2 hours ago)	[Tue Jun 30 02:24:23.456971 2026] [php:error] [pid 601283] [client 104.46.220.175:44660] script '/va ... show more [Tue Jun 30 02:24:23.456971 2026] [php:error] [pid 601283] [client 104.46.220.175:44660] script '/var/www/html/this_is_a_new_hello_world.php' not found or unable to stat [Tue Jun 30 02:24:23.707723 2026] [php:error] [pid 601283] [client 104.46.220.175:44660] script '/var/www/html/inputs.php' not found or unable to stat [Tue Jun 30 02:24:23.947783 2026] [php:error] [pid 601283] [client 104.46.220.175:44660] script '/var/www/html/admin.php' not found or unable to stat ... show less	Web App Attack
🇮🇹 adm2palazzon	2026-06-30 00:21:15 (2 hours ago)	[Tue Jun 30 02:21:12.546392 2026] [php:error] [pid 3931:tid 3931] [client 104.46.220.175:6565] scrip ... show more [Tue Jun 30 02:21:12.546392 2026] [php:error] [pid 3931:tid 3931] [client 104.46.220.175:6565] script '/srv/www/htdocs/this_is_a_new_hello_world.php' not found or unable to stat [Tue Jun 30 02:21:13.109413 2026] [php:error] [pid 3931:tid 3931] [client 104.46.220.175:6565] script '/srv/www/htdocs/inputs.php' not found or unable to stat [Tue Jun 30 02:21:13.673975 2026] [php:error] [pid 3931:tid 3931] [client 104.46.220.175:6565] script '/srv/www/htdocs/admin.php' not found or unable to stat ... show less	Brute-Force SSH
Anonymous	2026-06-30 00:17:55 (2 hours ago)	Requested unexistent endpoint (Wordpress login, etc.)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 00:09:54 (3 hours ago)	(mod_security) mod_security (id:210350) triggered by 104.46.220.175 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 104.46.220.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 20:09:48.796915 2026] [security2:error] [pid 6009:tid 6028] [client 104.46.220.175:40434] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.reghay.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.reghay.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "akMJTBk-qlKEdlZJRpvu3wAAAJE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 00:09:11 (3 hours ago)		Web App Attack
🇺🇸 omc	2026-06-30 00:05:12 (3 hours ago)	Banned IP [QC]. GET /wp-content/plugins/fix/up.php [Q4].	Bad Web Bot

Showing 1 to 15 of 253 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇪 204.157.255.153

🇫🇷 176.191.43.176

🇫🇷 145.239.10.137

🇮🇳 103.241.45.120

🇮🇩 103.107.244.194

🇺🇸 66.240.223.240

🇭🇰 45.142.154.40

🇨🇳 14.103.127.80

🇬🇧 193.176.29.28

🇧🇩 182.48.70.237

🇹🇷 178.20.231.176

🇬🇧 161.35.46.137

🇧🇷 138.122.217.15

🇺🇸 135.119.235.84

🇳🇱 34.34.103.195

🇺🇸 3.230.240.53

🇰🇷 218.149.235.152

🇲🇽 201.113.201.92

🇷🇺 172.71.184.220

🇮🇳 143.110.247.221