JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 158.23.184.117

158.23.184.117 was found in our database!

This IP was reported 1,305 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Singapore Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇲🇽 Mexico
City	Santiago de Queretaro, Queretaro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 158.23.184.117

Whois 158.23.184.117

IP Abuse Reports for 158.23.184.117:

This IP address has been reported a total of 1,305 times from 491 distinct sources. 158.23.184.117 was first reported on August 25th 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-29 08:15:52 (12 minutes ago)	158.23.184.117 - - [29/Aug/2026:16:15:50 +0800] "GET /wk HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Windo ... show more 158.23.184.117 - - [29/Aug/2026:16:15:50 +0800] "GET /wk HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - - [29/Aug/2026:16:15:50 +0800] "GET /wk/admin.php HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - - [29/Aug/2026:16:15:50 +0800] "GET /wk/admin.php HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - - [29/Aug/2026:16:15:51 +0800] "GET /admin.php HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - - [29/Aug/2026:16:15:51 +0800] "GET /admin.php HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari ... show less	Bad Web Bot Web App Attack
🇷🇺 Reaper	2026-08-29 08:08:20 (19 minutes ago)	GET /wk/admin.php	Web App Attack
🇩🇪 Ha1fdan	2026-08-29 08:06:46 (21 minutes ago)	[2026-08-29T08:06:46Z] 158.23.184.117 '<URI>'	Brute-Force Web App Attack
🇹🇭 Sawasdee	2026-08-29 08:06:06 (21 minutes ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 Charlesiv	2026-08-29 08:02:47 (25 minutes ago)	Triggered Cloudflare WAF (botFight) from MX. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Co ... show more Triggered Cloudflare WAF (botFight) from MX. Action taken: MANAGED_CHALLENGE ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-08-29T07:44:51Z Ray ID: a329eed41d959716 UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇬🇧 blik2108	2026-08-29 07:59:05 (28 minutes ago)	158.23.184.117 - - [29/Aug/2026:07:59:02 +0000] "GET /update/da222.php HTTP/1.1" 404 3431 "-" "Mozil ... show more 158.23.184.117 - - [29/Aug/2026:07:59:02 +0000] "GET /update/da222.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 158.23.184.117 - - [29/Aug/2026:07:59:02 +0000] "GET /xmr.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 158.23.184.117 - - [29/Aug/2026:07:59:02 +0000] "GET /wp-admin/css/bolt.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 158.23.184.117 - - [29/Aug/2026:07:59:03 +0000] "GET /wp-act.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" 158.23.184.117 - - [29/Aug/2026:07:59:03 +0000] "GET /fff.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge ... show less	Web App Attack
🇮🇩 soc-yk	2026-08-29 07:42:16 (45 minutes ago)	Type: web_scanning Risk: 100 Events: 78732 Evidence: - Automated hostile web probing detected - Rep ... show more Type: web_scanning Risk: 100 Events: 78732 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇳🇱 i-turnradio.nl	2026-08-29 07:41:23 (46 minutes ago)	2026-08-29 @ 09:41:22 (CET) ~ Blocked for trying to access: /wk/admin.php	Web App Attack
🇳🇴 Abuse Buster	2026-08-29 07:39:47 (48 minutes ago)	158.23.184.117 - [29/Aug/2026:09:39:46 +0200] "GET /htaccess.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 ( ... show more 158.23.184.117 - [29/Aug/2026:09:39:46 +0200] "GET /htaccess.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - [29/Aug/2026:09:39:46 +0200] "GET /masshp.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 158.23.184.117 - [29/Aug/2026:09:39:46 +0200] "GET /Mhbgf.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇸🇪 EmK530	2026-08-29 07:27:44 (1 hour ago)	URL flagged by RegEx: /byp.php	Web App Attack
🇨🇳 Peter Yu	2026-08-29 07:19:33 (1 hour ago)		Bad Web Bot Web App Attack
🇦🇺 crispi	2026-08-29 07:18:33 (1 hour ago)	Port scan from 158.23.184.117	Port Scan
🇺🇸 nodepile	2026-08-29 07:15:08 (1 hour ago)	Requests denied due to active blacklist hits (tenant=47 method=GET path=/wk ua='Mozilla/5.0 (Windows ... show more Requests denied due to active blacklist hits (tenant=47 method=GET path=/wk ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇳🇱 Mangelot Hosting	2026-08-29 07:07:16 (1 hour ago)	(LF_APACHE_404) srv101 Multiple 404 Scan 158.23.184.117 (MX/Mexico/-): 200 in the last 3600 secs; Po ... show more (LF_APACHE_404) srv101 Multiple 404 Scan 158.23.184.117 (MX/Mexico/-): 200 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
Anonymous	2026-08-29 07:06:20 (1 hour ago)	GET / HTTP/1.1 GET / HTTP/1.1 GET / HTTP/1.1	Bad Web Bot Web App Attack

Showing 1 to 15 of 1305 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.23.38.101

🇺🇸 100.28.191.174

🇩🇪 80.91.223.114

🇺🇸 216.180.246.188

🇺🇸 207.141.87.194

🇮🇹 151.0.224.188

🇺🇸 150.195.116.228

🇺🇸 150.107.36.120

🇨🇳 123.145.37.228

🇸🇬 47.82.53.133

🇫🇮 45.154.244.193

🇺🇸 2001:470:1:fb5::98

🇺🇸 2001:470:1:332::e4

🇩🇪 195.182.16.23

🇧🇷 170.80.66.108

🇮🇶 169.224.6.128

🇲🇽 158.23.147.79

🇺🇸 147.182.191.14

🇮🇳 117.212.183.103

🇫🇷 86.246.7.209