172.196.43.109
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- ๐ณ๐ฟ New Zealand
- City
- Auckland, Auckland
Abuse Reports
Total reports
655 from
494 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ซ๐ฎ โ |สษงฤ ษฦกแฟณ|โ |
[2026-11-13 14:22:31 UTC] Malicious User-Agent/scanning tool detected from 172.196.43.109 () UA: unknown PATHS: unknown
|
Bad Web Bot Web App Attack | |
| ๐ต๐ฑ Kierownik223 |
|
Bad Web Bot Web App Attack | |
| ๐ฉ๐ช rh24 |
HTTP flood or excessive requests, blocked by host firewall.
|
DDoS Attack Web App Attack | |
| ๐ง๐ท Peregrine |
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 172.196.43.109 104.23.235.47 - - [11/Nov/2026:10:28:12 -0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 18193
|
Bad Web Bot | |
| ๐จ๐ฆ skunkworks_ca |
Automated security event: High-frequency malicious probing and scanner activity across fleet WordPress installations (1604 blocked/challenged hits).
|
Bad Web Bot Web App Attack | |
| ๐บ๐ธ TtlPst |
App probing / vulnerability scanning in path /wp-content/plugins/hellopress/wp_filemanager.php
|
Web App Attack Bad Web Bot | |
| ๐ง๐ท Host One |
Web vulnerability scanning: automated requests without User-Agent. Blocked by firewall on 6 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /122.php, /bsstt.php, /er.php, /llw.php, /awp.php. Automated report.
|
Bad Web Bot Web App Attack | |
| ๐ฉ๐ช ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
|
Web App Attack Bad Web Bot | |
| ๐บ๐ธ BlueStem123 |
Automated bot traffic with anomalous request patterns. Source produced sustained scanning activity exceeding 100 requests within a 60-minute window.
|
Port Scan Bad Web Bot | |
| ๐ฌ๐ง openstrike.co.uk |
465 attacks on PHP URLs:
GET /myy.php HTTP/1.1
|
Web App Attack | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host | |
| ๐ง๐ท Peregrine |
|
Bad Web Bot Web App Attack | |
| ๐จ๐ฑ Fernando Soto |
WAF propio vps1 (CL): sensx2 score 8 en 1h. sondeo rutas sensibles.
|
Web App Attack | |
| ๐ฉ๐ช rh24 |
HTTP flood or excessive requests, blocked by host firewall.
|
DDoS Attack Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown