JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.100.95.109

23.100.95.109 was found in our database!

This IP was reported 129 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.100.95.109

Whois 23.100.95.109

IP Abuse Reports for 23.100.95.109:

This IP address has been reported a total of 129 times from 98 distinct sources. 23.100.95.109 was first reported on April 24th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-03 07:05:16 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇮🇳 evicky2002	2026-07-02 04:51:18 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇭 YF	2026-05-18 23:54:47 (3 months ago)	Pays blacklisté (HK)	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-05-12 10:52:10 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-05-06 14:23:38 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bazter.pro	2026-05-02 21:24:30 (4 months ago)	Auto-Ban [2026-05-03 00:24:26]: CRITICAL: Sensitive files (16); DC: Microsoft Corporation [Paths: 48 ... show more Auto-Ban [2026-05-03 00:24:26]: CRITICAL: Sensitive files (16); DC: Microsoft Corporation [Paths: 48] \| Details: Sensitive files/paths: /admin.php, /wp-admin/user.php, /adminfuns.php, /xmlrpc.php, /wp-content/admin.php \| 404 errors (70): /admin.php, /about.php, /abc.php, /ioxi-o.php, /404.php, /function/function.php, /wp-content/themes/hideo/network.php, /kbfr.php, /wp-conf.php, /goods.php (and 25 more) \| 403 errors (12): /wp-includes/PHPMailer/, /wp-includes/images/, /wp-admin/css/colors/ectoplasm/, /wp-includes/html-api/, /wp-content/uploads/, /.well-known/ \| Other paths: /cgi-bin/, /wp-login.php, /xmlrpc.php, /wp-content/plugins/index.php, /wp-content/plugins/WordPressCore/, /randkeyword.PhP7, /wp-content/themes/index.php show less	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-04-30 11:22:06 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-04-29 05:51:47 (4 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇷 Peregrine	2026-04-29 03:13:30 (4 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 23.100.95.109 172.68.225.224 - - [25/Apr/2026:01:16 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 23.100.95.109 172.68.225.224 - - [25/Apr/2026:01:16:08 -0300] "GET /.tmb/cloud.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇧🇷 Peregrine	2026-04-27 03:13:33 (4 months ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 23.100.95.109 172.68.225.224 - - [25/Apr/2026:01:16 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 23.100.95.109 172.68.225.224 - - [25/Apr/2026:01:16:08 -0300] "GET /.tmb/cloud.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇬🇧 openstrike.co.uk	2026-04-25 05:14:53 (4 months ago)	40 attacks on PHP URLs: GET /wp-content/plugins/index.php HTTP/1.1	Web App Attack
🇺🇸 Epimetheus	2026-04-25 04:36:18 (4 months ago)	Unauthorized access attempts: [GET] /content.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App ... show more Unauthorized access attempts: [GET] /content.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇱🇻 garmtech.com	2026-04-25 04:25:39 (4 months ago)	Attempted access to sensitive endpoint (//wp-content/themes/about.php) detected. Automated scan or u ... show more Attempted access to sensitive endpoint (//wp-content/themes/about.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇧🇷 Peregrine	2026-04-25 04:16:14 (4 months ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 23.100.95.109 172.71.219.30 - - [25/Apr/2026:01:16:10 -0 ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 23.100.95.109 172.71.219.30 - - [25/Apr/2026:01:16:10 -0300] "GET /.well-known/autoload_classmap.php HTTP/1.1" 404 18193 23.100.95.109 172.71.219.30 - - [25/Apr/2026:01:16:10 -0300] "GET /.well-known/pki-validation/ HTTP/1.1" 404 18193 23.100.95.109 172.71.219.30 - - [25/Apr/2026:01:16:10 -0300] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 18193 23.100.95.109 172.71.219.30 - - [25/Apr/2026:01:16:11 -0300] "GET //wp-2019.php HTTP/1.1" 404 18193 23.100.95.109 172.71.219.30 - - [25/Apr/2026:01:16:11 -0300] "GET //wp-content/themes/about.php HTTP/1.1" 404 18193 show less	Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-04-25 04:10:17 (4 months ago)	Zombie network / Bot scanner detected: [GET] /simple.php [GET] /templates/beez3/index.php [GET] /te ... show more Zombie network / Bot scanner detected: [GET] /simple.php [GET] /templates/beez3/index.php [GET] /templates/beez3/1.php [GET] /randkeyword.php [GET] /ee.php [GET] /error.php [GET] /gzak2w.php [GET] /install.php [GET] /hehe.php [GET] /index/function.php [GET] /radio.php [GET] /functions.php [GET] /files/autoload_classmap.php [GET] /disagreed.php [GET] /feeds.php [GET] /css/autoload_classmap.php [GET] /jp.php [GET] /doc.php [GET] /images/wp-login.php [GET] /hehehehe.php [GET] /help.php [GET] /moon.php [GET] /f35.php [GET] /sim.php/wp-includes/certificates/plugins.php [GET] /flower.php [GET] /sad/about.php [GET] /mah/function.php [GET] /room.php [GET] /ova.php [GET] /ds.php [GET] /en.php [GET] /new.php [GET] /index.php [GET] /function.php [GET] /favicon.php [GET] /print/bkindex.php [GET] /files.php [GET] /ggfi.php [GET] /dropdown.php [GET] /meta.php [GET] /data.php [GET] /gecko-new.php [GET] /class-wp-lock.php [GET] /credits.php [GET] /504.php [GET] /admin/function.php [GET ...(Truncated) show less	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 129 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.37

🇭🇰 165.154.66.193

🇺🇸 91.230.168.208

🇫🇷 85.217.140.36

🇰🇷 52.141.45.117

🇪🇨 200.24.134.12

🇧🇷 189.125.111.177

🇸🇬 178.128.53.162

🇬🇧 35.203.210.206

🇷🇴 2.57.121.25

🇺🇸 2a03:2880:f818:1b::

🇳🇱 204.76.203.222

🇭🇰 156.225.1.99

🇨🇳 8.152.209.0

🇺🇦 195.238.176.70

🇳🇱 195.178.110.242

🇲🇾 195.86.192.66

🇹🇳 165.50.23.240

🇫🇮 147.185.133.16

🇮🇳 103.167.243.204