JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.81.25.99

40.81.25.99 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 88%: ?

88%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 40.81.25.99

Whois 40.81.25.99

IP Abuse Reports for 40.81.25.99:

This IP address has been reported a total of 18 times from 15 distinct sources. 40.81.25.99 was first reported on June 23rd 2026, and the most recent report was 48 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇾 Rizzy	2026-06-26 00:42:15 (48 minutes ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-25 21:09:35 (4 hours ago)	Request Overload (141)	Brute-Force Web App Attack
Anonymous	2026-06-25 13:40:05 (11 hours ago)	\| [Dangerous/Hong Kong] Aggressive IP 40.81.25.99 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Hong Kong] Aggressive IP 40.81.25.99 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇫🇷 conseilgouz	2026-06-25 05:12:21 (20 hours ago)	sce-7 : Trying access unauthorized files/dir=>/wp-admin/	Hacking
Anonymous	2026-06-25 04:18:24 (21 hours ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
Anonymous	2026-06-25 03:08:34 (22 hours ago)	[redacted] 40.81.25.99 - - [25/Jun/2026:05:08:25 +0200] "GET /wp-admin/ HTTP/1.1" 404 236 "-" "Mozil ... show more [redacted] 40.81.25.99 - - [25/Jun/2026:05:08:25 +0200] "GET /wp-admin/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:05:08:26 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:05:08:26 +0200] "GET /wp-admin/css/colors/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:05:08:27 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:05:08:28 +0200] "GET /wp-admin/includes/ HTTP/1.1" 404 236 ... show less	Hacking Web App Attack
Anonymous	2026-06-25 02:41:54 (22 hours ago)	[redacted] 40.81.25.99 - - [25/Jun/2026:04:41:50 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 236 "-" "M ... show more [redacted] 40.81.25.99 - - [25/Jun/2026:04:41:50 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:04:41:50 +0200] "GET /wp-admin/css/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:04:41:51 +0200] "GET /wp-admin/css/colors/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:04:41:51 +0200] "GET /wp-admin/css/colors/ HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" [redacted] 40.81.25.99 - - [25/Jun/2026:04:41:52 +0200] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 236 "-" "Moz ... show less	Hacking Web App Attack
🇳🇿 Antinson	2026-06-24 21:41:35 (1 day ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇦🇺 2000cn.com.au	2026-06-24 18:57:26 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇺🇸 cwytech	2026-06-24 13:25:14 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-admin-interface-prob ... show more Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-admin-interface-probing. show less	Bad Web Bot Web App Attack
🇺🇸 jcbriar	2026-06-24 00:47:15 (2 days ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇩🇪 rh24	2026-06-24 00:30:22 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 40.81.25.99 (HK/Hong Kong/-): (CF_ENAB ... show more (mod_security) mod_security triggered on hostname [redacted] 40.81.25.99 (HK/Hong Kong/-): (CF_ENABLE) show less	SQL Injection
🇫🇷 Octopuce	2026-06-23 20:27:09 (2 days ago)	Aggressive web search of vulnerable pages: /wp-content/IXR/ /.well-known/ /uploads/ /files/ /file/ / ... show more Aggressive web search of vulnerable pages: /wp-content/IXR/ /.well-known/ /uploads/ /files/ /file/ /images/ /cgi-bin/ /.tmb/ /wp-admin/ /wp-adm ... show less	Web App Attack
🇫🇷 bazter.pro	2026-06-23 20:24:03 (2 days ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-06-23 19:42:11 (2 days ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.40

🇲🇽 187.141.71.166

🇷🇺 185.13.112.110

🇨🇱 181.173.209.212

🇦🇷 181.46.9.215

🇸🇬 165.154.236.104

🇨🇦 159.89.127.234

🇻🇪 154.27.134.75

🇨🇮 154.0.30.137

🇺🇸 142.93.48.137

🇵🇭 139.135.192.159

🇹🇼 125.227.93.244

🇰🇷 125.130.102.172

🇨🇳 116.179.32.104

🇮🇩 103.154.231.122

🇨🇳 101.126.17.55

🇭🇰 101.36.106.78

🇷🇺 80.95.38.14

🇺🇸 71.6.233.233

🇺🇸 66.132.186.181