JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 40.83.91.76

40.83.91.76 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 40.83.91.76

Whois 40.83.91.76

IP Abuse Reports for 40.83.91.76:

This IP address has been reported a total of 112 times from 99 distinct sources. 40.83.91.76 was first reported on July 1st 2026, and the most recent report was 11 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-07-03 03:15:35 (11 minutes ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 40.83.91.76 162.158.179.218 - - [01/Jul/2026:17:34: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 40.83.91.76 162.158.179.218 - - [01/Jul/2026:17:34:11 -0300] "GET /a.php HTTP/1.1" 404 18193 show less	Bad Web Bot
Anonymous	2026-07-02 21:07:18 (6 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: HK, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇩🇪 www.Examensfragen.de	2026-07-02 08:30:39 (18 hours ago)		Web Spam Bad Web Bot
🇬🇧 openstrike.co.uk	2026-07-02 05:14:41 (22 hours ago)	385 attacks on PHP URLs: GET /inputs.php HTTP/1.1	Web App Attack
🇫🇮 Christopher Hughes	2026-07-02 03:26:13 (1 day ago)	[Thu Jul 02 04:26:12.211000 2026] [proxy_fcgi:error] [pid 1390872:tid 139822609962560] [client 40.83 ... show more [Thu Jul 02 04:26:12.211000 2026] [proxy_fcgi:error] [pid 1390872:tid 139822609962560] [client 40.83.91.76:6117] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:26:12.423288 2026] [proxy_fcgi:error] [pid 1390872:tid 139822784255552] [client 40.83.91.76:6117] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:26:12.599197 2026] [proxy_fcgi:error] [pid 1390873:tid 139822240880192] [client 40.83.91.76:9660] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:26:12.661708 2026] [proxy_fcgi:error] [pid 1390872:tid 139822767470144] [client 40.83.91.76:6117] AH01071: Got error 'Primary script unknown' [Thu Jul 02 04:26:12.827856 2026] [proxy_fcgi:error] [pid 1390873:tid 139821158745664] [client 40.83.91.76:9660] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇰 ScamAware	2026-07-02 03:24:07 (1 day ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight. show less	Web App Attack
🇺🇸 Mundo Bueno	2026-07-02 03:24:01 (1 day ago)	[ISILIA Protection v2.1] Tentative d'accès: /alfa-rex.php \| Pays: HK \| UA: Mozilla/5.0 (Windows NT 1 ... show more [ISILIA Protection v2.1] Tentative d'accès: /alfa-rex.php \| Pays: HK \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Sa show less	Hacking Web App Attack
🇩🇪 Didier Lagaert	2026-07-02 03:06:29 (1 day ago)	lie-21 : Rogue PHP files=>/a.php	Hacking
🇫🇮 Christopher Hughes	2026-07-02 02:50:29 (1 day ago)	[Thu Jul 02 03:50:27.998268 2026] [proxy_fcgi:error] [pid 1390873:tid 139822240880192] [client 40.83 ... show more [Thu Jul 02 03:50:27.998268 2026] [proxy_fcgi:error] [pid 1390873:tid 139822240880192] [client 40.83.91.76:9946] AH01071: Got error 'Primary script unknown' [Thu Jul 02 03:50:28.221168 2026] [proxy_fcgi:error] [pid 1390873:tid 139821183923776] [client 40.83.91.76:9946] AH01071: Got error 'Primary script unknown' [Thu Jul 02 03:50:28.444163 2026] [proxy_fcgi:error] [pid 1390873:tid 139821167138368] [client 40.83.91.76:9946] AH01071: Got error 'Primary script unknown' [Thu Jul 02 03:50:28.730888 2026] [proxy_fcgi:error] [pid 1390873:tid 139822232487488] [client 40.83.91.76:9946] AH01071: Got error 'Primary script unknown' [Thu Jul 02 03:50:28.952504 2026] [proxy_fcgi:error] [pid 1390873:tid 139822257665600] [client 40.83.91.76:9946] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇨🇿 ptlab	2026-07-02 02:45:25 (1 day ago)	Detected xmlrpc_brute attack from WP-host.	Hacking Web App Attack
🇹🇭 thaizone.com	2026-07-02 02:37:49 (1 day ago)	Hacking attempts against websites (D1) #2	Web App Attack Hacking
🇬🇷 setupgr	2026-07-02 02:35:46 (1 day ago)	(mod_security) mod_security (id:1000001) triggered by 40.83.91.76 (HK/Hong Kong/Kowloon/Hong Kong/-/ ... show more (mod_security) mod_security (id:1000001) triggered by 40.83.91.76 (HK/Hong Kong/Kowloon/Hong Kong/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:35:45.843621 2026] [security2:error] [pid 3340635:tid 3340762] [client 40.83.91.76:11230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/ioxi-o.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /ioxi-o.php"] [severity "CRITICAL"] [tag "security"] [hostname "www.davids.gr"] [uri "/ioxi-o.php"] [unique_id "akXOgTxhSsojJ0KTg5QJTAAABM4"] show less	Port Scan
🇩🇪 Prodscape	2026-07-02 02:24:17 (1 day ago)	(XMLRPC) WP XMLPRC Attack 40.83.91.76 (HK/Hong Kong/-): 5 in the last 86400 secs; Ports: ; Directio ... show more (XMLRPC) WP XMLPRC Attack 40.83.91.76 (HK/Hong Kong/-): 5 in the last 86400 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER show less	Port Scan
🇸🇬 Cloudkul Cloudkul	2026-07-02 02:20:42 (1 day ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇯🇵 beon	2026-07-02 02:12:51 (1 day ago)	[DateTime=>2026-07-02T02:12:51Z to 2026-07-02T02:12:58Z (UTC)] , [HoneyPot_Hits=>74 times] , [HoneyP ... show more [DateTime=>2026-07-02T02:12:51Z to 2026-07-02T02:12:58Z (UTC)] , [HoneyPot_Hits=>74 times] , [HoneyPots=>/a.php, /aa.php, /aaa.php, /ab.php, /lock360.php, /anonse/lock360.php and others] , [total_Hits=>74 times] , [hit_per_second=>10.57] , [Keyword=>WordPress, PHP web shells] show less	Bad Web Bot Web App Attack Hacking

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 199.195.248.228

🇺🇸 195.184.76.9

🇨🇳 171.213.162.88

🇧🇬 79.124.59.78

🇬🇧 45.133.173.90

🇻🇪 38.171.246.153

🇺🇸 34.217.208.233

🇧🇷 205.210.31.199

🇺🇸 196.51.127.55

🇵🇪 179.6.2.228

🇵🇰 116.90.116.209

🇮🇳 103.154.55.228

🇱🇹 62.60.130.219

🇮🇹 57.131.13.145

🇫🇷 45.154.138.245

🇳🇱 45.148.10.62

🇳🇱 37.49.224.45

🇧🇪 34.38.58.246

🇩🇪 2603:1062:0:ad::10

🇺🇸 196.51.124.180