AbuseIPDB » 9.223.178.131
9.223.178.131 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 34% : ?
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
πΈπͺ
Sweden
City
Gavle, Gavleborg
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 9.223.178.131 :
This IP address has been reported a total of
5
times from
5 distinct
sources.
9.223.178.131 was first reported on
June 25th 2026 , and the most recent report was
2 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
π§π¬
HighWay
2026-06-25 21:16:33
(2 days ago)
9.223.178.131 - - [25/Jun/2026:21:16:23 +0000] "POST /index.php?option=com_sppagebuilder&task=asset. ...
show more
9.223.178.131 - - [25/Jun/2026:21:16:23 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 32313 "-" "Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc"
9.223.178.131 - - [25/Jun/2026:21:16:24 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28218 "-" "Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc"
9.223.178.131 - - [25/Jun/2026:21:16:25 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28218 "-" "Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc"
9.223.178.131 - - [25/Jun/2026:21:16:26 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28218 "-" "Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc"
9.223.178.131 - - [25/Jun/2026:21:16:27 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28218 "-" "Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc"
9.223.178.131 - - [25/Jun/2026:21:16:28 +0000] "POST /index.
...
show less
Port Scan
Bad Web Bot
π²πΎ
Rizzy
2026-06-25 21:11:08
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
π«π·
largo-it.net
2026-06-25 19:51:38
(2 days ago)
Jun 25 21:50:38 vps-9f3cdc33 haproxy[901649]: 9.223.178.131:63908 [25/Jun/2026:21:49:55.310] www_fro ...
show more
Jun 25 21:50:38 vps-9f3cdc33 haproxy[901649]: 9.223.178.131:63908 [25/Jun/2026:21:49:55.310] www_frontend~ finance_cluster/finance1_test1_https 0/0/15527/27642/43169 404 3297 - - ---- 54/21/9/9/1 0/0 "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1"
Jun 25 21:50:38 vps-9f3cdc33 haproxy[901649]: 9.223.178.131:63546 [25/Jun/2026:21:49:44.302] www_frontend~ finance_cluster/finance1_test1_https 0/0/26505/27674/54179 404 3297 - - ---- 53/20/8/8/2 0/0 "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1"
Jun 25 21:50:38 vps-9f3cdc33 haproxy[901649]: 9.223.178.131:64137 [25/Jun/2026:21:50:06.160] www_frontend~ finance_cluster/finance1_test1_https 0/0/5468/26880/32348 404 3297 - - ---- 53/19/7/7/0 0/0 "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1"
Jun 25 21:50:38 vps-9f3cdc33 haproxy[901649]: 9.223.178.131:63191 [25/Jun/2026:21:49:33.133] www_frontend~ finance_cluster/finance1_test1_https 0/30003/7671/2771
...
show less
Hacking
Bad Web Bot
Web App Attack
π©πͺ
AetherFox
2026-06-25 18:55:10
(2 days ago)
AetherFox VoidGuard detected: [Thu Jun 25 18:55:05.717919 2026] [authz_core:error] [pid 2159074:tid ...
show more
AetherFox VoidGuard detected: [Thu Jun 25 18:55:05.717919 2026] [authz_core:error] [pid 2159074:tid 2159083] [client 9.223.178.131:63767] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php
[Thu Jun 25 18:55:06.789756 2026] [authz_core:error] [pid 2159074:tid 2159104] [client 9.223.178.131:63767] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php
[Thu Jun 25 18:55:07.659119 2026] [authz_core:error] [pid 2159074:tid 2159110] [client 9.223.178.131:63767] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php
[Thu Jun 25 18:55:08.573111 2026] [authz_core:error] [pid 2159074:tid 2159094] [client 9.223.178.131:63767] AH01630: client denied by server configuration: proxy:https://[MASKED]/index.php
[Thu Jun 25 18:55:09.625485 2026] [authz_core:error] [pid 2159074:tid 2159112] [client 9.223.178.131:63767] AH01630: client denied by server configuration: proxy:https://[MASKED]/
...
show less
Bad Web Bot
Web App Attack
π³π±
enpepet
2026-06-25 17:31:43
(2 days ago)
GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/in ...
show more
GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (X11; Linux x86_64) sppb-rce-poc URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: