4.148.8.97
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Phoenix, Arizona
Abuse Reports
Total reports
420 from
232 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Bedios GmbH |
Wordpress hacking attempt
|
Web App Attack | |
| 🇫🇷 votrewebfacile |
xmlrpc abuse
|
Brute-Force | |
| 🇫🇷 ecode hosting |
Domain : MailEnable WebMail
Rule : wp-login
2026-09-17 13:35:54 10.100.1.20 GET /wp-login.php - 443 - 4.148.8.97 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - 404 0 2 180 - -
|
Web App Attack | |
| 🇬🇧 pinguin |
|
Bad Web Bot | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host Web App Attack | |
| 🇩🇪 McClay |
Illegal access attempt:4.148.8.97 - - [17/Sep/2026:13:27:47 +0200] "GET /wp-login.php HTTP/1.1" 401 5249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
|
Hacking Web App Attack | |
| 🇩🇪 svr |
Abusive Automated Web Scanner
|
Web App Attack | |
| 🇹🇷 oalver |
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-login.php (HTTP 404). First seen: 2026-09-16. Risk score: 30/100.
|
Web App Attack | |
| Anonymous |
|
Web App Attack | |
| 🇺🇸 entangled_mongoose |
Probed /wp-login.php.
|
Web App Attack | |
| 🇩🇪 33three |
Fail2Ban jail WebAttack triggered
|
Brute-Force | |
| 🇨🇭 4server |
|
Hacking Web App Attack | |
| Anonymous |
[Thu Sep 17 12:19:43.468726 2026] [php:error] [pid 1703700:tid 1703700] [client 4.148.8.97:54078] script '/var/www/webmail/wp-login.php' not found or unable to stat
...
|
Brute-Force | |
| 🇪🇸 Francisco Vallejo |
|
Brute-Force SSH | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown