4.155.134.49
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Moses Lake, Washington
Abuse Reports
Total reports
14 from
13 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇯🇵 demonsword |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.google.com:443
|
Open Proxy Port Scan | |
| 🇯🇵 SentinalX by uzumaru |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: check-host.net:443
|
Open Proxy Port Scan | |
| Anonymous |
|
Port Scan | |
| 🇫🇷 service Informatique |
/___proxy_subdomain_whm/login
|
Web App Attack | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa01,wa02]
|
Hacking Brute-Force Bad Web Bot Web App Attack | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02]
|
Hacking Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 rellim.com |
|
Port Scan | |
| 🇭🇰 Anonymous |
2026-07-25 08:35:11 warning[3512838]: host unknown[4.155.134.49]: unauthorized access attempted: tcp/8080
|
Port Scan Brute-Force | |
| 🇵🇱 Wepted |
Port scan detected by honeypot
|
Port Scan Hacking | |
| Anonymous |
|
Bad Web Bot | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=29513 dstport=2082
|
Port Scan | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| Anonymous |
denied traffic to a honeypot network. destination port 2087.
|
Port Scan Hacking | |
| 🇺🇸 theanalogmaker |
CrowdSec: Symphony auto-ban: /___proxy_subdomain_whm/login/?login_only=1 (99.5% confidence) (720h ban)
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown