JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.193.112.52

4.193.112.52 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.193.112.52

Whois 4.193.112.52

IP Abuse Reports for 4.193.112.52:

This IP address has been reported a total of 47 times from 16 distinct sources. 4.193.112.52 was first reported on November 17th 2022, and the most recent report was 3 years ago.

Old Reports: The most recent abuse report for this IP address is from 3 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 zwh	2023-01-27 03:21:55 (3 years ago)	Attack for XMLRPC	Web App Attack
🇮🇩 hermawan	2023-01-19 03:04:49 (3 years ago)	[Thu Jan 19 09:16:19.560086 2023] [security2:error] [pid 286395:tid 140207057389120] [client 4.193.1 ... show more [Thu Jan 19 09:16:19.560086 2023] [security2:error] [pid 286395:tid 140207057389120] [client 4.193.112.52:60575] [client 4.193.112.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:rsd. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: r found within ARGS_NAMES:rsd: rsd request_line = GET //xmlrpc.php?rsd HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/xmlrpc.php"] [unique_id "Y8in88TjUdjOM20uLYciVAAAA_o"] [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[286495] [vtW6hGxy/sE] [Y8in88TjUdjOM20uLYciVAAAA_o] keep_alive=[0] [2023-01-19 09:16:19.560090] [R:Y8in88TjUdjOM20uLYciVAAAA_o] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ... show less	Hacking Web App Attack
🇨🇦 pusathosting.com	2023-01-19 02:03:05 (3 years ago)	2ds22 bruteforce	Brute-Force Web App Attack
🇬🇧 Delta Whiskey	2023-01-18 11:11:15 (3 years ago)	Multiple failed WordPress authentication attempts	Brute-Force Web App Attack
🇨🇦 Mediashaker	2023-01-18 05:26:29 (3 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.193.112.52 (SG/Singapo ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.193.112.52 (SG/Singapore/-) show less	Port Scan
🇮🇩 Secmon	2023-01-17 01:45:22 (3 years ago)	hacking ip	Hacking Web App Attack
🇮🇩 hermawan	2023-01-17 01:21:37 (3 years ago)	[Tue Jan 17 08:18:32.953027 2023] [security2:error] [pid 726727:tid 140030170678848] [client 4.193.1 ... show more [Tue Jan 17 08:18:32.953027 2023] [security2:error] [pid 726727:tid 140030170678848] [client 4.193.112.52:60417] [client 4.193.112.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:dizo. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: d found within ARGS_NAMES:dizo: dizo request_line = GET /wp-signin.php?dizo&ping HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-signin.php"] [unique_id "Y8X3aFzc0pycgegkNtg6HgAAArA"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[726907] [8ipiecNDaLU] [Y8X3aFzc0pycgegkNtg6HgAAArA] keep_alive=[0] [2023-01-17 08:18:32.953031] [R:Y8X3aFzc0pycgegkNtg6HgAAArA] UA:'wp_is_mobile' Host:'karangp ... show less	Hacking Web App Attack
🇮🇩 Secmon	2023-01-16 09:51:33 (3 years ago)	Event Type: Illegal Resource Access	Hacking Exploited Host
🇪🇸 10dencehispahard SL	2023-01-12 09:23:36 (3 years ago)	Abusive use detected	Brute-Force
🇬🇧 Delta Whiskey	2023-01-11 11:15:50 (3 years ago)	Multiple failed WordPress authentication attempts	Brute-Force Web App Attack
🇮🇩 hermawan	2023-01-10 08:08:34 (3 years ago)	[Tue Jan 10 15:03:39.187585 2023] [security2:error] [pid 204508:tid 140094094186048] [client 4.193.1 ... show more [Tue Jan 10 15:03:39.187585 2023] [security2:error] [pid 204508:tid 140094094186048] [client 4.193.112.52:53522] [client 4.193.112.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "." at ARGS_NAMES:dizo. [file "/etc/modsecurity/coreruleset-3.3.4/rules/REQUEST-921-PROTOCOL-ATTACK.conf"] [line "501"] [id "921170"] [data "Matched Data: d found within ARGS_NAMES:dizo: dizo request_line = GET /wp-signin.php?dizo&ping HTTP/1.1"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/3"] [tag "OWASP_CRS"] [tag "capec/1000/152/137/15/460"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/wp-signin.php"] [unique_id "Y70b2-IIw7VmCJJaScRdiwAAAU8"], referer www.bing.com [karangploso.jatim.bmkg.go.id] [karangploso.jatim.bmkg.go.id] top=[204635] [bVVIUsw0/HU] [Y70b2-IIw7VmCJJaScRdiwAAAU8] keep_alive=[0] [2023-01-10 15:03:39.187589] [R:Y70b2-IIw7VmCJJaScRdiwAAAU8] UA:'wp_is_mobile' Host:'karangp ... show less	Hacking Web App Attack
🇸🇬 pusathosting.com	2023-01-10 02:00:03 (3 years ago)	2ds22 bruteforce	Brute-Force Web App Attack
🇨🇦 Mediashaker	2023-01-05 09:04:59 (3 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.193.112.52 (SG/Singapo ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.193.112.52 (SG/Singapore/-) show less	Port Scan
🇬🇧 Delta Whiskey	2023-01-05 08:20:42 (3 years ago)	Multiple failed WordPress authentication attempts	Brute-Force Web App Attack
🇩🇪 niceshops.com	2022-12-27 23:56:45 (3 years ago)	Web Attack ([28/Dec/2022:05:56:39.935] GET //wp-includes/wlwmanifest.xml)	Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2400:cb00:637:1000:733:c5ec:2b92:3c48

🇲🇾 2400:cb00:496:1000:ed9d:8fa9:fdd6:4e4b

🇺🇸 2400:cb00:369:1000:95ff:b3fd:5145:6927

🇺🇸 2400:cb00:109:1000:99c6:605d:55c0:a094

🇺🇸 216.25.89.153

🇧🇷 201.139.186.238

🇧🇪 198.235.24.218

🇳🇱 193.47.62.69

🇺🇦 176.103.15.195

🇺🇸 162.216.150.221

🇮🇳 113.11.231.104

🇻🇳 103.195.238.103

🇳🇱 77.239.124.43

🇨🇳 42.51.25.93

🇧🇷 2400:cb00:722:1000:fa86:c029:d323:804b

🇨🇳 218.78.186.58

🇨🇱 201.246.18.32

🇬🇧 195.96.139.142

🇬🇧 185.192.70.35

🇩🇪 165.22.91.113