JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.193.171.159

4.193.171.159 was found in our database!

This IP was reported 229 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.193.171.159

Whois 4.193.171.159

IP Abuse Reports for 4.193.171.159:

This IP address has been reported a total of 229 times from 171 distinct sources. 4.193.171.159 was first reported on June 30th 2026, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-01 11:57:16 (28 minutes ago)	[WedJul0113:57:12.0502292026][security2:error][pid1505725:tid1505758][client4.193.171.159:0]ModSecur ... show more [WedJul0113:57:12.0502292026][security2:error][pid1505725:tid1505758][client4.193.171.159:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpanel.dsfiduciaria.ch\"][uri\"/wp-config-sample.php\"][unique_id\"akUAmGcHylrfwaIozMdH4wAAABA\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-07-01 11:41:34 (44 minutes ago)	4.193.171.159 - [01/Jul/2026:04:41:31 -0700] audiobookshelf.koselig.dynu.net "GET /wp-content/plugin ... show more 4.193.171.159 - [01/Jul/2026:04:41:31 -0700] audiobookshelf.koselig.dynu.net "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4557 4.193.171.159 - [01/Jul/2026:04:41:31 -0700] audiobookshelf.koselig.dynu.net "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 504 4.193.171.159 - [01/Jul/2026:04:41:32 -0700] audiobookshelf.koselig.dynu.net "GET /archive.php HTTP/1.1" 404 486 4.193.171.159 - [01/Jul/2026:04:41:32 -0700] audiobookshelf.koselig.dynu.net "GET /alfa.php HTTP/1.1" 404 483 4.193.171.159 - [01/Jul/2026:04:41:33 -0700] audiobookshelf.koselig.dynu.net "GET /wp-content/languages/chosen.php HTTP/1.1" 404 506 ... show less	Web App Attack
🇨🇦 Not Fake	2026-07-01 11:35:56 (50 minutes ago)	$f2bV_matches	Web App Attack
🇬🇧 rakkor	2026-07-01 11:29:54 (56 minutes ago)	2026-07-01T12:29:54+01:00 NAS [Wed Jul 01 12:29:54.208352 2026] [proxy_fcgi:error] [pid 22283:tid 22 ... show more 2026-07-01T12:29:54+01:00 NAS [Wed Jul 01 12:29:54.208352 2026] [proxy_fcgi:error] [pid 22283:tid 22294] [client 4.193.171.159:55168] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Hacking
🇮🇳 walkintoadmin	2026-07-01 11:08:33 (1 hour ago)	Azure/Microsoft/GCP/DO datacenter scanner wave, AbuseIPDB 100, log-scan 2026-07-01	Bad Web Bot Web App Attack
🇫🇷 Lunix	2026-07-01 10:54:50 (1 hour ago)		Brute-Force Web App Attack
Anonymous	2026-07-01 10:50:34 (1 hour ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"	Hacking Web App Attack
🇳🇱 WinnieHoneypots	2026-07-01 10:43:48 (1 hour ago)	Probe hitting /wp-content/plugins/hellopress/wp_filemanager.php detected. Whatcha lookin for in ther ... show more Probe hitting /wp-content/plugins/hellopress/wp_filemanager.php detected. Whatcha lookin for in there?! show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-01 10:27:47 (1 hour ago)	4.193.171.159 - - [01/Jul/2026:06:27:43 -0400] "GET /alfa.php HTTP/1.1" 404 25647 "-" "-" 4.193.171. ... show more 4.193.171.159 - - [01/Jul/2026:06:27:43 -0400] "GET /alfa.php HTTP/1.1" 404 25647 "-" "-" 4.193.171.159 - - [01/Jul/2026:06:27:44 -0400] "GET /wp-content/languages/chosen.php HTTP/1.1" 404 25698 "-" "-" 4.193.171.159 - - [01/Jul/2026:06:27:45 -0400] "GET /chosen/chosen.php HTTP/1.1" 404 25670 "-" "-" 4.193.171.159 - - [01/Jul/2026:06:27:45 -0400] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 404 25680 "-" "-" 4.193.171.159 - - [01/Jul/2026:06:27:46 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 404 25694 "-" "-" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-07-01 10:16:58 (2 hours ago)	HTTP vulnerability scanning	Web App Attack
🇩🇪 Melle	2026-07-01 10:10:08 (2 hours ago)	Blocked by CrowdSec \| Scenario: crowdsecurity/http-wordpress-scan \| 4.193.171.159 triggered 4 events ... show more Blocked by CrowdSec \| Scenario: crowdsecurity/http-wordpress-scan \| 4.193.171.159 triggered 4 events \| Detected: 2026-07-01T10:10:03.839450093Z show less	Web App Attack Hacking
🇨🇦 polycoda	2026-07-01 10:03:40 (2 hours ago)	🧭 vhost fuzzing	Hacking Web App Attack
🇳🇱 JCB	2026-07-01 09:38:00 (2 hours ago)	[Wed Jul 01 08:10:50 2026] [info] [client 4.193.171.159:60538] AH01382: Request header read timeout ... show more [Wed Jul 01 08:10:50 2026] [info] [client 4.193.171.159:60538] AH01382: Request header read timeout show less	Web App Attack Hacking
🇩🇪 ramazan	2026-07-01 09:23:19 (3 hours ago)	Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /alfa.php /archive.php /assets/css/index.php /chosen/chose ... show more Fail2Ban: nginx-4xx \| Failures: 10 \| Log: /alfa.php /archive.php /assets/css/index.php /chosen/chosen.php /sendmail.php show less	Web App Attack Hacking
🇭🇺 kranem	2026-07-01 09:00:23 (3 hours ago)	Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /ALFA_DATA Timestamp: 2026-07-01T06:35:03Z User-Agent: empty show less	Bad Web Bot

Showing 1 to 15 of 229 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 157.55.39.59

🇳🇱 91.92.40.5

🇫🇷 85.217.140.53

🇰🇷 39.121.95.70

🇫🇷 2001:660:6307:100::16

🇺🇸 216.158.235.100

🇸🇪 196.196.31.84

🇨🇦 168.93.221.64

🇵🇭 143.44.184.66

🇷🇴 92.118.39.59

🇳🇱 45.153.34.181

🇺🇸 20.65.193.244

🇨🇳 14.24.241.78

🇫🇮 2a00:1450:4010:c20::12d

🇺🇸 172.215.239.48

🇸🇬 129.226.83.92

🇺🇸 47.251.253.223

🇲🇽 38.194.253.100

🇫🇮 2a00:1450:4010:c20::120

🇭🇺 193.68.57.43