JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.194.11.138

4.194.11.138 was found in our database!

This IP was reported 348 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.194.11.138

Whois 4.194.11.138

IP Abuse Reports for 4.194.11.138:

This IP address has been reported a total of 348 times from 288 distinct sources. 4.194.11.138 was first reported on July 3rd 2026, and the most recent report was 35 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kuroneko_omu	2026-07-04 16:51:02 (35 minutes ago)	[autoreport] Probably Web App attack (eg. wp, phpmyadmin, ...)	Hacking Brute-Force Web App Attack
🇧🇪 Ivo Vynckier	2026-07-04 09:37:00 (7 hours ago)	4.194.11.138 - - [03/Jul/2026:17:52:29 +0200] "GET /h02ugyh.php HTTP/1.1" 404 27 "-" "-" 4.194.11.1 ... show more 4.194.11.138 - - [03/Jul/2026:17:52:29 +0200] "GET /h02ugyh.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:30 +0200] "GET /seiso.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:30 +0200] "GET /155.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:30 +0200] "GET /ppp.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:31 +0200] "GET /201.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:31 +0200] "GET /ops.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:31 +0200] "GET /samll.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:32 +0200] "GET /ingfo.php HTTP/1.1" 404 27 "-" "-" 4.194.11.138 - - [03/Jul/2026:17:52:32 +0200] "GET /error_log.php HTTP/1.1" 301 300 "-" "-" show less	Web App Attack
Anonymous	2026-07-04 09:23:37 (8 hours ago)	FortiWeb WAF: 93 attacks detected. Threat Score: 9400. Types: GEO IP(47), Client Management(46). Ori ... show more FortiWeb WAF: 93 attacks detected. Threat Score: 9400. Types: GEO IP(47), Client Management(46). Origin: Singapore. show less	Web App Attack
🇳🇱 JCB	2026-07-04 08:09:00 (9 hours ago)	4.194.11.138 - - [04/Jul/2026:04:31:05 +0300] "GET /by.php HTTP/1.1" 404 196 "-" "-" 4.194.11.138 - ... show more 4.194.11.138 - - [04/Jul/2026:04:31:05 +0300] "GET /by.php HTTP/1.1" 404 196 "-" "-" 4.194.11.138 - - [04/Jul/2026:04:31:05 +0300] "GET /cxs.php HTTP/1.1" 404 196 "-" "-" ... show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-07-04 05:14:54 (12 hours ago)	643 attacks on PHP URLs: GET /av.php HTTP/1.1	Web App Attack
🇲🇽 octageeks.com	2026-07-04 04:13:23 (13 hours ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇧🇷 Peregrine	2026-07-04 03:11:52 (14 hours ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 4.194.11.138 162.158.163.238 - - [03/Jul/2026:16:34:07 - ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 4.194.11.138 162.158.163.238 - - [03/Jul/2026:16:34:07 -0300] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 18149 4.194.11.138 172.69.165.19 - - [03/Jul/2026:16:34:08 -0300] "GET /zip.php HTTP/1.1" 404 18149 4.194.11.138 162.158.163.238 - - [03/Jul/2026:16:34:09 -0300] "GET /miru1.php HTTP/1.1" 404 18149 4.194.11.138 172.69.165.19 - - [03/Jul/2026:16:34:09 -0300] "GET /sump1.php HTTP/1.1" 404 18149 4.194.11.138 162.158.163.238 - - [03/Jul/2026:16:34:10 -0300] "GET /bajah.php HTTP/1.1" 404 18149 show less	Bad Web Bot Web App Attack
🇺🇸 LSPCCU	2026-07-04 03:10:36 (14 hours ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Br ... show more TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: Attacker IP 4. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇭🇺 kranem	2026-07-04 03:00:13 (14 hours ago)	Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-07-04T01:54:12Z User-Agent: empty show less	Bad Web Bot
🇵🇱 nfsec.pl	2026-07-04 02:12:50 (15 hours ago)	4.194.11.138 - - [04/Jul/2026:02:12:48 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.194.11.138 - - [04/Jul/2026:02:12:48 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 387 "-" "-" 4.194.11.138 - - [04/Jul/2026:02:12:48 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 403 387 "-" "-" 4.194.11.138 - - [04/Jul/2026:02:12:49 +0000] "GET /water.php HTTP/1.1" 403 387 "-" "-" 4.194.11.138 - - [04/Jul/2026:02:12:49 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 403 387 "-" "-" 4.194.11.138 - - [04/Jul/2026:02:12:50 +0000] "GET /zip.php HTTP/1.1" 403 387 "-" "-" ... show less	Web App Attack Exploited Host
Anonymous	2026-07-04 02:05:06 (15 hours ago)	PHP file probing detected by Fail2Ban	Web App Attack
Anonymous	2026-07-04 02:02:08 (15 hours ago)		Web App Attack Port Scan
🇩🇪 macrob	2026-07-04 02:01:59 (15 hours ago)	2026/07/04 02:01:42 [error] 1305277#1305277: 349270187 access forbidden by rule, client: 4.194.11.1 ... show more 2026/07/04 02:01:42 [error] 1305277#1305277: 349270187 access forbidden by rule, client: 4.194.11.138, server: binofferes.com, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "binofferes.com" 2026/07/04 02:01:57 [error] 1305277#1305277: 349270187 access forbidden by rule, client: 4.194.11.138, server: binofferes.com, request: "GET /wp-includes/css/index.php HTTP/1.1", host: "binofferes.com" 2026/07/04 02:01:57 [error] 1305277#1305277: 349270187 access forbidden by rule, client: 4.194.11.138, server: binofferes.com, request: "GET /wp-content/uploads/2021/02/index.php HTTP/1.1", host: "binofferes.com" ... show less	Web App Attack
🇪🇸 Francisco Vallejo	2026-07-04 02:01:07 (15 hours ago)	[Sat Jul 04 04:01:05.882406 2026] [core:info] [pid 1777694:tid 129640114919104] [client 4.194.11.138 ... show more [Sat Jul 04 04:01:05.882406 2026] [core:info] [pid 1777694:tid 129640114919104] [client 4.194.11.138:22233] AH00128: File does not exist: /var/www/menu_barluna/wp-content/plugins/hellopress/wp_filemanager.php [Sat Jul 04 04:01:06.205519 2026] [core:info] [pid 1777694:tid 129641539667648] [client 4.194.11.138:22233] AH00128: File does not exist: /var/www/menu_barluna/this_is_a_new_hello_world.php [Sat Jul 04 04:01:06.556205 2026] [core:info] [pid 1777694:tid 129641522882240] [client 4.194.11.138:22233] AH00128: File does not exist: /var/www/menu_barluna/water.php [Sat Jul 04 04:01:06.883688 2026] [core:info] [pid 1777694:tid 129641297733312] [client 4.194.11.138:22233] AH00128: File does not exist: /var/www/menu_barluna/3PJcpMFsD8B.php [Sat Jul 04 04:01:07.225270 2026] [core:info] [pid 1777694:tid 129641280947904] [client 4.194.11.138:22233] AH00128: File does not exist: /var/www/menu_barluna/zip.php ... show less	Brute-Force SSH
🇨🇿 ptlab	2026-07-04 02:00:03 (15 hours ago)	Detected wp_admin attack from WP-host.	Hacking Web App Attack

Showing 1 to 15 of 348 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 179.60.74.3

🇺🇸 172.200.228.35

🇺🇸 167.89.106.25

🇮🇳 122.187.228.253

🇮🇳 119.18.48.74

🇰🇷 112.186.30.56

🇺🇸 69.49.112.74

🇺🇸 50.116.2.219

🇯🇵 50.31.161.32

🇺🇸 35.222.220.5

🇰🇷 183.104.220.84

🇻🇳 103.166.182.186

🇹🇼 101.13.4.124

🇩🇪 87.183.48.164

🇪🇨 45.169.144.246

🇸🇬 45.82.78.102

🇹🇿 41.93.28.23

🇺🇸 34.138.243.156

🇳🇱 213.177.179.80

🇺🇸 209.85.161.50