JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.194.22.129

4.194.22.129 was found in our database!

This IP was reported 175 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.194.22.129

Whois 4.194.22.129

IP Abuse Reports for 4.194.22.129:

This IP address has been reported a total of 175 times from 144 distinct sources. 4.194.22.129 was first reported on June 29th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-29 17:28:48 (7 minutes ago)	4.194.22.129 - - [29/Jun/2026:11:30:06 -0500] "GET /adminfuns.php HTTP/1.1" 302 222 "-" "Mozilla/5.0 ... show more 4.194.22.129 - - [29/Jun/2026:11:30:06 -0500] "GET /adminfuns.php HTTP/1.1" 302 222 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.22.129 - - [29/Jun/2026:12:23:23 -0500] "GET /adminfuns.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.22.129 - - [29/Jun/2026:12:28:48 -0500] "GET /adminfuns.php HTTP/1.1" 301 250 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-06-29 17:27:18 (8 minutes ago)	[Mon Jun 29 18:27:16.989958 2026] [proxy_fcgi:error] [pid 1291849:tid 139821829834304] [client 4.194 ... show more [Mon Jun 29 18:27:16.989958 2026] [proxy_fcgi:error] [pid 1291849:tid 139821829834304] [client 4.194.22.129:28460] AH01071: Got error 'Primary script unknown' [Mon Jun 29 18:27:17.218926 2026] [proxy_fcgi:error] [pid 1291849:tid 139822039553600] [client 4.194.22.129:28460] AH01071: Got error 'Primary script unknown' [Mon Jun 29 18:27:17.611431 2026] [proxy_fcgi:error] [pid 1291849:tid 139822618355264] [client 4.194.22.129:28460] AH01071: Got error 'Primary script unknown' [Mon Jun 29 18:27:17.806931 2026] [proxy_fcgi:error] [pid 1291849:tid 139821838227008] [client 4.194.22.129:28460] AH01071: Got error 'Primary script unknown' [Mon Jun 29 18:27:18.197594 2026] [proxy_fcgi:error] [pid 1291849:tid 139821846619712] [client 4.194.22.129:28460] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 Skyrider	2026-06-29 17:26:25 (9 minutes ago)	crowdsecurity/http-probing	Web App Attack
🇩🇪 MBombeck	2026-06-29 17:24:51 (11 minutes ago)	Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures	Web App Attack
🇳🇱 Mangelot Hosting	2026-06-29 17:16:19 (19 minutes ago)	(PERMBLOCK) 4.194.22.129 (SG/Singapore/-) has had more than 4 temp blocks in the last 86400 secs; Po ... show more (PERMBLOCK) 4.194.22.129 (SG/Singapore/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-06-29 17:16:08 (20 minutes ago)	Automatically blocked after 7 security events. Observed repeated web application attack probes. Sour ... show more Automatically blocked after 7 security events. Observed repeated web application attack probes. Source: Cloudflare security controls. show less	Hacking Web App Attack
🇬🇷 setupgr	2026-06-29 17:07:24 (28 minutes ago)	(mod_security) mod_security (id:1000001) triggered by 4.194.22.129 (SG/Singapore/-/Singapore/-/[AS80 ... show more (mod_security) mod_security (id:1000001) triggered by 4.194.22.129 (SG/Singapore/-/Singapore/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jun 29 20:07:21.839059 2026] [security2:error] [pid 2347194:tid 2347330] [client 4.194.22.129:12655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/ioxi-o.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /ioxi-o.php"] [severity "CRITICAL"] [tag "security"] [hostname "www.babis.photo"] [uri "/ioxi-o.php"] [unique_id "akKmSTJqsraJLmm8BLIIlQAAAYc"] show less	Port Scan
🇫🇷 sthoyer.de	2026-06-29 17:05:26 (30 minutes ago)	4.194.22.129 - - [29/Jun/2026:19:05:24 +0200] "GET /inputs.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (W ... show more 4.194.22.129 - - [29/Jun/2026:19:05:24 +0200] "GET /inputs.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.22.129 - - [29/Jun/2026:19:05:25 +0200] "GET /ioxi-o.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.22.129 - - [29/Jun/2026:19:05:25 +0200] "GET /function/function.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 ctidrv	2026-06-29 17:03:22 (32 minutes ago)	Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/ ... show more Honeypot detection. Threat score: 90/100. Collector: shell_trap. \| Request: GET /wp-content/uploads/index.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 \| rDNS: 4.194.22.129 \| Reasons: webshell_probe show less	Bad Web Bot
🇦🇺 nzhost.co.nz	2026-06-29 17:00:35 (35 minutes ago)	$f2bV_matches	Hacking Brute-Force
🇩🇪 Blexyel	2026-06-29 16:55:43 (40 minutes ago)	4.194.22.129 - - [29/Jun/2026:18:55:43 +0200] "GET /wp-login.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 ... show more 4.194.22.129 - - [29/Jun/2026:18:55:43 +0200] "GET /wp-login.php HTTP/1.1" 404 435 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "deranged.blog" ... show less	Brute-Force Web App Attack
🇺🇸 etu brutus	2026-06-29 16:49:21 (46 minutes ago)	4.194.22.129 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇺🇦 URAN Publishing Service	2026-06-29 16:41:47 (54 minutes ago)	4.194.22.129 - - [29/Jun/2026:19:41:41 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 785 " ... show more 4.194.22.129 - - [29/Jun/2026:19:41:41 +0300] "GET /wp-content/uploads/index.php HTTP/1.1" 404 785 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.22.129 - - [29/Jun/2026:19:41:47 +0300] "GET /wp-admin/user.php HTTP/1.1" 404 785 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇺 Reaper	2026-06-29 16:38:16 (57 minutes ago)	GET /admin.php	Web App Attack
🇮🇳 dineshskt4all	2026-06-29 16:34:47 (1 hour ago)	[Mon Jun 29 16:34:44.717163 2026] [proxy_fcgi:error] [pid 3392352:tid 138343840999104] [client 4.194 ... show more [Mon Jun 29 16:34:44.717163 2026] [proxy_fcgi:error] [pid 3392352:tid 138343840999104] [client 4.194.22.129:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force

Showing 1 to 15 of 175 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 178.16.53.241

🇵🇱 74.248.36.50

🇺🇸 65.49.1.193

🇺🇸 216.218.206.97

🇫🇷 195.154.55.188

🇬🇧 185.161.7.188

🇩🇪 69.5.169.248

🇺🇸 64.62.156.95

🇺🇸 64.62.156.78

🇺🇸 64.62.156.75

🇨🇳 60.255.231.61

🇷🇺 213.108.251.83

🇺🇸 198.98.62.211

🇧🇷 170.238.160.191

🇫🇷 103.110.160.226

🇩🇪 91.192.10.179

🇳🇱 91.92.40.5

🇺🇸 64.62.156.66

🇺🇸 64.62.156.41

🇺🇸 64.62.156.32