JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.194.24.143

4.194.24.143 was found in our database!

This IP was reported 264 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.194.24.143

Whois 4.194.24.143

IP Abuse Reports for 4.194.24.143:

This IP address has been reported a total of 264 times from 185 distinct sources. 4.194.24.143 was first reported on July 16th 2026, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 roxyapi	2026-07-17 06:17:46 (5 minutes ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /.well-known/gecko-litespee ... show more Honeypot: automated vulnerability scan / web app attack. Last probe: GET /.well-known/gecko-litespeed.php show less	Web App Attack Bad Web Bot
Anonymous	2026-07-17 06:16:38 (6 minutes ago)	4.194.24.143 - - [17/Jul/2026:00:09:59 -0300] "GET /.well-known/wp-cron.php HTTP/1.1" 301 162 "-" "M ... show more 4.194.24.143 - - [17/Jul/2026:00:09:59 -0300] "GET /.well-known/wp-cron.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.24.143 - - [17/Jul/2026:02:44:08 -0300] "GET /.well-known/wp-cron.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.24.143 - - [17/Jul/2026:03:16:37 -0300] "GET /.well-known/wp-cron.php HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Port Scan
🇫🇮 Christopher Hughes	2026-07-17 06:11:57 (10 minutes ago)	[Fri Jul 17 07:11:55.850781 2026] [proxy_fcgi:error] [pid 1877830:tid 139825453712960] [client 4.194 ... show more [Fri Jul 17 07:11:55.850781 2026] [proxy_fcgi:error] [pid 1877830:tid 139825453712960] [client 4.194.24.143:2520] AH01071: Got error 'Primary script unknown' [Fri Jul 17 07:11:56.041438 2026] [proxy_fcgi:error] [pid 1877830:tid 139825428534848] [client 4.194.24.143:2520] AH01071: Got error 'Primary script unknown' [Fri Jul 17 07:11:56.232070 2026] [proxy_fcgi:error] [pid 1877830:tid 139826634544704] [client 4.194.24.143:2520] AH01071: Got error 'Primary script unknown' [Fri Jul 17 07:11:56.424113 2026] [proxy_fcgi:error] [pid 1877830:tid 139825445320256] [client 4.194.24.143:2520] AH01071: Got error 'Primary script unknown' [Fri Jul 17 07:11:56.616425 2026] [proxy_fcgi:error] [pid 1877830:tid 139825478891072] [client 4.194.24.143:2520] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 Epimetheus	2026-07-17 06:06:14 (16 minutes ago)	Unauthorized access attempts: [GET] /404.php [GET] /1.php [GET] /.tmb/ [GET] /13.php [GET] /.well-k ... show more Unauthorized access attempts: [GET] /404.php [GET] /1.php [GET] /.tmb/ [GET] /13.php [GET] /.well-known/wp-cron.php [GET] /0.php [GET] /.well-known/ [GET] /.dj/index.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇭🇺 kranem	2026-07-17 06:01:14 (21 minutes ago)	Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HT ... show more Triggered Cloudflare WAF from SG. Action taken: BLOCK ASN: 8075 (Microsoft Corporation) Protocol: HTTP/1.1 (GET method) Endpoint: /177.php Timestamp: 2026-07-17T04:40:52Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇳 evicky2002	2026-07-17 06:00:00 (22 minutes ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 ambor	2026-07-17 05:56:31 (26 minutes ago)	Honeypot triggered on tcpdata.com - Attempted to access /.dj/index.php (hidden_file_probe). User-Age ... show more Honeypot triggered on tcpdata.com - Attempted to access /.dj/index.php (hidden_file_probe). User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 show less	Web App Attack
🇫🇮 Christopher Hughes	2026-07-17 05:54:53 (27 minutes ago)	[Fri Jul 17 06:54:52.705149 2026] [proxy_fcgi:error] [pid 1877830:tid 139826502276672] [client 4.194 ... show more [Fri Jul 17 06:54:52.705149 2026] [proxy_fcgi:error] [pid 1877830:tid 139826502276672] [client 4.194.24.143:18433] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:54:52.888078 2026] [proxy_fcgi:error] [pid 1877830:tid 139826393237056] [client 4.194.24.143:18433] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:54:53.069802 2026] [proxy_fcgi:error] [pid 1877830:tid 139824925234752] [client 4.194.24.143:18433] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:54:53.252215 2026] [proxy_fcgi:error] [pid 1877830:tid 139826535847488] [client 4.194.24.143:18433] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:54:53.435194 2026] [proxy_fcgi:error] [pid 1877830:tid 139826519062080] [client 4.194.24.143:18433] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-07-17 05:36:26 (46 minutes ago)	4.194.24.143 - - [17/Jul/2026:07:36:23 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 578 4. ... show more 4.194.24.143 - - [17/Jul/2026:07:36:23 +0200] "GET /.well-known/acme-challenge/ HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:23 +0200] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:23 +0200] "GET /.well-known/logs233/index.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:23 +0200] "GET /.well-known/wp-cron.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:23 +0200] "GET /0.kb-v3.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:23 +0200] "GET /0.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:24 +0200] "GET /002.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:24 +0200] "GET /01.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:24 +0200] "GET /0x.php HTTP/1.1" 404 578 4.194.24.143 - - [17/Jul/2026:07:36:24 +0200] "GET /1.php HTTP/1.1" 404 578 ... show less	Web Spam Web App Attack
🇪🇸 alferez	2026-07-17 05:36:19 (46 minutes ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇫🇮 Christopher Hughes	2026-07-17 05:17:45 (1 hour ago)	[Fri Jul 17 06:17:44.117680 2026] [proxy_fcgi:error] [pid 1871608:tid 139826141587008] [client 4.194 ... show more [Fri Jul 17 06:17:44.117680 2026] [proxy_fcgi:error] [pid 1871608:tid 139826141587008] [client 4.194.24.143:12367] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:17:44.309527 2026] [proxy_fcgi:error] [pid 1871608:tid 139826099623488] [client 4.194.24.143:12367] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:17:44.501257 2026] [proxy_fcgi:error] [pid 1871608:tid 139825948653120] [client 4.194.24.143:12367] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:17:44.693222 2026] [proxy_fcgi:error] [pid 1871608:tid 139826149979712] [client 4.194.24.143:12367] AH01071: Got error 'Primary script unknown' [Fri Jul 17 06:17:44.885039 2026] [proxy_fcgi:error] [pid 1871608:tid 139826116408896] [client 4.194.24.143:12367] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇸 deskpass.com	2026-07-17 05:16:29 (1 hour ago)	GET /404.php","timestamp":"2026-07-17T05:13:23.352Z"}	Web App Attack
🇸🇪 EmK530	2026-07-17 05:15:18 (1 hour ago)	URL flagged by RegEx: /0x.php	Web App Attack
🇬🇧 openstrike.co.uk	2026-07-17 05:14:11 (1 hour ago)	546 attacks on PHP URLs: GET /404.php HTTP/1.1	Web App Attack
🇭🇺 NyaljBe	2026-07-17 05:03:00 (1 hour ago)	4.194.24.143 - - [17/Jul/2026:00:34:48 +0200] "GET /100.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Wind ... show more 4.194.24.143 - - [17/Jul/2026:00:34:48 +0200] "GET /100.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.24.143 - - [17/Jul/2026:00:34:48 +0200] "GET /1.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.24.143 - - [17/Jul/2026:00:34:48 +0200] "GET /0x.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.24.143 - - [17/Jul/2026:00:34:48 +0200] "GET /01.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.24.143 - - [17/Jul/2026:00:34:48 +0200] "GET /002.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 264 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 51.195.244.143

🇨🇳 223.82.97.51

🇬🇧 198.244.242.136

🇬🇧 198.244.240.65

🇬🇧 188.240.59.16

🇺🇸 162.216.149.202

🇺🇸 162.216.149.99

🇲🇾 160.224.5.240

🇺🇸 104.152.52.114

🇻🇳 103.82.21.8

🇫🇷 91.196.152.178

🇰🇼 78.89.154.59

🇩🇪 69.5.169.20

🇨🇦 66.56.81.84

🇬🇧 51.195.183.102

🇲🇾 47.254.254.221

🇬🇧 35.203.210.176

🇹🇭 203.154.158.195

🇳🇱 195.178.110.108

🇲🇴 182.93.7.194