JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.194.56.69

4.194.56.69 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.194.56.69

Whois 4.194.56.69

IP Abuse Reports for 4.194.56.69:

This IP address has been reported a total of 101 times from 89 distinct sources. 4.194.56.69 was first reported on June 28th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-03 01:21:59 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-29 21:18:16 (5 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-06-29 13:28:30 (5 days ago)	"GET /wp-content/plugins/plugin/index.php HTTP/1.1"	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-06-29 05:14:47 (5 days ago)	68 attacks on PHP URLs: GET /wp-links-opml.php HTTP/1.1	Web App Attack
🇧🇪 taivas.nl	2026-06-29 04:32:31 (5 days ago)	Many_bad_calls	Web App Attack
🇲🇽 octageeks.com	2026-06-29 04:21:36 (5 days ago)	Wordpress malicious attack:[octascan]	Web App Attack
Anonymous	2026-06-28 22:05:04 (6 days ago)	Unknown PHP script access detected by Fail2Ban	Web App Attack
🇷🇺 ago.su	2026-06-28 21:18:08 (6 days ago)	F2B blocked nginx bad bot [otd]	Hacking Web App Attack
🇬🇷 setupgr	2026-06-28 21:09:11 (6 days ago)	(mod_security) mod_security (id:1000001) triggered by 4.194.56.69 (SG/Singapore/-/Singapore/-/[AS807 ... show more (mod_security) mod_security (id:1000001) triggered by 4.194.56.69 (SG/Singapore/-/Singapore/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jun 29 00:09:08.198664 2026] [security2:error] [pid 2045623:tid 2045760] [client 4.194.56.69:3532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/ioxi-o.php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "1000001"] [msg "Bad file blocked: /ioxi-o.php"] [severity "CRITICAL"] [tag "security"] [hostname "asteriassantorini.com"] [uri "/ioxi-o.php"] [unique_id "akGNdASlL5QmDiBE8tpQBgAAAEg"] show less	Port Scan
🇺🇸 ipblock.com	2026-06-28 20:56:00 (6 days ago)	IPBlock protected site ID [1438-do]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇳🇱 CryptoYakari	2026-06-28 20:53:18 (6 days ago)	4.194.56.69 - - [28/Jun/2026:23:53:10 +0300] "GET /inputs.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Wi ... show more 4.194.56.69 - - [28/Jun/2026:23:53:10 +0300] "GET /inputs.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.56.69 - - [28/Jun/2026:23:53:10 +0300] "GET /ioxi-o.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.56.69 - - [28/Jun/2026:23:53:11 +0300] "GET /function/function.php HTTP/1.0" 404 3515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.56.69 - - [28/Jun/2026:23:53:11 +0300] "GET /rip.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.56.69 - - [28/Jun/2026:23:53:11 +0300] "GET /admin.php HTTP/1.0" 404 531 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇩🇪 Marc	2026-06-28 20:49:28 (6 days ago)	4.194.56.69 - - [28/Jun/2026:22:48:46 +0200] "GET /wp-login.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 ( ... show more 4.194.56.69 - - [28/Jun/2026:22:48:46 +0200] "GET /wp-login.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.56.69 - - [28/Jun/2026:22:48:48 +0200] "GET /xmlrpc.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.194.56.69 - - [28/Jun/2026:22:49:28 +0200] "GET /wp-login.php HTTP/1.1" 404 498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Brute-Force
Anonymous	2026-06-28 20:49:02 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 Gwyneth Llewelyn	2026-06-28 20:47:59 (6 days ago)	4.194.56.69 - - [28/Jun/2026:21:47:57 +0100] "GET /wp-login.php HTTP/1.1" 404 1006 "-" "Mozilla/5.0 ... show more 4.194.56.69 - - [28/Jun/2026:21:47:57 +0100] "GET /wp-login.php HTTP/1.1" 404 1006 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇫🇮 as211431.net	2026-06-28 20:47:44 (6 days ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /wp-includes/html-api/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.144.90.41

🇹🇳 197.244.159.101

🇺🇸 144.126.215.79

🇺🇸 140.99.190.192

🇳🇱 45.148.10.157

🇩🇪 8.211.45.42

🇺🇸 216.25.89.119

🇲🇽 189.147.254.64

🇳🇱 185.180.109.243

🇺🇸 165.154.163.25

🇷🇴 92.118.39.14

🇺🇸 65.111.15.235

🇱🇹 62.60.130.219

🇨🇳 58.212.237.87

🇺🇸 47.77.182.54

🇧🇪 34.78.62.85

🇭🇰 150.5.128.93

🇨🇳 124.31.104.72

🇮🇳 103.88.76.27

🇺🇸 100.59.0.92