4.197.60.2

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
56 reports
51 reporters · latest 10 months ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇦🇺 Australia
City
Sydney, New South Wales
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

4.197.60.2 has been reported 56 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
56 from 51 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 octageeks.com
Wordpress malicious attack:[octascan]
Web App Attack
Anonymous
"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"
Hacking Web App Attack
🇬🇧 [email protected]
...
Brute-Force SSH
🇮🇹 mauri64
Troppi errori Apache (145)
Hacking
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2025-12-19
Hacking Web App Attack SSH
🇩🇪 kjaerulff
Probing for PHP files (admin.php)
Web App Attack
🇩🇪 Mr-Money
scenario: crowdsecurity/http-probing - events: 11
Hacking Web App Attack
🇧🇪 voormedia
Accessed trap at '/admin.php'
Web App Attack
🇳🇱 Brict IT
Bad Web Bot Web App Attack
🇬🇧 Apache
(mod_security) mod_security (id:20000010) triggered by 4.197.60.2 (AU/Australia/-): 5 in the last 300 secs
Brute-Force Web App Attack
🇺🇦 URAN Publishing Service
4.197.60.2 - - [19/Dec/2025:16:12:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 279 "-" "-" ...
Web App Attack
🇧🇪 taivas.nl
Site scraper
Web App Attack
🇳🇿 Tripwire
Scanning for exploits - /wp-includes/rest-api/alfa-rex.php7
Web App Attack
🇩🇪 neckaralb-admin.de
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪 Phenix Info
SmallGuard.fr/Prestashop Empty User Agent
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 187.51.84.86
🇳🇱 185.218.86.4
🇸🇬 178.128.84.112
🇧🇷 168.228.187.99
🇺🇸 162.216.150.143
🇩🇪 151.243.11.230
🇩🇪 151.243.11.41
🇺🇸 148.153.188.246
🇨🇳 120.48.0.142
🇺🇸 71.6.134.237
🇺🇸 66.132.159.129
🇫🇮 65.109.106.123
🇰🇷 61.76.221.51
🇺🇸 57.141.20.72
🇸🇪 52.103.35.80
🇩🇪 5.231.242.240
feedback