JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.201.152.119

4.201.152.119

Neutral Activity

26 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Microsoft Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS8075

Domain Name

microsoft.com

Country

🇧🇷 Brazil

City

Campinas, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.201.152.119 has been reported 26 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 4.201.152.119:

This IP address has been reported a total of 26 times from 10 distinct sources. 4.201.152.119 was first reported on May 4th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2025-06-09 09:34:39 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.201.152.119 (BR/Brazil/-): 5 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 4.201.152.119 (BR/Brazil/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇪🇸 masterguru	2025-06-09 09:07:50 (1 year ago)	Restricted File Access Attempt. Matched phrase "/.env" at REQUEST_FILENAME. (930130-122)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-06-09 07:35:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 09 03:35:05.377997 2025] [security2:error] [pid 3085582:tid 3085582] [client 4.201.152.119:37302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oxford-gliding-club.co.uk"] [uri "/.env"] [unique_id "aEaOqawhLLCmMRSd6WduOwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 as211431.net	2025-06-09 03:34:56 (1 year ago)	[09/Jun/2025:04:34:54 +0100] lGMsP-y4DGkgS1G37w93adGV 4.201.152.119 42558 194.36.163.79 443 [09/Jun/ ... show more [09/Jun/2025:04:34:54 +0100] lGMsP-y4DGkgS1G37w93adGV 4.201.152.119 42558 194.36.163.79 443 [09/Jun/2025:04:34:55 +0100] 2R2eH41badnf0hplsM-XMmml 4.201.152.119 55924 194.36.163.79 80 [09/Jun/2025:04:34:55 +0100] 4gzewddPCyX8s7SdTq0Ohz5- 4.201.152.119 42564 194.36.163.79 443 ... show less	Web App Attack
🇬🇧 Mendip_Defender	2025-06-09 03:28:39 (1 year ago)	[09/Jun/2025:04:28:34.264487 +0100] aEZU4rbfQv7s8Oh_uhXdJAAAAEM 4.201.152.119 32984 188.246.206.60 7 ... show more [09/Jun/2025:04:28:34.264487 +0100] aEZU4rbfQv7s8Oh_uhXdJAAAAEM 4.201.152.119 32984 188.246.206.60 7081 [09/Jun/2025:04:28:36.296010 +0100] aEZU5A85qZ0fruN-daEYLQAAAA8 4.201.152.119 33010 188.246.206.60 7081 ... show less	Brute-Force
🇬🇧 openstrike.co.uk	2025-06-05 05:12:59 (1 year ago)	11 attacks on VC URLs, site downloads, config grabbing URLs (type 2), env grabbing URLs, PHP URLs: G ... show more 11 attacks on VC URLs, site downloads, config grabbing URLs (type 2), env grabbing URLs, PHP URLs: GET /.git/config HTTP/1.1 GET /db_dump.sql HTTP/1.1 GET /appsettings.json HTTP/1.1 GET /.env.production HTTP/1.1 GET /phpinfo.php HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 Globe2	2025-06-04 11:53:31 (1 year ago)	[04/Jun/2025:12:53:26 +0100] d6eKko81B0wAlnNI4gSotiod 4.201.152.119 34486 194.36.163.79 80 [04/Jun/2 ... show more [04/Jun/2025:12:53:26 +0100] d6eKko81B0wAlnNI4gSotiod 4.201.152.119 34486 194.36.163.79 80 [04/Jun/2025:12:53:28 +0100] 9-H9CtNcBh7a9apD1K1QiEzW 4.201.152.119 34516 194.36.163.79 80 [04/Jun/2025:12:53:29 +0100] QVdoHdo1vJbd6p9gXAfwVrUM 4.201.152.119 34518 194.36.163.79 80 ... show less	Web App Attack
🇬🇧 openstrike.co.uk	2025-06-04 05:13:02 (1 year ago)	11 attacks on PHP URLs, VC URLs, site downloads, config grabbing URLs (type 2), env grabbing URLs: G ... show more 11 attacks on PHP URLs, VC URLs, site downloads, config grabbing URLs (type 2), env grabbing URLs: GET /phpinfo.php HTTP/1.1 GET /.git/config HTTP/1.1 GET /db_dump.sql HTTP/1.1 GET /appsettings.json HTTP/1.1 GET /.env.production HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-05-24 05:55:17 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 24 01:55:13.323550 2025] [security2:error] [pid 1012439:tid 1012439] [client 4.201.152.119:37016] [client 4.201.152.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "firstexplorer.us"] [uri "/.env"] [unique_id "aDFfQTXIGYOu8fuCxjKGtgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-23 23:07:16 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 23 19:07:13.180120 2025] [security2:error] [pid 503915:tid 503940] [client 4.201.152.119:44016] [client 4.201.152.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newyorkplasticsurgery.us"] [uri "/.env"] [unique_id "aDD_odxIPe2pdd_y50i9nwAAAFY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-05-22 06:58:53 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 22 02:58:49.148829 2025] [security2:error] [pid 888185:tid 888185] [client 4.201.152.119:55416] [client 4.201.152.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starvationacres.us"] [uri "/.env"] [unique_id "aC7LKT0fOPs7pYFXGXNWbAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 nextweb	2025-05-22 01:49:54 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 4.201.152.119 (BR/Brazil/São Paulo/Campinas/-/[ ... show more (mod_security) mod_security (id:210730) triggered by 4.201.152.119 (BR/Brazil/São Paulo/Campinas/-/[AS8075 MICROSOFT-CORP-MSN-AS-BLOCK]): 5 in the last 3600 secs (CF_ENABLE) show less	Brute-Force
🇺🇸 masterguru	2025-05-22 01:23:55 (1 year ago)	BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (11 ... show more BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (1100000-169) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-05-19 22:57:29 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 4.201.152.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 19 18:57:23.541306 2025] [security2:error] [pid 10269:tid 10269] [client 4.201.152.119:43936] [client 4.201.152.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crestrong.com"] [uri "/web.config"] [unique_id "aCu3U_UGJirlQbYh_zNKpQAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-18 18:42:58 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 175.143.56.88

🇫🇷 137.74.114.131

🇫🇷 92.173.204.20

🇳🇱 45.148.10.151

🇧🇷 181.214.48.144

🇮🇩 157.15.67.253

🇧🇷 108.165.230.221

🇧🇷 108.165.179.194

🇱🇹 62.60.130.242

🇧🇷 45.226.118.164

🇧🇷 37.148.134.161

🇺🇸 34.58.124.191

🇨🇳 14.22.49.34

🇮🇳 2401:4900:8f87:ba56:689c:a9fb:1d50:2387

🇨🇱 201.222.206.102

🇺🇸 192.155.89.199

🇹🇷 188.119.22.97

🇷🇺 185.219.41.216

🇺🇸 173.44.62.244

🇩🇪 147.45.196.210