JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.204.200.136

4.204.200.136 was found in our database!

This IP was reported 359 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.204.200.136

Whois 4.204.200.136

IP Abuse Reports for 4.204.200.136:

This IP address has been reported a total of 359 times from 303 distinct sources. 4.204.200.136 was first reported on August 21st 2026, and the most recent report was 1 second ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chrisj	2026-08-21 21:05:58 (1 second ago)	[Fri Aug 21 21:05:57.853361 2026] [proxy_fcgi:error] [pid 1261393:tid 1261485] [client 4.204.200.136 ... show more [Fri Aug 21 21:05:57.853361 2026] [proxy_fcgi:error] [pid 1261393:tid 1261485] [client 4.204.200.136:28559] AH01071: Got error 'Primary script unknown' [Fri Aug 21 21:05:57.915775 2026] [proxy_fcgi:error] [pid 1261393:tid 1261488] [client 4.204.200.136:28559] AH01071: Got error 'Primary script unknown' [Fri Aug 21 21:05:57.978292 2026] [proxy_fcgi:error] [pid 1261393:tid 1261495] [client 4.204.200.136:28559] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇫🇷 bazter.pro	2026-08-21 21:05:41 (18 seconds ago)	Auto-Ban [2026-08-22 00:05:41]: CRITICAL: Exploit trap paths (13); DC: Microsoft Corporation [Paths: ... show more Auto-Ban [2026-08-22 00:05:41]: CRITICAL: Exploit trap paths (13); DC: Microsoft Corporation [Paths: 95] \| Details: Exploit trap paths: /wp-content/plugins/hellopress/wp_filemanager.php, //wp-includes/Requests/, /wp-admin/css/colors/modern/, //wp-includes/assets/, /wp-admin/css/colors/sunrise/ \| Sensitive files/paths: /admin.php/admin.php, /admin.php, /admin.php?p=, /wp-admin/css/colors/modern/, /wp-admin/css/colors/sunrise/ \| 404 errors (96): /hobi.php, /jstring.php, /domvf.php, /FWAZ.php, /html.php, /admin.php, /heex.php, /xiugai.php?p=, /wp-content/plugins/hellopress/wp_filemanager.php, //cgi-bin/index.php (and 85 more) show less	Web App Attack Hacking
🇩🇪 ITSNF	2026-08-21 21:05:03 (56 seconds ago)	Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=80	Port Scan Hacking
Anonymous	2026-08-21 21:04:45 (1 minute ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 cwytech	2026-08-21 21:02:59 (3 minutes ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: crowdsecurity/http-probing.	Bad Web Bot Web App Attack
🇺🇸 jfz-abuse	2026-08-21 21:01:53 (4 minutes ago)	fail2ban: apache-php-recon ...	Web App Attack
🇨🇱 Denis Chavez	2026-08-21 21:01:32 (4 minutes ago)	Fail2Ban detected malicious activity on Nginx	Brute-Force SSH Web App Attack
Anonymous	2026-08-21 20:59:59 (6 minutes ago)	B: f2b 404 5x	Web App Attack
🇫🇷 Baking333	2026-08-21 20:59:41 (6 minutes ago)	[redacted] 4.204.200.136 - - [21/Aug/2026:21:59:31 +0100] "GET /wp-content/plugins/hellopress/wp_fil ... show more [redacted] 4.204.200.136 - - [21/Aug/2026:21:59:31 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 147 0/25043 "-" "-" [redacted] 4.204.200.136 - - [21/Aug/2026:21:59:40 +0100] "GET //wp-includes/Requests/ HTTP/1.1" 301 562 0/316 "-" "-" show less	Bad Web Bot Web App Attack
🇩🇪 jotoma.de	2026-08-21 20:59:17 (6 minutes ago)	[Fri Aug 21 22:59:16.435204 2026] [proxy_fcgi:error] [pid 2922947:tid 2923008] [client 4.204.200.136 ... show more [Fri Aug 21 22:59:16.435204 2026] [proxy_fcgi:error] [pid 2922947:tid 2923008] [client 4.204.200.136:20479] AH01071: Got error 'Primary script unknown' [Fri Aug 21 22:59:16.535754 2026] [proxy_fcgi:error] [pid 2922947:tid 2923007] [client 4.204.200.136:20479] AH01071: Got error 'Primary script unknown' [Fri Aug 21 22:59:16.636356 2026] [proxy_fcgi:error] [pid 2922947:tid 2923011] [client 4.204.200.136:20479] AH01071: Got error 'Primary script unknown' ... show less	Bad Web Bot Web App Attack
🇨🇭 beatsnet.com	2026-08-21 20:59:17 (6 minutes ago)	[Fri Aug 21 22:59:16.217110 2026] [proxy_fcgi:error] [pid 7981:tid 60314066972688] [client 4.204.200 ... show more [Fri Aug 21 22:59:16.217110 2026] [proxy_fcgi:error] [pid 7981:tid 60314066972688] [client 4.204.200.136:26981] AH01071: Got error 'Primary script unknown' [Fri Aug 21 22:59:16.325694 2026] [proxy_fcgi:error] [pid 7981:tid 60314066972688] [client 4.204.200.136:26981] AH01071: Got error 'Primary script unknown' [Fri Aug 21 22:59:16.428528 2026] [proxy_fcgi:error] [pid 7981:tid 60314066972688] [client 4.204.200.136:26981] AH01071: Got error 'Primary script unknown' [Fri Aug 21 22:59:16.532138 2026] [proxy_fcgi:error] [pid 7981:tid 60314066972688] [client 4.204.200.136:26981] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇺🇸 Sockets-AR	2026-08-21 20:56:44 (9 minutes ago)	CrowdSec: malicious bot / scanner detected (custom/python-requests-probing) at 2026-08-21T20:56:43.8 ... show more CrowdSec: malicious bot / scanner detected (custom/python-requests-probing) at 2026-08-21T20:56:43.862Z show less	Bad Web Bot Web App Attack
🇫🇷 guillaume illien	2026-08-21 20:53:19 (12 minutes ago)	4.204.200.136 - - [21/Aug/2026:20:53:16 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ... show more 4.204.200.136 - - [21/Aug/2026:20:53:16 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 178 "-" "-" 4.204.200.136 - - [21/Aug/2026:20:53:17 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 178 "-" "-" 4.204.200.136 - - [21/Aug/2026:20:53:17 +0000] "GET /5PJcpMFsD8B.php HTTP/1.1" 301 178 "-" "-" 4.204.200.136 - - [21/Aug/2026:20:53:18 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 301 178 "-" "-" 4.204.200.136 - - [21/Aug/2026:20:53:18 +0000] "GET /pk.php HTTP/1.1" 301 178 "-" "-" 4.204.200.136 - - [21/Aug/2026:20:53:18 +0000] "GET /289.php HTTP/1.1" 301 178 "-" "-" 4.204.200.136 - - [21/Aug/2026:20:53:19 +0000] "GET /pyrethrumize.php?p= HTTP/1.1" 301 178 "-" "-" ... show less	Hacking Brute-Force Web App Attack SSH
🇬🇧 NotCool	2026-08-21 20:53:11 (12 minutes ago)	[7200] (ROBOTSIGNORE2,ROBOTSIGNORE1,ADMINPROBE) Login failure/trigger from 4.204.200.136 (CA/Canada/ ... show more [7200] (ROBOTSIGNORE2,ROBOTSIGNORE1,ADMINPROBE) Login failure/trigger from 4.204.200.136 (CA/Canada/-): 50 in the last 3600 secs show less	Brute-Force
🇺🇸 Major Hostility	2026-08-21 20:52:47 (13 minutes ago)	"GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /this_is_a_new_hello_world ... show more "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 "GET /3PJcpMFsD8B.php HTTP/1.1" 404 "GET /new.php HTTP/1.1" 404 "GET /bladeacss.php HTTP/1.1" 404 "GET /shapes.php HTTP/1.1" 404 "GET /parx.php HTTP/1.1" 404 "GET /fig.php HTTP/1.1" 404 "GET /qaivbilq.php HTTP/1.1" 404 "GET /saka.php HTTP/1.1" 404 "GET /hobi.php HTTP/1.1" 404 "GET /ova.php HTTP/1.1" 404 "GET /pegi.php HTTP/1.1" 404 "GET /mri.php HTTP/1.1" 404 "GET /oldd.php HTTP/1.1" 404 "GET /rc.php HTTP/1.1" 404 "GET /jstring.php HTTP/1.1" 404 "GET /ng.php HTTP/1.1" 404 "GET /zip.php HTTP/1.1" 404 "GET /infi.php HTTP/1.1" 404 "GET /html.php% show less	Web App Attack

Showing 1 to 15 of 359 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2404:6800:4005:c02::122

🇳🇱 193.176.31.230

🇸🇪 185.6.9.128

🇮🇹 172.213.25.50

🇺🇸 165.22.2.254

🇺🇸 161.35.101.228

🇺🇸 157.230.179.176

🇺🇸 147.182.131.166

🇺🇸 143.198.160.75

🇨🇳 123.113.186.135

🇸🇬 103.189.234.96

🇮🇩 103.61.71.50

🇷🇺 89.169.168.25

🇺🇸 66.228.50.10

🇵🇰 58.65.134.26

🇩🇪 57.129.74.123

🇧🇷 45.205.1.246

🇭🇰 18.167.205.101

🇩🇪 5.175.206.202

🇰🇷 219.248.65.30