Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 4.204.224.164:
This IP address has been reported a total of
826
times from
556 distinct
sources.
4.204.224.164 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 209
reports;
United States of America
with 132
reports;
France
with 113
reports.
The most common categories in these recent reports were:
Web App Attack
631
times;
Brute-Force
216
times;
Hacking
192
times;
Bad Web Bot
185
times;
Port Scan
83
times;
Other
148
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interfa ...
show moreYou are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-admin-interface-probing
show less
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads via ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-content/uploads via rule: /wp-content
show less
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Ho ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-probing; Action=ban; Events=11; Hosts=gate.isp.llc; Paths=/403dd.php,/baba.php,/cabs.php,/dex.php,/file.php?,/insc.php,/inso.php,/key.php; Country=CA; ASN=8075 MICROSOFT-CORP-MSN-AS-BLOCK
show less
2026-08-31 @ 04:01:08 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filema ...
show more2026-08-31 @ 04:01:08 (CET) ~ Blocked for trying to access: /wp-content/plugins/hellopress/wp_filemanager.php
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 5770
events: 11
created_at: ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 5770
events: 11
created_at: 2026-08-31T01:46:00Z
message: Ip 4.204.224.164 performed 'crowdsecurity/http-probing' (11 events over 2.564457754s) at 2026-08-31 01:45:59.304358556 +0000 UTC
target_uri: ["/wp-content/plugins/hellopress/wp_filemanager.php","/this_is_a_new_hello_world.php","/bulet.php","/plugins.php?p=","/wpxml.php","/wp-admin/css/colors/coffee/alyan.php","/wp-admin/css/colors/coffee/marin.php","/wp-admin/css/colors/coffee/redn.php","/run.php","/wp-mail.php","/BDKR28WP.php"]
method: ["GET"]
status: ["404"]
user_agent: ["-"]
show less
Automated: 15 requests with error status in 120s window from 4.204.224.164.
Evidence: /wsd.php:301,/ ...
show moreAutomated: 15 requests with error status in 120s window from 4.204.224.164.
Evidence: /wsd.php:301,/4PJcpMFsD8B.php:404,/4PJcpMFsD8B.php:301,/3PJcpMFsD8B.php:404,/3PJcpMFsD8B.php:301,/classwithtostring.php:404,/classwithtostring.php:301,//adminfuns.php:404,//adminfuns.php:301,/media.php:404,/media.php:301,/this_is_a_new_hello_world.php:404,/this_is_a_new_hello_world.php:301,/wp-content/plugins/hellopress/wp_filemanager.php:404,/wp-content/plugins/hellopress/wp_filemanager.php:301 (+35 more)
show less
