JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.205.23.164

4.205.23.164 was found in our database!

This IP was reported 213 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.205.23.164

Whois 4.205.23.164

IP Abuse Reports for 4.205.23.164:

This IP address has been reported a total of 213 times from 135 distinct sources. 4.205.23.164 was first reported on May 26th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 zam	2026-05-27 16:49:32 (1 week ago)	4.205.23.164 - - [27/May/2026:16:49:29 +0000] "GET /wp-admin/alfa.php HTTP/1.1" 302 271	Web App Attack
🇳🇴 Abuse Buster	2026-05-27 16:33:24 (1 week ago)	4.205.23.164 - [27/May/2026:18:33:22 +0200] "GET /wp-good.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Win ... show more 4.205.23.164 - [27/May/2026:18:33:22 +0200] "GET /wp-good.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - [27/May/2026:18:33:22 +0200] "GET /file.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - [27/May/2026:18:33:22 +0200] "GET /bless.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - [27/May/2026:18:33:22 +0200] "GET /admin.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-05-27 16:09:57 (1 week ago)	Blocked by YFC Security on https://fencingforward.com — type: malicious_file_attempts	Web App Attack SSH
Anonymous	2026-05-27 16:00:59 (1 week ago)	Aggressive web scan	Web App Attack
🇺🇸 fazar	2026-05-27 15:51:46 (1 week ago)	crowdsecurity/http-admin-interface-probing on node: us01	Web App Attack Hacking
Anonymous	2026-05-27 15:49:45 (1 week ago)	4.205.23.164 - - [27/May/2026:17:49:43 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 437 "-" "Mozi ... show more 4.205.23.164 - - [27/May/2026:17:49:43 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - - [27/May/2026:17:49:43 +0200] "GET /wp-content/admin.php HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - - [27/May/2026:17:49:45 +0200] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - - [27/May/2026:17:49:45 +0200] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - - [27/May/2026:17:49:45 +0200] "GET /wp-includes/IXR/test1.php HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Window ... show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-05-27 15:41:11 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 strefapi_com	2026-05-27 15:22:35 (1 week ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-05-27 15:12:34 (1 week ago)	[Wed May 27 16:12:33.597155 2026] [proxy_fcgi:error] [pid 83982:tid 139773628884544] [client 4.205.2 ... show more [Wed May 27 16:12:33.597155 2026] [proxy_fcgi:error] [pid 83982:tid 139773628884544] [client 4.205.23.164:28052] AH01071: Got error 'Primary script unknown' [Wed May 27 16:12:33.731696 2026] [proxy_fcgi:error] [pid 83982:tid 139773662455360] [client 4.205.23.164:28052] AH01071: Got error 'Primary script unknown' [Wed May 27 16:12:33.865231 2026] [proxy_fcgi:error] [pid 83982:tid 139774207718976] [client 4.205.23.164:28052] AH01071: Got error 'Primary script unknown' [Wed May 27 16:12:34.057696 2026] [proxy_fcgi:error] [pid 83982:tid 139774190933568] [client 4.205.23.164:28052] AH01071: Got error 'Primary script unknown' [Wed May 27 16:12:34.192333 2026] [proxy_fcgi:error] [pid 83982:tid 139773620491840] [client 4.205.23.164:28052] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇩🇪 FeG Deutschland	2026-05-27 14:48:36 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 nekoify	2026-05-27 14:19:46 (1 week ago)	IP has triggered Cloudflare WAF. action: managed_challenge source: botFight clientAsn: 8075 clientAS ... show more IP has triggered Cloudflare WAF. action: managed_challenge source: botFight clientAsn: 8075 clientASNDescription: Microsoft Corporation clientCountryName: CA clientIP: 4.205.23.164 clientRequestHTTPMethodName: GET clientRequestHTTPProtocol: HTTP/1.1 clientRequestPath: /wp-includes/ID3/ clientRequestQuery: datetime: 2026-05-27T14:19:46Z rayName: a025a80c8df8ebbd ruleId: bot_fight_mode userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36. show less	Open Proxy VPN IP Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇮 6kilowatti	2026-05-27 13:42:26 (1 week ago)	2026/05/27 16:42:25 [error] 1118#1118: 48374 FastCGI sent in stderr: "Primary script unknown" while ... show more 2026/05/27 16:42:25 [error] 1118#1118: 48374 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 4.205.23.164, server: oh6ah.fi, request: "GET /wp-good.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" 2026/05/27 16:42:26 [error] 1118#1118: *48374 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 4.205.23.164, server: oh6ah.fi, request: "GET /file.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/oh6ah.fi.sock:", host: "oh6ah.fi" ... show less	Web App Attack
🇧🇪 Ivo Vynckier	2026-05-27 13:37:00 (1 week ago)	4.205.23.164 - - [27/May/2026:08:57:31 +0200] "GET /wk/index.php HTTP/1.1" 404 2021 "-" "Mozilla/5.0 ... show more 4.205.23.164 - - [27/May/2026:08:57:31 +0200] "GET /wk/index.php HTTP/1.1" 404 2021 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - - [27/May/2026:08:57:31 +0200] "GET /inputs.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.205.23.164 - - [27/May/2026:08:57:31 +0200] "GET /ioxi-o.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇮 Christopher Hughes	2026-05-27 13:26:42 (1 week ago)	[Wed May 27 14:26:40.860119 2026] [proxy_fcgi:error] [pid 83982:tid 139773662455360] [client 4.205.2 ... show more [Wed May 27 14:26:40.860119 2026] [proxy_fcgi:error] [pid 83982:tid 139773662455360] [client 4.205.23.164:56201] AH01071: Got error 'Primary script unknown' [Wed May 27 14:26:41.027316 2026] [proxy_fcgi:error] [pid 83982:tid 139774786520640] [client 4.205.23.164:56201] AH01071: Got error 'Primary script unknown' [Wed May 27 14:26:41.160939 2026] [proxy_fcgi:error] [pid 83982:tid 139773628884544] [client 4.205.23.164:56201] AH01071: Got error 'Primary script unknown' [Wed May 27 14:26:41.295078 2026] [proxy_fcgi:error] [pid 83982:tid 139775025616448] [client 4.205.23.164:56201] AH01071: Got error 'Primary script unknown' [Wed May 27 14:26:41.494075 2026] [proxy_fcgi:error] [pid 83982:tid 139774803306048] [client 4.205.23.164:56201] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-27 13:00:57 (1 week ago)	4.205.23.164 - - [27/May/2026:16:00:57 +0300] "GET /wp-content/admin.php HTTP/1.1" 404 788 "-" "Mozi ... show more 4.205.23.164 - - [27/May/2026:16:00:57 +0300] "GET /wp-content/admin.php HTTP/1.1" 404 788 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack

Showing 31 to 45 of 213 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.151.75.242

🇹🇷 131.222.250.186

🇺🇸 91.230.168.141

🇺🇸 91.193.232.234

🇱🇹 81.30.98.44

🇹🇷 212.16.87.65

🇳🇱 195.178.110.30

🇨🇦 99.234.135.34

🇬🇧 89.37.172.136

🇫🇷 31.59.105.179

🇺🇸 172.203.149.63

🇺🇸 147.185.132.226

🇬🇧 87.236.176.217

🇱🇹 81.30.98.62

🇷🇴 80.94.95.211

🇷🇴 80.94.92.186

🇷🇴 80.94.92.177

🇺🇸 66.132.195.22

🇬🇧 45.129.72.245

🇺🇸 45.79.92.218