JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.213.18.145

Neutral Activity

Abuse Confidence Score

0% Low Risk

227 reports

178 reporters · latest 9 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇮🇳 India
City: Pune, Maharashtra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.213.18.145 has been reported 227 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

227 from 178 distinct reporters

First reported

January 20th 2026

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-02-03 20:11:22 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2026-02-03 00:23:17 UTC · (9 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-01-31 00:11:18 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 avgsmoe	2026-01-26 02:00:10 UTC · (9 months ago)	PERMA offender. Observed 678 times.	Port Scan Brute-Force
Anonymous	2026-01-25 19:48:16 UTC · (9 months ago)	$f2bV_matches	Brute-Force
🇪🇸 Gem	2026-01-23 23:30:33 UTC · (9 months ago)	Unauthorized web scan.	Web App Attack
🇹🇷 rtbh.com.tr	2026-01-22 20:11:11 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2026-01-22 06:13:39 UTC · (9 months ago)	468 attacks on PHP URLs: GET /chosen.php HTTP/1.1	Web App Attack
🇭🇺 DumaNet	2026-01-22 01:39:00 UTC · (9 months ago)	WordPress plugin attack attempts. Date: 2026 Jan 20. 18:47:32 Source IP: 4.213.18.145 Portion of the log(s): 4.213.18.145 - [20/Jan/2026:18:47:31 +0100] "GET /wp-includes/assets/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more WordPress plugin attack attempts. Date: 2026 Jan 20. 18:47:32 Source IP: 4.213.18.145 Portion of the log(s): 4.213.18.145 - [20/Jan/2026:18:47:31 +0100] "GET /wp-includes/assets/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - [20/Jan/2026:18:47:30 +0100] "GET /wp-includes/Text/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - [20/Jan/2026:18:47:30 +0100] "GET /wp-admin/images/ HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - [20/Jan/2026:18:47:30 +0100] "GET /elp.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - [20/Jan/2026:18:47:30 +0100] "GET /test1.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 show less	Hacking Web App Attack
🇨🇳 ThreatBook.io	2026-01-21 22:27:42 UTC · (9 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/4.213.18.145 2026-01-21 05:53:28 /adminfuns.php 2026-01-21 05:53:28 /about.php 2026-01-21 05:53:28 /bolt.php	Web App Attack
🇹🇷 rtbh.com.tr	2026-01-21 20:11:08 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇪 Ivo Vynckier	2026-01-21 16:13:00 UTC · (9 months ago)	4.213.18.145 - - [21/Jan/2026:02:23:49 +0100] "GET /aa.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - - [21/Jan/2026:02:23:49 +0100] "GET /abo ... show more 4.213.18.145 - - [21/Jan/2026:02:23:49 +0100] "GET /aa.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - - [21/Jan/2026:02:23:49 +0100] "GET /about.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - - [21/Jan/2026:02:23:49 +0100] "GET /adminfuns.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇬🇧 AvonleaConsulting	2026-01-21 07:18:29 UTC · (9 months ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇫🇷 sthoyer.de	2026-01-21 07:06:49 UTC · (9 months ago)	4.213.18.145 - - [21/Jan/2026:08:06:48 +0100] "GET /ioxi-o.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - - [21/Jan/2026:08:06:48 +0100] "GET ... show more 4.213.18.145 - - [21/Jan/2026:08:06:48 +0100] "GET /ioxi-o.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - - [21/Jan/2026:08:06:48 +0100] "GET /0x.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.213.18.145 - - [21/Jan/2026:08:06:48 +0100] "GET /222.php HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-01-21 07:03:54 UTC · (9 months ago)	[Wed Jan 21 01:03:52.230628 2026] [proxy_fcgi:error] [pid 2342837:tid 2342867] [client 4.213.18.145:21821] AH01071: Got error 'Primary script unknown' [Wed Jan 21 01:03:52.501226 2026] [proxy_fcgi:error] [pid 2342837:tid 2342879] [client 4.213.18.145 ... show more [Wed Jan 21 01:03:52.230628 2026] [proxy_fcgi:error] [pid 2342837:tid 2342867] [client 4.213.18.145:21821] AH01071: Got error 'Primary script unknown' [Wed Jan 21 01:03:52.501226 2026] [proxy_fcgi:error] [pid 2342837:tid 2342879] [client 4.213.18.145:21821] AH01071: Got error 'Primary script unknown' [Wed Jan 21 01:03:52.766787 2026] [proxy_fcgi:error] [pid 2342837:tid 2342875] [client 4.213.18.145:21821] AH01071: Got error 'Primary script unknown' [Wed Jan 21 01:03:53.041220 2026] [proxy_fcgi:error] [pid 2342837:tid 2342889] [client 4.213.18.145:21821] AH01071: Got error 'Primary script unknown' [Wed Jan 21 01:03:53.306861 2026] [proxy_fcgi:error] [pid 2342837:tid 2342874] [client 4.213.18.145:21821] AH01071: Got error 'Primary script unknown' [Wed Jan 21 01:03:53.573581 2026] [proxy_fcgi:error] [pid 2342837:tid 2342873] [client 4.213.18.145:21821] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force

Showing 1 to 15 of 227 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 201.3.82.156

🇩🇪 185.176.255.72

🇻🇳 171.235.23.158

🇳🇱 85.11.167.204

🇨🇳 36.137.180.219

🇮🇩 36.67.227.241

🇬🇧 35.203.210.183

🇨🇳 183.233.155.146

🇻🇳 171.244.143.209

🇻🇳 171.244.39.95

🇨🇳 121.46.244.22

🇬🇧 101.36.97.80

🇳🇱 45.148.10.141

🇨🇳 175.153.221.109

🇺🇸 174.170.6.46

🇷🇴 80.94.92.234

🇳🇱 77.67.26.126

🇳🇱 194.33.46.74

🇵🇹 149.90.33.92

🇺🇸 147.185.132.151