This IP address has been reported a total of
152
times from
132 distinct
sources.
4.213.56.106 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Auto-ban: 14 malicious requests on 2025-12-16 (e.g., env/backup probes, brute-force, or error bursts ...
show moreAuto-ban: 14 malicious requests on 2025-12-16 (e.g., env/backup probes, brute-force, or error bursts).
show less
This IP was detected 4 times on my original honeypot and also performed automated reconnaissance and ...
show moreThis IP was detected 4 times on my original honeypot and also performed automated reconnaissance and vulnerability scanning against my server between 2025-12-16T20:48:31Z UTC and 2025-12-16T20:48:42Z UTC.
The honeypot files: /wp-content/plugins/hellopress/wp_filemanager.php, /wp.php, /autoload_classmap.php and /403.php.
It issued 40 HTTP requests targeting 4 distinct suspicious paths within about 11 seconds.
The targeted paths included examples such as: /file2.php, /re.php, /v3.php, /lib.php, /class9.php, /wsd.php and others.
Multiple requests used filenames that resemble PHP web shells or exploitation payloads.
The behavior is consistent with an automated directory and CMS reconnaissance scan, not normal user browsing.
This IP appears to be performing malicious probing and should be treated as suspicious or blocked.
show less