JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.214.24.95

Neutral Activity

Abuse confidence score ?

0% Low Risk

163 reports

121 reporters · latest 8 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.214.24.95 has been reported 163 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 4.214.24.95

This IP address has been reported a total of 163 times from 121 distinct sources. 4.214.24.95 was first reported on December 24th 2025, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rbot	2026-01-22 16:16:00 (8 months ago)	blocked by firewall for Known malicious User-Agents	Hacking Brute-Force Web App Attack
🇳🇱 Site.eu	2025-12-31 07:30:32 (8 months ago)	Excessive multi-domain requests	Brute-Force
🇫🇮 tjs	2025-12-28 22:30:00 (9 months ago)	web attack	Hacking Web App Attack
🇹🇷 rtbh.com.tr	2025-12-26 20:10:40 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇪🇸 laietania.net	2025-12-26 11:48:00 (9 months ago)	Web-App Attack	Web Spam Port Scan Hacking Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-25 23:00:23 (9 months ago)	Auto-ban: 32 malicious requests on 2025-12-24 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 32 malicious requests on 2025-12-24 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-12-25 20:10:39 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇬🇧 openstrike.co.uk	2025-12-25 06:14:13 (9 months ago)	300 attacks on PHP URLs: GET /rh.php HTTP/1.1	Web App Attack
🇧🇪 taivas.nl	2025-12-25 05:32:27 (9 months ago)	Many_bad_calls	Web App Attack
🇺🇸 octageeks.com	2025-12-25 05:06:40 (9 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇭🇺 DumaNet	2025-12-25 02:25:00 (9 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 24. 22:16:52 Source IP: 4.214. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 24. 22:16:52 Source IP: 4.214.24.95 Portion of the log(s): 4.214.24.95 - [24/Dec/2025:22:16:49 +0100] "GET /gmo.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:16:49 +0100] "GET /wp-login.php?redirect_to=https%3A%2F%2F[removed].eu%2Fwp-admin%2Fabout.php&reauth=1 HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:16:48 +0100] "GET /wp-login.php?redirect_to=https%3A%2F%2F[removed].eu%2Fwp-admin%2Fnetwork%2Fplugins.php&reauth=1 HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:16:47 +0100] "GET /.well-known/index.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:16:46 +0100] "GET /byp.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:16:46 +0100] "GET /1.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:16:45 +0100] "GET /alfa.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:16:45 +0100] "GET /wp-admin/maint/admin.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇭🇺 DumaNet	2025-12-25 02:06:00 (9 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 24. 22:06:08 Source IP: 4.214. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 24. 22:06:08 Source IP: 4.214.24.95 Portion of the log(s): 4.214.24.95 - [24/Dec/2025:22:06:06 +0100] "GET /x56.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:06 +0100] "GET /xv.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:05 +0100] "GET /tx1.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:05 +0100] "GET /g.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:04 +0100] "GET /images/m.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:04 +0100] "GET /fwe.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:03 +0100] "GET /randkeyword.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:03 +0100] "GET /admin.php?p= HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:02 +0100] "GET /class20.php HTTP/1.1" 404 153 "-" "-" 4.214.24.95 - [24/Dec/2025:22:06:02 +0100] "GET /class19.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇱🇻 garmtech.com	2025-12-25 01:39:24 (9 months ago)	Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. ... show more Attempted access to sensitive endpoint (/wp-content/plugins/hellopress/wp_filemanager.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-25 01:34:58 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 4.214.24.95 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210350) triggered by 4.214.24.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 20:34:54.732025 2025] [security2:error] [pid 26379:tid 26379] [client 4.214.24.95:11521] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|iconbizpromo.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "iconbizpromo.com"] [uri "/plugins/content/apismtp/apismtp.php.suspected"] [unique_id "aUyUvoCoclf_pL2piBSBPwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Joop	2025-12-25 01:15:14 (9 months ago)	2025-12-25 02:15:12 +0200 s1 /class-t.api.php	Web App Attack

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.94.227.72

🇬🇧 213.166.84.51

🇹🇼 211.20.117.90

🇳🇱 172.71.183.52

🇺🇸 165.154.218.226

🇺🇸 136.90.74.16

🇨🇦 85.217.149.65

🇱🇹 62.60.130.242

🇵🇱 51.68.151.167

🇧🇪 34.156.77.45

🇮🇩 34.50.100.111

🇬🇧 213.166.84.48

🇳🇱 185.223.235.56

🇺🇸 165.245.164.199

🇺🇸 147.182.241.81

🇭🇰 95.182.95.28

🇫🇷 91.231.89.64

🇳🇱 84.82.14.214

🇺🇸 68.183.140.193

🇺🇸 64.62.156.82