JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.218.11.53

Neutral Activity

Abuse Confidence Score

0% Low Risk

270 reports

171 reporters · latest 11 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.218.11.53 has been reported 270 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

270 from 171 distinct reporters

First reported

November 12th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-15 08:18:32 UTC · (11 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇺🇸 bazter.pro	2025-12-08 02:17:43 UTC · (11 months ago)	CRITICAL: Sensitive files (1); DC: Microsoft Corporation [Paths: 75]	Web App Attack
🇩🇪 itsolon	2025-11-18 09:39:27 UTC · (11 months ago)	Fail2Ban plesk-modsecurity ban	Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-11-16 20:09:57 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-11-16 19:48:36 UTC · (11 months ago)	$f2bV_matches	Brute-Force
🇭🇺 DumaNet	2025-11-16 05:00:00 UTC · (11 months ago)	WordPress plugin attack attempts. Date: 2025 Nov 13. 19:45:20 Source IP: 4.218.11.53 Portion of the log(s): 4.218.11.53 - [13/Nov/2025:19:45:19 +0100] "GET /wp-admin/includes/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:19 +0100 ... show more WordPress plugin attack attempts. Date: 2025 Nov 13. 19:45:20 Source IP: 4.218.11.53 Portion of the log(s): 4.218.11.53 - [13/Nov/2025:19:45:19 +0100] "GET /wp-admin/includes/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:19 +0100] "GET /xleet.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:18 +0100] "GET /nc4.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:18 +0100] "GET /ioxi-o.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:17 +0100] "GET /info.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:17 +0100] "GET /images/index.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:17 +0100] "GET /flower.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:16 +0100] "GET /file.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:16 +0100] "GET /edit.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45:16 +0100] "GET /cgi-bin/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:19:45 show less	Hacking Web App Attack
🇭🇺 DumaNet	2025-11-16 04:39:00 UTC · (11 months ago)	WordPress plugin attack attempts. Date: 2025 Nov 13. 10:08:52 Source IP: 4.218.11.53 Portion of the log(s): 4.218.11.53 - [13/Nov/2025:10:07:15 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:15 +01 ... show more WordPress plugin attack attempts. Date: 2025 Nov 13. 10:08:52 Source IP: 4.218.11.53 Portion of the log(s): 4.218.11.53 - [13/Nov/2025:10:07:15 +0100] "GET /wp-includes/widgets/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:15 +0100] "GET /wp-includes/rest-api/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:14 +0100] "GET /wp-includes/js/crop/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:14 +0100] "GET /wp-includes/fonts/index.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:13 +0100] "GET /wp-includes/fonts/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:12 +0100] "GET /wp-includes/block-supports/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:11 +0100] "GET /wp-includes/IXR/ HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:11 +0100] "GET /wp-cron.php HTTP/1.1" 404 153 "-" "-" 4.218.11.53 - [13/Nov/2025:10:07:10 +0100] "GET /wp-content/wp-conflg.php HTTP/1.1" 404 153 "-" "-" show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2025-11-15 23:35:34 UTC · (11 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-15 20:09:56 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 itsolon	2025-11-15 19:39:29 UTC · (11 months ago)	Fail2Ban plesk-modsecurity ban	Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-11-15 06:13:28 UTC · (1 year ago)	22 attacks on PHP URLs: GET /info.php HTTP/1.1	Web App Attack
🇮🇩 securejdprop	2025-11-14 20:37:16 UTC · (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband. Ip 4.218.11.53 performed 'crowdsecurity/crowdsec-appsec-outofband' (6 events over 4.205041154s) at 2025-11-14 20:37:14.971373085 +0000 UTC	Web App Attack
🇦🇺 2000cn.com.au	2025-11-14 20:18:59 UTC · (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-wordpress-scan	Hacking Web App Attack
🇩🇪 becker-software.de	2025-11-14 20:03:14 UTC · (1 year ago)	{"ip": "4.218.11.53","host": "www.becker-software.de","path": "/inputs.php","status": "404","referrer": "-","user_agent": "-","length": 197,"generation_time_milli": 0.001,"date": "2025-11-14T20:03:07+00:00"} {"ip": "4.218.11.53","host": "www.becker-s ... show more {"ip": "4.218.11.53","host": "www.becker-software.de","path": "/inputs.php","status": "404","referrer": "-","user_agent": "-","length": 197,"generation_time_milli": 0.001,"date": "2025-11-14T20:03:07+00:00"} {"ip": "4.218.11.53","host": "www.becker-software.de","path": "/classsmtps.php","status": "404","referrer": "-","user_agent": "-","length": 197,"generation_time_milli": 0.002,"date": "2025-11-14T20:03:07+00:00"} {"ip": "4.218.11.53","host": "www.becker-software.de","path": "/classsmtps.php","status": "404","referrer": "-","user_agent": "-","length": 197,"generation_time_milli": 0.002,"date": "2025-11-14T20:03:07+00:00"} {"ip": "4.218.11.53","host": "www.becker-software.de","path": "/wp-blog-header.php","status": "404","referrer": "-","user_agent": "-","length": 197,"generation_time_milli": 0.003,"date": "2025-11-14T20:03:08+00:00"} {"ip": "4.218.11.53","host": "www.becker-software.de","path": "/wp-blog-header.php","status": "404","referrer": "-","user_agent": "-","length": 197,"gen ... show less	Web App Attack
🇩🇪 macrob	2025-11-14 19:57:15 UTC · (1 year ago)	2025/11/14 19:57:04 [error] 3638573#3638573: 99849758 access forbidden by rule, client: 4.218.11.53, server: finami.ph, request: "GET /admin.php HTTP/2.0", host: "finami.ph" 2025/11/14 19:57:14 [error] 3638575#3638575: 99849625 access forbidden by ... show more 2025/11/14 19:57:04 [error] 3638573#3638573: 99849758 access forbidden by rule, client: 4.218.11.53, server: finami.ph, request: "GET /admin.php HTTP/2.0", host: "finami.ph" 2025/11/14 19:57:14 [error] 3638575#3638575: 99849625 access forbidden by rule, client: 4.218.11.53, server: finami.ph, request: "GET /install.php HTTP/2.0", host: "finami.ph" 2025/11/14 19:57:14 [error] 3638574#3638574: *99849674 access forbidden by rule, client: 4.218.11.53, server: finami.ph, request: "GET /wp-login.php HTTP/2.0", host: "finami.ph" ... show less	Web App Attack

Showing 1 to 15 of 270 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 186.158.183.66

🇩🇰 121.127.45.65

🇲🇺 102.113.52.249

🇨🇦 96.53.21.238

🇺🇸 37.140.223.211

🇧🇪 35.210.137.117

🇺🇸 3.92.143.96

🇺🇸 193.151.188.11

🇳🇱 185.223.235.26

🇨🇳 182.119.225.27

🇻🇪 82.86.122.151

🇷🇴 80.94.95.115

🇳🇱 77.239.124.37

🇫🇮 46.29.26.163

🇺🇸 40.74.212.136

🇮🇱 34.165.54.255

🇰🇷 14.55.199.214

🇮🇳 8.234.71.76

🇨🇦 216.113.110.14

🇷🇺 185.251.149.140