JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.230.28.141

4.230.28.141 was found in our database!

This IP was reported 314 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.230.28.141

Whois 4.230.28.141

IP Abuse Reports for 4.230.28.141:

This IP address has been reported a total of 314 times from 161 distinct sources. 4.230.28.141 was first reported on June 5th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-06-12 03:13:28 (2 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:51 -0300] "GET /a.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇧🇷 Peregrine	2026-06-10 03:14:07 (4 days ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06: ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:51 -0300] "GET /a.php HTTP/1.1" 404 18193 show less	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-06-09 22:30:07 (4 days ago)		Brute-Force Web App Attack
Anonymous	2026-06-09 09:32:30 (5 days ago)	FortiWeb WAF: 46 attacks detected. Threat Score: 5200. Types: Client Management(23), Block IP List(2 ... show more FortiWeb WAF: 46 attacks detected. Threat Score: 5200. Types: Client Management(23), Block IP List(23). Origin: Republic Of Korea. show less	Web App Attack
🇬🇧 consul.to	2026-06-09 05:42:19 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 Christopher Hughes	2026-06-09 04:00:07 (5 days ago)	[Tue Jun 09 05:00:05.944065 2026] [proxy_fcgi:error] [pid 550210:tid 139822249272896] [client 4.230. ... show more [Tue Jun 09 05:00:05.944065 2026] [proxy_fcgi:error] [pid 550210:tid 139822249272896] [client 4.230.28.141:3053] AH01071: Got error 'Primary script unknown' [Tue Jun 09 05:00:06.209860 2026] [proxy_fcgi:error] [pid 550210:tid 139822089877056] [client 4.230.28.141:3053] AH01071: Got error 'Primary script unknown' [Tue Jun 09 05:00:06.475269 2026] [proxy_fcgi:error] [pid 550210:tid 139822073091648] [client 4.230.28.141:3053] AH01071: Got error 'Primary script unknown' [Tue Jun 09 05:00:06.731665 2026] [proxy_fcgi:error] [pid 550210:tid 139822106662464] [client 4.230.28.141:3053] AH01071: Got error 'Primary script unknown' [Tue Jun 09 05:00:06.990561 2026] [proxy_fcgi:error] [pid 550210:tid 139822098269760] [client 4.230.28.141:3053] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇳🇱 CryptoYakari	2026-06-09 03:45:20 (5 days ago)	4.230.28.141 - - [09/Jun/2026:06:45:17 +0300] "GET /a.php HTTP/1.0" 404 6840 "-" "Mozilla/5.0 (Windo ... show more 4.230.28.141 - - [09/Jun/2026:06:45:17 +0300] "GET /a.php HTTP/1.0" 404 6840 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.230.28.141 - - [09/Jun/2026:06:45:17 +0300] "GET /aa.php HTTP/1.0" 404 1876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.230.28.141 - - [09/Jun/2026:06:45:17 +0300] "GET /aaa.php HTTP/1.0" 404 1876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.230.28.141 - - [09/Jun/2026:06:45:18 +0300] "GET /ab.php HTTP/1.0" 404 1876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.230.28.141 - - [09/Jun/2026:06:45:18 +0300] "GET /lock360.php HTTP/1.0" 404 1876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot
🇧🇷 Peregrine	2026-06-09 03:11:54 (5 days ago)	Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:53 -0 ... show more Fail2Ban ct101 Jail: tomcat-404 \| Evidence: 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:53 -0300] "GET /ab.php HTTP/1.1" 404 18193 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:53 -0300] "GET /lock360.php HTTP/1.1" 404 18193 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:54 -0300] "GET /anonse/lock360.php HTTP/1.1" 404 18193 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:54 -0300] "GET /file5.php HTTP/1.1" 404 18193 4.230.28.141 162.158.138.51 - - [08/Jun/2026:07:06:54 -0300] "GET /sitemaps.php HTTP/1.1" 404 18193 show less	Bad Web Bot Web App Attack
Anonymous	2026-06-09 03:00:12 (5 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇮🇹 ciccio diddo	2026-06-09 02:56:16 (5 days ago)	CMS/WP Exploit multiple 404 port:Tcp/80,443	Brute-Force Web App Attack
🇳🇴 Abuse Buster	2026-06-09 02:48:32 (5 days ago)	4.230.28.141 - [09/Jun/2026:04:48:29 +0200] "GET /a.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows N ... show more 4.230.28.141 - [09/Jun/2026:04:48:29 +0200] "GET /a.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.230.28.141 - [09/Jun/2026:04:48:30 +0200] "GET /aa.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.230.28.141 - [09/Jun/2026:04:48:30 +0200] "GET /aaa.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.230.28.141 - [09/Jun/2026:04:48:31 +0200] "GET /ab.php HTTP/2.0" 404 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Skyrider	2026-06-09 02:37:15 (5 days ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇩🇪 Trueforce Threat Report	2026-06-09 02:07:48 (5 days ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇪🇸 alferez	2026-06-09 01:41:20 (5 days ago)	Searching hacked php files	Hacking Exploited Host Web App Attack
🇳🇱 CryptoYakari	2026-06-09 01:38:59 (5 days ago)	[Tue Jun 09 04:38:56.839190 2026] [proxy_fcgi:error] [pid 3010154:tid 3010172] [client 4.230.28.141: ... show more [Tue Jun 09 04:38:56.839190 2026] [proxy_fcgi:error] [pid 3010154:tid 3010172] [client 4.230.28.141:0] AH01071: Got error 'Primary script unknown' [Tue Jun 09 04:38:57.165914 2026] [proxy_fcgi:error] [pid 3010152:tid 3010159] [client 4.230.28.141:0] AH01071: Got error 'Primary script unknown' [Tue Jun 09 04:38:57.444880 2026] [proxy_fcgi:error] [pid 3010154:tid 3010201] [client 4.230.28.141:0] AH01071: Got error 'Primary script unknown' ... show less	Web Spam Blog Spam Web App Attack Bad Web Bot

Showing 1 to 15 of 314 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.167.232.228

🇰🇷 211.37.174.62

🇨🇳 171.114.224.130

🇺🇸 159.223.118.175

🇨🇳 113.57.186.64

🇨🇳 43.248.108.64

🇳🇱 195.178.110.30

🇨🇳 175.30.48.10

🇭🇰 152.32.171.184

🇺🇸 130.131.161.76

🇨🇦 85.217.149.64

🇳🇱 64.227.68.5

🇺🇸 45.156.129.159

🇺🇸 45.55.185.228

🇧🇷 43.157.163.155

🇺🇸 34.134.61.111

🇩🇪 31.76.16.115

🇺🇸 5.183.254.204

🇩🇪 217.60.241.103

🇳🇱 176.65.139.247