JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.231.120.64

4.231.120.64 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 60%: ?

60%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.231.120.64

Whois 4.231.120.64

IP Abuse Reports for 4.231.120.64:

This IP address has been reported a total of 12 times from 11 distinct sources. 4.231.120.64 was first reported on June 28th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 TaKeN	2026-06-28 23:19:38 (1 day ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 17 matching blocked event(s) between 2026-06-29T01:19:38+02:00 and 2026-06-29T01:19:47+02:00. Sample requested paths: /forum/.env, /_profiler/info, /index.php, /site-info.php, /system/info.php. show less	Web App Attack Hacking
🇬🇧 markawes	2026-06-28 23:13:40 (1 day ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 4.231.120.64 - - [29/Jun/2026:00:13:39 +0100] "GET /.git/HEAD HTTP/1.1" 404 455 "-" "Go-http-client/1.1" 4.231.120.64 - - [29/Jun/2026:00:13:39 +0100] "GET /.env HTTP/1.1" 404 455 "-" "Go-http-client/1.1" 4.231.120.64 - - [29/Jun/2026:00:13:39 +0100] "GET /.env.local.php HTTP/1.1" 404 455 "-" "Go-http-client/1.1" show less	Port Scan Hacking Web App Attack
Anonymous	2026-06-28 23:13:01 (1 day ago)	4.231.120.64 - - [28/Jun/2026:23:13:00 +0000] "GET /sources/.env HTTP/1.1" 404 400 "-" "Go-http-clie ... show more 4.231.120.64 - - [28/Jun/2026:23:13:00 +0000] "GET /sources/.env HTTP/1.1" 404 400 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
🇦🇺 AWW-Admin	2026-06-28 22:53:41 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 4.231.120.64 (-)	SQL Injection
🇫🇷 LRNP	2026-06-28 21:58:19 (1 day ago)	_:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /cart/.env HTTP/1.1" 404 118 "-" "Go-http-cl ... show more _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /cart/.env HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /temp.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /asdf.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /site/phpinfo.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /test.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /_profiler/phpinfo HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /info.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /i.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 4.231.120.64 - - [28/Jun/2026:21:58:19 +0000] "GET /php.php HTTP/1.1" 404 118 "-" "Go-http-client/1.1" _:80 ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-28 21:02:40 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 4.231.120.64 (-)	SQL Injection
🇳🇱 tpjg	2026-06-28 19:40:46 (1 day ago)	Automated: 15 requests with error status in 120s window from 4.231.120.64. Evidence: /upload/.env:30 ... show more Automated: 15 requests with error status in 120s window from 4.231.120.64. Evidence: /upload/.env:301,/.env:301,/laravel/.env:301,/api/v1/.env:301,/api/.environment:301,/admin/.env:301,/.environment:301,/app/config/.env:301,/apps/.env:301,/clients/.env:301,/.git/HEAD:301,/api/.env:301,/public/.env:301,/storage/.env:301,/system/.env:301 show less	Web App Attack
🇩🇪 maxpower	2026-06-28 19:24:06 (1 day ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 4.231.120.64 (-): 1 in the last 3600 secs; Po ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 4.231.120.64 (-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 4.231.120.64 - - [28/Jun/2026:21:24:03 +0200] "GET /1.php HTTP/1.1" 404 10387 "-" "Go-http-client/1.1" "-" host=145.239.233.178 show less	Port Scan
Anonymous	2026-06-28 18:59:55 (1 day ago)	4.231.120.64 - - [28/Jun/2026:18:59:54 +0000] "GET /api/test/.env HTTP/1.1" 404 400 "-" "Go-http-cli ... show more 4.231.120.64 - - [28/Jun/2026:18:59:54 +0000] "GET /api/test/.env HTTP/1.1" 404 400 "-" "Go-http-client/1.1" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-28 18:09:29 (1 day ago)		Web App Attack
🇵🇱 alianet	2026-06-28 15:55:03 (1 day ago)	[Sun Jun 28 15:55:02.371121 2026] [proxy_fcgi:error] [pid 3855868:tid 3855955] [client 4.231.120.64: ... show more [Sun Jun 28 15:55:02.371121 2026] [proxy_fcgi:error] [pid 3855868:tid 3855955] [client 4.231.120.64:55606] AH01071: Got error 'Primary script unknown' [Sun Jun 28 15:55:02.371932 2026] [proxy_fcgi:error] [pid 3855868:tid 3855959] [client 4.231.120.64:49849] AH01071: Got error 'Primary script unknown' [Sun Jun 28 15:55:02.588746 2026] [proxy_fcgi:error] [pid 3855831:tid 3855894] [client 4.231.120.64:60609] AH01071: Got error 'Primary script unknown' [Sun Jun 28 15:55:02.590818 2026] [proxy_fcgi:error] [pid 3855868:tid 3855974] [client 4.231.120.64:62560] AH01071: Got error 'Primary script unknown' [Sun Jun 28 15:55:02.590857 2026] [proxy_fcgi:error] [pid 3855901:tid 3855989] [client 4.231.120.64:58975] AH01071: Got error 'Primary script unknown' [Sun Jun 28 15:55:02.591770 2026] [proxy_fcgi:error] [pid 3855868:tid 3855975] [client 4.231.120.64:61292] AH01071: Got error 'Primary script unknown' [Sun Jun 28 15:55:02.987256 2026] [proxy_fcgi:error] [pid 3856253:tid 3856299] [client 4.231.1 ... show less	Port Scan Web App Attack
🇬🇧 f3sc	2026-06-28 15:10:16 (1 day ago)	4.231.120.64 - - [28/Jun/2026:17:10:15 +0200] "GET /includes/phpinfo.php HTTP/1.1" 404 702 "-" "Go-h ... show more 4.231.120.64 - - [28/Jun/2026:17:10:15 +0200] "GET /includes/phpinfo.php HTTP/1.1" 404 702 "-" "Go-http-client/1.1" show less	Hacking Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇴🇲 194.233.110.192

🇸🇬 45.78.206.111

🇺🇸 172.234.199.8

🇹🇼 128.14.226.125

🇦🇹 109.70.100.1

🇬🇧 89.37.172.131

🇩🇪 45.8.68.73

🇺🇸 23.95.8.134

🇧🇷 177.43.83.43

🇺🇸 173.239.218.54

🇭🇰 152.32.239.90

🇮🇳 106.219.123.61

🇧🇬 79.124.58.218

🇩🇪 46.101.173.8

🇳🇱 45.148.10.240

🇺🇸 34.106.197.50

🇮🇳 2409:40c4:30ae:a01b:7182:8afc:de44:2812

🇩🇪 213.209.159.11

🇧🇷 205.210.31.199

🇫🇮 204.168.207.39