JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.232.148.111

4.232.148.111 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.232.148.111

Whois 4.232.148.111

IP Abuse Reports for 4.232.148.111:

This IP address has been reported a total of 145 times from 123 distinct sources. 4.232.148.111 was first reported on August 22nd 2026, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-08-22 20:37:44 (9 minutes ago)	4.232.148.111 - - [22/Aug/2026:22:37:38 +0200] "GET /admin.php HTTP/1.1" 200 100 "-" "Mozilla/5.0 (W ... show more 4.232.148.111 - - [22/Aug/2026:22:37:38 +0200] "GET /admin.php HTTP/1.1" 200 100 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 4.232.148.111 - - [22/Aug/2026:22:37:38 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇴 iulianh	2026-08-22 20:28:28 (18 minutes ago)	80,443	Brute-Force SSH
🇳🇱 MyGlobalFlowers	2026-08-22 20:16:23 (30 minutes ago)	Multiple WAF Violations	Web App Attack
🇩🇪 patrisei	2026-08-22 20:16:22 (30 minutes ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing	Port Scan Web App Attack
🇩🇪 auridh	2026-08-22 20:13:22 (33 minutes ago)	Ip 4.232.148.111 performed 'crowdsecurity/http-backdoors-attempts' (2 events over 573.250211ms) at 2 ... show more Ip 4.232.148.111 performed 'crowdsecurity/http-backdoors-attempts' (2 events over 573.250211ms) at 2026-08-22 18:33:26.350702156 +0000 UTC show less	Web App Attack
🇩🇪 raph	2026-08-22 20:10:41 (36 minutes ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇫🇷 AGEPCom	2026-08-22 20:03:24 (43 minutes ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇫🇷 Stara	2026-08-22 19:56:19 (50 minutes ago)	Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ... show more Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja) show less	Hacking Brute-Force Web App Attack
Anonymous	2026-08-22 19:45:22 (1 hour ago)	4.232.148.111 - - [22/Aug/2026:21:45:13 +0200] "GET /inputs.php HTTP/1.1" 404 28620 4.232.148.111 - ... show more 4.232.148.111 - - [22/Aug/2026:21:45:13 +0200] "GET /inputs.php HTTP/1.1" 404 28620 4.232.148.111 - - [22/Aug/2026:21:45:14 +0200] "GET /admin.php HTTP/1.1" 404 28620 4.232.148.111 - - [22/Aug/2026:21:45:14 +0200] "GET /goods.php HTTP/1.1" 404 28620 4.232.148.111 - - [22/Aug/2026:21:45:15 +0200] "GET /file.php HTTP/1.1" 404 28620 4.232.148.111 - - [22/Aug/2026:21:45:16 +0200] "GET /wp-content/themes/admin.php HTTP/1.1" 404 28619 4.232.148.111 - - [22/Aug/2026:21:45:16 +0200] "GET /adminfuns.php HTTP/1.1" 404 28620 4.232.148.111 - - [22/Aug/2026:21:45:17 +0200] "GET /404.php HTTP/1.1" 404 28620 4.232.148.111 - - [22/Aug/2026:21:45:18 +0200] "GET /m.php HTTP/1.1" 404 28619 4.232.148.111 - - [22/Aug/2026:21:45:19 +0200] "GET /wp-content.php HTTP/1.1" 404 28620 4.232.148.111 - - [22/Aug/2026:21:45:20 +0200] "GET /xda.php HTTP/1.1" 404 28620 ... show less	Web Spam Web App Attack
🇮🇩 soc-yk	2026-08-22 19:42:09 (1 hour ago)	Type: web_scanning Risk: 68 Events: 218 Evidence: - Automated hostile web probing detected - Repeat ... show more Type: web_scanning Risk: 68 Events: 218 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified - Threat escalation behavior observed show less	Web App Attack
🇦🇹 Erpelstolz	2026-08-22 19:25:49 (1 hour ago)	VM 131: 4.232.148.111 - - [22/Aug/2026:21:25:48 +0200] "GET /admin.php HTTP/1.1" 404 5918	Web App Attack
🇫🇷 Stara	2026-08-22 19:17:49 (1 hour ago)	Automated block by CSF/LFD - suspicious activity detected	Brute-Force Web App Attack
🇩🇪 macrob	2026-08-22 19:11:29 (1 hour ago)	2026/08/22 19:11:28 [error] 3074758#3074758: 509032562 access forbidden by rule, client: 4.232.148. ... show more 2026/08/22 19:11:28 [error] 3074758#3074758: 509032562 access forbidden by rule, client: 4.232.148.111, server: behemoti.com, request: "GET /admin.php HTTP/2.0", host: "behemoti.com" 2026/08/22 19:11:28 [error] 3074758#3074758: 509032567 access forbidden by rule, client: 4.232.148.111, server: behemoti.com, request: "GET /wp-content/themes/admin.php HTTP/2.0", host: "behemoti.com" 2026/08/22 19:11:28 [error] 3074758#3074758: 509032558 access forbidden by rule, client: 4.232.148.111, server: behemoti.com, request: "GET /adminfuns.php HTTP/2.0", host: "behemoti.com" ... show less	Web App Attack
🇩🇪 auridh	2026-08-22 19:10:28 (1 hour ago)	Ip 4.232.148.111 performed 'crowdsecurity/http-crawl-non_statics' (45 events over 2.090054409s) at 2 ... show more Ip 4.232.148.111 performed 'crowdsecurity/http-crawl-non_statics' (45 events over 2.090054409s) at 2026-08-22 18:33:26.993312964 +0000 UTC show less	Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-08-22 19:01:24 (1 hour ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 4.232.148.111 - - [22/Aug/20 ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 4.232.148.111 - - [22/Aug/2026:22:01:23 +0300] "GET /alfa.php HTTP/1.1" 404 2420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 203.212.9.221

🇳🇱 195.178.110.218

🇨🇳 183.230.155.13

🇮🇩 182.253.168.82

🇫🇷 85.217.140.24

🇫🇮 80.223.198.246

🇺🇸 47.251.70.209

🇮🇩 163.7.9.84

🇻🇳 103.9.204.209

🇹🇷 88.248.12.233

🇫🇷 85.217.140.1

🇬🇧 57.128.140.154

🇱🇹 213.176.26.72

🇳🇱 195.178.110.26

🇪🇨 186.68.83.105

🇪🇨 186.47.77.39

🇮🇳 182.95.228.194

🇺🇸 130.211.209.5

🇨🇳 110.179.80.134

🇸🇬 103.187.147.214