JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.232.92.99

4.232.92.99 was found in our database!

This IP was reported 207 times. Confidence of Abuse is 69%: ?

69%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.232.92.99

Whois 4.232.92.99

IP Abuse Reports for 4.232.92.99:

This IP address has been reported a total of 207 times from 152 distinct sources. 4.232.92.99 was first reported on April 9th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 clamehost.it	2026-04-09 11:23:21 (1 month ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
🇺🇸 Epimetheus	2026-04-09 11:22:55 (1 month ago)	Unauthorized access attempts: [GET] /gvg1bvpsgtot1rpklCdefault.php [GET] /hhxc.php [GET] /xwx1.php ... show more Unauthorized access attempts: [GET] /gvg1bvpsgtot1rpklCdefault.php [GET] /hhxc.php [GET] /xwx1.php [GET] /sadcut1.php [GET] /t2gorhwasq4vioshtatw5eCdefault.php [GET] /8daf1238_1774208172.php [GET] /ibcqocdtu3eovdx2hwj7Cdefault.php [GET] /bless.php [GET] /tx78.php [GET] /a7.php [GET] /bolt.php [GET] /torsa1.php [GET] /public/mI35rZhMg1zJ1vuXdefault.php [GET] //wp.php [GET] /a5.php [GET] /gptsh.php [GET] /dass.php [GET] /wp-content/plugins/hellopress/wp_filemanager.php UA: Unknown show less	Web App Attack
🇺🇸 WizardsToolkit	2026-04-09 11:22:33 (1 month ago)	attempted to access /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇨🇦 polycoda	2026-04-09 11:19:06 (1 month ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) - ↪️ Exc ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based) show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-04-09 11:09:53 (1 month ago)	4.232.92.99 - - [09/Apr/2026:11:09:53 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.232.92.99 - - [09/Apr/2026:11:09:53 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3014 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-04-09 11:06:15 (1 month ago)	Blocked: Reason='Vulnerability probing — PHP scan detected (211/60 min)'; Requests=211	Port Scan
🇺🇸 mnsf	2026-04-09 11:05:50 (1 month ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇺🇸 myagent.site	2026-04-09 11:03:30 (1 month ago)	Blocking for trying to access an exploit file: /bless.php	Hacking
Anonymous	2026-04-09 11:02:30 (1 month ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Malicious User-Agent show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-04-09 11:01:54 (1 month ago)	7.304 requests in 1 hour (2mos3w5d)	Brute-Force Bad Web Bot
🇮🇩 Burayot	2026-04-09 10:59:10 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 4.232.92.99 (IT/Italy/-): 1 in the ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 4.232.92.99 (IT/Italy/-): 1 in the last 3600 secs show less	Web App Attack
🇳🇱 Site.eu	2026-04-09 10:59:04 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇨🇭 zynex	2026-04-09 10:53:05 (1 month ago)	URL Probing: /dass.php	Web App Attack
Anonymous	2026-04-09 10:52:50 (1 month ago)	4.232.92.99 - - [09/Apr/2026:12:52:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.232.92.99 - - [09/Apr/2026:12:52:36 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /green.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /qiumnpor3orjwr6me3zmgqCdefault.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /zoper1.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /5xkfgawzejgwqh9hiaznCdefault.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /file61.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /term.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /a7.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026:12:52:37 +0200] "GET /tx78.php HTTP/1.1" 404 498 "-" "-" 4.232.92.99 - - [09/Apr/2026: ... show less	DDoS Attack
🇫🇷 Dorian GRANDHAY	2026-04-09 10:51:49 (1 month ago)	(PERMBLOCK) 4.232.92.99 (IT/Italy/-) has had more than 4 temp blocks in the last 604800 secs; Ports: ... show more (PERMBLOCK) 4.232.92.99 (IT/Italy/-) has had more than 4 temp blocks in the last 604800 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan

Showing 181 to 195 of 207 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 110.225.255.179

🇺🇸 47.254.70.85

🇺🇸 185.238.231.9

🇩🇪 144.31.80.14

🇻🇳 103.176.20.115

🇮🇳 103.174.34.49

🇫🇷 91.196.152.32

🇬🇧 80.42.234.100

🇺🇸 66.132.186.205

🇮🇳 49.43.135.219

🇳🇱 45.148.10.151

🇺🇸 45.43.57.6

🇸🇬 34.177.101.205

🇮🇳 1.22.114.164

🇺🇸 209.85.219.49

🇺🇸 198.199.74.50

🇮🇹 185.208.106.50

🇻🇳 183.91.27.6

🇧🇷 177.189.46.98

🇸🇬 152.42.240.74