JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.235.122.61

4.235.122.61 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.235.122.61

Whois 4.235.122.61

IP Abuse Reports for 4.235.122.61:

This IP address has been reported a total of 101 times from 85 distinct sources. 4.235.122.61 was first reported on May 15th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-08 06:29:13 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇨🇦 polycoda	2026-05-29 12:15:34 (3 months ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based)	Hacking Web App Attack
🇺🇸 chronos	2026-05-25 06:57:31 (3 months ago)	[AUTORAVALT][[25/05/2026 - 03:57:30 -03:00 UTC] Attack from [Microsoft Corporation] [4.235.122.61] A ... show more [AUTORAVALT][[25/05/2026 - 03:57:30 -03:00 UTC] Attack from [Microsoft Corporation] [4.235.122.61] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software p] ... show less	Hacking Web App Attack
🇺🇸 chronos	2026-05-25 06:18:02 (3 months ago)	[AUTORAVALT][[25/05/2026 - 03:18:01 -03:00 UTC] Attack from [Microsoft Corporation] [4.235.122.61] A ... show more [AUTORAVALT][[25/05/2026 - 03:18:01 -03:00 UTC] Attack from [Microsoft Corporation] [4.235.122.61] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to prob] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇫🇷 masterguru	2026-05-23 10:26:49 (3 months ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-196)	Hacking Bad Web Bot
🇺🇸 chronos	2026-05-23 09:21:00 (3 months ago)	[AUTORAVALT][[23/05/2026 - 06:21:00 -03:00 UTC] Attack from [Microsoft Corporation] [4.235.122.61] A ... show more [AUTORAVALT][[23/05/2026 - 06:21:00 -03:00 UTC] Attack from [Microsoft Corporation] [4.235.122.61] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to prob] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇵🇾 armandosaucedo.me	2026-05-23 09:01:42 (3 months ago)	Threat Intelligence via ARMTI, Web Attack: GET /.env	Web App Attack
🇩🇪 Mykola Spesivtsev	2026-05-23 09:01:27 (3 months ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env, Method:GET, UA:Mozilla/5.0 (Linux; U; A ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env, Method:GET, UA:Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, lik show less	Port Scan Web App Attack Bad Web Bot
Anonymous	2026-05-23 08:09:42 (3 months ago)	4.235.122.61 - - [23/May/2026:08:09:42 +0000] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux; ... show more 4.235.122.61 - - [23/May/2026:08:09:42 +0000] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" ... show less	Bad Web Bot Web App Attack
🇮🇩 securejdprop	2026-05-23 08:00:04 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to Hidden Environment File - Inbound). Ip 4.235.122.61 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-23 08:00:01.936362266 +0000 UTC show less	Hacking Web App Attack
🇱🇹 NotACaptcha	2026-05-23 07:26:49 (3 months ago)	webserver:80 [23/May/2026] "POST / HTTP/1.1" 200 452 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en- ... show more webserver:80 [23/May/2026] "POST / HTTP/1.1" 200 452 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" webserver:80 [23/May/2026] "GET /.env HTTP/1.1" 404 397 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" webserver:443 [23/May/2026] "POST / HTTP/1.1" 403 5734 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" webserver:443 [23/May/2026] "GET /.env HTTP/1.1" 403 5734 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" show less	Web App Attack
🇫🇷 EDSL	2026-05-23 06:00:38 (3 months ago)	[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 80)	Web App Attack Port Scan Hacking
🇧🇪 voormedia	2026-05-23 05:26:33 (3 months ago)	Accessed trap at '/.env'	Web App Attack
🇺🇸 jcbriar	2026-05-23 04:51:22 (3 months ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇩🇰 SaltySoftworks	2026-05-23 04:37:00 (3 months ago)	Connecting to IP instead of domain name	Hacking Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 209.50.187.201

🇩🇪 209.50.186.238

🇹🇷 195.142.175.196

🇷🇺 188.43.28.193

🇰🇿 46.8.31.84

🇩🇪 209.50.185.156

🇩🇪 209.50.180.187

🇨🇦 209.50.179.178

🇺🇸 209.50.173.103

🇧🇷 186.236.17.235

🇸🇬 47.84.134.78

🇻🇪 38.3.195.66

🇺🇸 209.50.172.185

🇺🇸 209.50.170.181

🇺🇸 209.50.170.177

🇺🇸 209.50.166.10

🇧🇷 205.210.31.154

🇺🇦 185.228.105.200

🇺🇸 149.40.50.108

🇨🇳 122.228.231.158