JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.235.96.162

4.235.96.162 was found in our database!

This IP was reported 198 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.235.96.162

Whois 4.235.96.162

IP Abuse Reports for 4.235.96.162:

This IP address has been reported a total of 198 times from 170 distinct sources. 4.235.96.162 was first reported on August 24th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 conure.sh	2026-08-25 12:00:11 (2 hours ago)	csagent: score 19.7: shell drop sweep x2; 1 domain(s) in 5s	Web App Attack
🇭🇺 DumaNet	2026-08-25 05:20:00 (9 hours ago)	Web app attack attempts, scanning for vulnerability. Date: 2026 Aug 25. 03:01:54 Source IP: 4.235. ... show more Web app attack attempts, scanning for vulnerability. Date: 2026 Aug 25. 03:01:54 Source IP: 4.235.96.162 Portion of the log(s): 4.235.96.162 - [25/Aug/2026:03:01:54 +0200] "GET /wpxml.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:54 +0200] "GET /chosen.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:54 +0200] "GET /key.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:54 +0200] "GET /222.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:54 +0200] "GET /img.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:54 +0200] "GET /aa.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:53 +0200] "GET /inso.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:53 +0200] "GET /dex.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:53 +0200] "GET /82.php HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01:53 +0200] "GET /k.php?p= HTTP/1.1" 404 153 "-" "-" 4.235.96.162 - [25/Aug/2026:03:01 show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-08-25 05:14:50 (9 hours ago)	86 attacks on PHP URLs: GET /3PJcpMFsD8B.php HTTP/1.1	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-08-25 05:08:00 (9 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-08-25 04:23:01 (10 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-08-25 04:05:04 (10 hours ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2026-08-25 02:05:36 (12 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇱🇹 Evag Touf	2026-08-25 01:56:12 (12 hours ago)	(apache-empty-useragent) Failed apache-empty-useragent trigger from 4.235.96.162 (NO/Norway/-)	Hacking
🇫🇷 Campus France	2026-08-25 01:55:29 (12 hours ago)	[Mon Aug 24 21:58:25.819060 2026] [php:error] [pid 1758727] [client 4.235.96.162:8144] script '/var/ ... show more [Mon Aug 24 21:58:25.819060 2026] [php:error] [pid 1758727] [client 4.235.96.162:8144] script '/var/www/html/red.php' not found or unable to stat [Mon Aug 24 21:58:25.848644 2026] [php:error] [pid 1758727] [client 4.235.96.162:8144] script '/var/www/html/admin.php' not found or unable to stat [Mon Aug 24 21:58:25.878213 2026] [php:error] [pid 1758727] [client 4.235.96.162:8144] script '/var/www/html/file52.php' not found or unable to stat [Mon Aug 24 21:58:25.918147 2026] [php:error] [pid 1758727] [client 4.235.96.162:8144] script '/var/www/html/geck.php' not found or unable to stat [Tue Aug 25 03:55:29.246307 2026] [php:error] [pid 1927664] [client 4.235.96.162:28084] script '/var/www/html/campus-perpignan/this_is_a_new_hello_world.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇳🇱 MM-bot	2026-08-25 01:50:15 (12 hours ago)	URL-probe: HTTP/1.1 GET request on /wp-content/plugins/hellopress/wp_filemanager.php (2026-08-25 03: ... show more URL-probe: HTTP/1.1 GET request on /wp-content/plugins/hellopress/wp_filemanager.php (2026-08-25 03:50:15 UTC+2) show less	Web App Attack Hacking
Anonymous	2026-08-25 01:49:53 (12 hours ago)	(PERMBLOCK) 4.235.96.162 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Ports ... show more (PERMBLOCK) 4.235.96.162 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Anonymous	2026-08-25 01:37:11 (12 hours ago)	[24-Aug-2026 21:37:07 America/New_York] Page Not Found: wp_filemanager.php [4.235.96.162] [24-Aug-20 ... show more [24-Aug-2026 21:37:07 America/New_York] Page Not Found: wp_filemanager.php [4.235.96.162] [24-Aug-2026 21:37:08 America/New_York] Page Not Found: this_is_a_new_hello_world.php [4.235.96.162] ... show less	Brute-Force
🇺🇸 Mundo Bueno	2026-08-25 01:31:10 (13 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /db.php/new.php \| Pays: NO \| UA:	Hacking Web App Attack
🇦🇺 artful	2026-08-25 01:20:00 (13 hours ago)	Excessive errors in recent hours	Web App Attack
🇩🇪 TheDjRider	2026-08-25 01:17:11 (13 hours ago)	CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ... show more CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-08-25T01:17:07.657808962Z. Context: http_status=404 show less	Web App Attack

Showing 1 to 15 of 198 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 2800:1e0:1604:5:9999::214

🇺🇸 162.216.149.99

🇻🇳 103.199.16.90

🇰🇪 102.215.15.38

🇩🇪 93.152.221.210

🇳🇱 89.248.172.14

🇨🇦 85.217.149.49

🇺🇸 2a09:bac1:76a0:480::11:232

🇸🇬 2404:6800:4003:c22::129

🇬🇧 213.166.84.48

🇱🇺 194.147.93.22

🇦🇷 190.173.35.61

🇹🇷 185.19.154.78

🇺🇸 162.216.149.38

🇸🇬 152.42.190.7

🇨🇳 120.24.75.181

🇯🇵 111.235.76.92

🇫🇷 88.183.94.252

🇨🇦 52.139.44.162

🇳🇱 45.148.10.157