4.239.196.57

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
109 reports
91 reporters · latest 12 hours ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇨🇦 Canada
City
Toronto, Ontario
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
109 from 91 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 27 🇺🇸 United States of America 24 🇳🇱 Netherlands 11
Most common categories Web App Attack 81 Bad Web Bot 28 Hacking 26 Brute-Force 19 Port Scan 18
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇭 TheCoon
Automated: Credential theft attempt - JSON bomb served
Web App Attack Hacking
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇰🇷 Jaewon
Automated probing for exposed secrets and admin paths (.env, .git, wp-*, *.php). Banned and reported automatically by fail2ban.
Web App Attack
🇩🇪 Nixwig
Web App Attack
Anonymous
WordPress login / xmlrpc probing across multiple sites
Web App Attack
🇩🇪 NetReportsGermany
2026-11-09 17:25:40 UTC - blocked by AbuseIPDB blocklist - ports: 443 - TCP flags: S, src port: 20031, TTL: 41, length: 60 bytes
Port Scan
🇺🇸 RamSet
Bad Web Bot Web App Attack
Anonymous
Web probing (1 hits in 24h) on www.historischarchiefvalkenburg.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇺🇸 sistemacapital
HTTP: repeated requests for unsupported script paths.
Web App Attack
🇱🇻 GooddayGroup
Automated probing for sensitive configuration files and environment leaks.
Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-07.
Web App Attack SSH Hacking
🇩🇪 AetherFox
Bad Web Bot Web App Attack
🇩🇪 arnisolutions
Web App Attack Hacking
🇩🇪 altenglaner
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 201.14.123.106
🇷🇺 185.75.181.87
🇰🇷 112.168.1.182
🇷🇺 93.190.110.226
🇺🇸 44.202.145.34
🇧🇪 35.210.231.84
🇦🇷 186.18.203.48
🇦🇷 181.174.142.152
🇨🇳 116.255.146.141
🇺🇸 100.59.39.90
🇩🇪 93.152.221.210
🇸🇬 82.38.180.185
🇺🇸 66.132.195.39
🇧🇩 58.147.171.11
🇨🇳 58.57.154.146
🇷🇺 46.146.227.191
feedback