JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.242.196.131

4.242.196.131 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.242.196.131

Whois 4.242.196.131

IP Abuse Reports for 4.242.196.131:

This IP address has been reported a total of 27 times from 27 distinct sources. 4.242.196.131 was first reported on September 14th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-09-16 14:27:00 (4 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇮🇹 abuseiphack	2026-09-16 13:34:27 (4 days ago)	Automatic report for brute force attack	Bad Web Bot
🇩🇪 LRob	2026-09-16 12:52:51 (4 days ago)	Walking a list of paths that do not exist (scanning) \| method: GET \| path: /careers (+17 more) \| 202 ... show more Walking a list of paths that do not exist (scanning) \| method: GET \| path: /careers (+17 more) \| 2026-09-16 12:52 UTC show less	Port Scan Web App Attack
🇺🇸 mnsf	2026-09-16 11:05:04 (4 days ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇩🇪 NetWatch	2026-09-15 18:55:20 (5 days ago)	The IP 4.242.196.131 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇫🇷 otiima	2026-09-14 17:22:15 (6 days ago)	Sep 14 18:22:11 box sshd[1860666]: Failed password for root from 4.242.196.131 port 51226 ssh2 Sep 1 ... show more Sep 14 18:22:11 box sshd[1860666]: Failed password for root from 4.242.196.131 port 51226 ssh2 Sep 14 18:22:12 box sshd[1860687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.242.196.131 user=root Sep 14 18:22:14 box sshd[1860687]: Failed password for root from 4.242.196.131 port 51224 ssh2 ... show less	Brute-Force SSH
🇺🇸 roki.ovh	2026-09-14 17:01:17 (6 days ago)	Sep 14 19:01:08 roki2 sshd\[10684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 ... show more Sep 14 19:01:08 roki2 sshd\[10684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.242.196.131 user=root Sep 14 19:01:10 roki2 sshd\[10684\]: Failed password for root from 4.242.196.131 port 51225 ssh2 Sep 14 19:01:10 roki2 sshd\[10748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.242.196.131 user=root Sep 14 19:01:12 roki2 sshd\[10748\]: Failed password for root from 4.242.196.131 port 51226 ssh2 Sep 14 19:01:12 roki2 sshd\[10755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.242.196.131 user=root ... show less	Brute-Force SSH
🇫🇷 Cuteminded	2026-09-14 16:08:55 (6 days ago)	Brute force SSH login attempts	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-09-14 16:07:30 (6 days ago)	Sep 14 18:07:21 pegasus sshd[2523080]: Failed password for root from 4.242.196.131 port 51225 ssh2 S ... show more Sep 14 18:07:21 pegasus sshd[2523080]: Failed password for root from 4.242.196.131 port 51225 ssh2 Sep 14 18:07:23 pegasus sshd[2523088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.242.196.131 user=root Sep 14 18:07:25 pegasus sshd[2523088]: Failed password for root from 4.242.196.131 port 51226 ssh2 Sep 14 18:07:27 pegasus sshd[2523101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.242.196.131 user=root Sep 14 18:07:29 pegasus sshd[2523101]: Failed password for root from 4.242.196.131 port 51224 ssh2 show less	Brute-Force SSH
🇫🇷 EvoX	2026-09-14 15:15:01 (6 days ago)	🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credentials: root:Contabo@2026 ... show more 🛡️ Honeypot [bsts-tpot-hive]: Brute-force attack detected on 22/SSH • Credentials: root:Contabo@2026, root:Contabo@1 • Number of login attempts: 2 • Client: SSH-2.0-paramiko_5.0.0 show less	Brute-Force SSH
🇬🇧 Globe2	2026-09-14 15:09:40 (6 days ago)	SSH Brute Force Attempt [server: OJ1]	SSH
🇫🇷 balint1414	2026-09-14 15:01:42 (6 days ago)	Sep 14 17:01:35 mail sshd[525997]: Failed password for root from 4.242.196.131 port 51225 ssh2 Sep 1 ... show more Sep 14 17:01:35 mail sshd[525997]: Failed password for root from 4.242.196.131 port 51225 ssh2 Sep 14 17:01:37 mail sshd[527678]: Failed password for root from 4.242.196.131 port 51226 ssh2 Sep 14 17:01:41 mail sshd[528362]: Failed password for root from 4.242.196.131 port 51224 ssh2 show less	Brute-Force SSH
🇺🇸 mibbsdevs	2026-09-14 14:54:27 (6 days ago)	CoffeePot: Connection attempt detected on closed service bait ports (21/22/23/3306/3389/5432).	Port Scan
Anonymous	2026-09-14 14:52:14 (6 days ago)	2026-09-14T11:52:09.434711-03:00 web sshd[343384]: pam_unix(sshd:auth): authentication failure; logn ... show more 2026-09-14T11:52:09.434711-03:00 web sshd[343384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.242.196.131 user=root 2026-09-14T11:52:11.483439-03:00 web sshd[343384]: Failed password for root from 4.242.196.131 port 51225 ssh2 2026-09-14T11:52:13.245754-03:00 web sshd[343384]: Connection closed by authenticating user root 4.242.196.131 port 51225 [preauth] ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-09-14 14:50:08 (6 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 117.2.49.125

🇧🇪 35.233.63.70

🇧🇪 198.235.24.198

🇹🇼 198.235.24.60

🇷🇴 193.32.162.84

🇩🇪 167.94.145.18

🇺🇸 159.223.124.89

🇸🇬 129.226.153.214

🇰🇷 115.91.48.140

🇸🇬 47.79.13.84

🇧🇪 34.78.168.65

🇺🇸 34.45.194.105

🇨🇱 191.116.184.232

🇷🇺 176.62.86.183

🇫🇮 147.185.133.171

🇧🇷 143.208.236.78

🇺🇸 136.114.88.91

🇺🇸 136.108.94.53

🇨🇳 101.96.202.144

🇫🇷 91.196.152.207