JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.223.71.149

4.223.71.149 was found in our database!

This IP was reported 1,090 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇪 Sweden
City	Gavle, Gavleborg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.223.71.149

Whois 4.223.71.149

IP Abuse Reports for 4.223.71.149:

This IP address has been reported a total of 1,090 times from 532 distinct sources. 4.223.71.149 was first reported on July 25th 2026, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 hchristo	2026-07-31 11:38:46 (15 minutes ago)	[Fri Jul 31 13:38:45.420438 2026] [proxy_fcgi:error] [pid 12577:tid 12842] [client 4.223.71.149:5496 ... show more [Fri Jul 31 13:38:45.420438 2026] [proxy_fcgi:error] [pid 12577:tid 12842] [client 4.223.71.149:54967] AH01071: Got error 'Primary script unknown' [Fri Jul 31 13:38:45.686633 2026] [proxy_fcgi:error] [pid 12577:tid 12870] [client 4.223.71.149:54967] AH01071: Got error 'Primary script unknown' [Fri Jul 31 13:38:45.961599 2026] [proxy_fcgi:error] [pid 12577:tid 12816] [client 4.223.71.149:54967] AH01071: Got error 'Primary script unknown' [Fri Jul 31 13:38:46.200597 2026] [proxy_fcgi:error] [pid 12577:tid 12807] [client 4.223.71.149:54967] AH01071: Got error 'Primary script unknown' [Fri Jul 31 13:38:46.294517 2026] [proxy_fcgi:error] [pid 12577:tid 12864] [client 4.223.71.149:54967] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇩🇪 enjoyably	2026-07-31 11:28:52 (25 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Web App Attack Bad Web Bot
🇮🇹 madaello	2026-07-31 11:15:52 (38 minutes ago)	4.223.71.149 - - [31/Jul/2026:13:15:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.223.71.149 - - [31/Jul/2026:13:15:52 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4460 "-" "-" 4.223.71.149 - - [31/Jul/2026:13:15:52 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 212 "-" "-" 4.223.71.149 - - [31/Jul/2026:13:15:52 +0200] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 212 "-" "-" 4.223.71.149 - - [31/Jul/2026:13:15:52 +0200] "GET /media.php HTTP/1.1" 404 212 "-" "-" 4.223.71.149 - - [31/Jul/2026:13:15:52 +0200] "GET /images.php HTTP/1.1" 404 212 "-" "-" ... show less	Port Scan
🇩🇪 maxpower	2026-07-31 11:13:10 (40 minutes ago)	(aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 4.223.71.149 (SE/Sweden/-): 1 in the last 360 ... show more (aggressive_scanner) REGOLA 9 - Aggressive Web Scanner 4.223.71.149 (SE/Sweden/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 4.223.71.149 - - [31/Jul/2026:13:12:59 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 318 "-" "-" "4.223.71.149" host=villapardi.it show less	Port Scan
🇫🇷 Catalin Negru	2026-07-31 11:06:14 (47 minutes ago)	2026-07-29 07:48:28,559 fail2ban.actions [890352]: NOTICE [apache-scan] Ban 4.223.71.149 202 ... show more 2026-07-29 07:48:28,559 fail2ban.actions [890352]: NOTICE [apache-scan] Ban 4.223.71.149 2026-07-29 07:48:28,872 fail2ban.actions [890352]: NOTICE [apache-security] Ban 4.223.71.149 2026-07-29 07:48:28,897 fail2ban.actions [890352]: NOTICE [web-scanner] Ban 4.223.71.149 2026-07-29 07:48:29,160 fail2ban.actions [890352]: NOTICE [apache-404] Ban 4.223.71.149 2026-07-29 07:48:30,895 fail2ban.actions [890352]: NOTICE [wordpress] Ban 4.223.71.149 ... show less	Brute-Force Web App Attack
🇩🇪 itsolon	2026-07-31 10:28:32 (1 hour ago)	[31/Jul/2026:12:28:22 +0200] 178549370226.898881 4.223.71.149 45378 217.154.7.177 80 [31/Jul/2026:12 ... show more [31/Jul/2026:12:28:22 +0200] 178549370226.898881 4.223.71.149 45378 217.154.7.177 80 [31/Jul/2026:12:28:23 +0200] 178549370369.936256 4.223.71.149 45378 217.154.7.177 80 [31/Jul/2026:12:28:25 +0200] 178549370585.787367 4.223.71.149 45378 217.154.7.177 80 [31/Jul/2026:12:28:27 +0200] 178549370744.764462 4.223.71.149 45378 217.154.7.177 80 [31/Jul/2026:12:28:32 +0200] 178549371278.877504 4.223.71.149 45378 217.154.7.177 80 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇹🇷 oalver	2026-07-31 10:23:01 (1 hour ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_404_flood, ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_404_flood, nginx_path_signature. Sources: nginx. Details: path_signature: request to /wp-admin/css/colors/modern/ (HTTP 403); 404_flood: 10 requests to /pucci.php (HTTP 404) within 60s. First seen: 2026-07-31. Risk score: 45/100. show less	Web App Attack
Anonymous	2026-07-31 10:19:27 (1 hour ago)	Observed broad exploit-path scan in 15-minute window: url=/wp-content/plugins/hellopress/wp_filemana ... show more Observed broad exploit-path scan in 15-minute window: url=/wp-content/plugins/hellopress/wp_filemanager.php, url=/wp-load.php, url=/admin.php, url=/cgi-bin/index.php, url=/config.json.php (+47 more) show less	Web App Attack
🇺🇸 deskpass.com	2026-07-31 10:15:23 (1 hour ago)	GET /chosen.php	Web App Attack
🇩🇪 patrisei	2026-07-31 10:15:08 (1 hour ago)	You are now banned for 10 years by Schiffdorf-West Patrol. Trigger: crowdsecurity/http-probing	Port Scan Web App Attack
🇫🇷 dusfor72	2026-07-31 10:03:55 (1 hour ago)	stupid access attempts on non-existant files ...	Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-07-31 09:47:14 (2 hours ago)	[Fri Jul 31 10:47:13.286240 2026] [proxy_fcgi:error] [pid 2402339:tid 139825990583872] [client 4.223 ... show more [Fri Jul 31 10:47:13.286240 2026] [proxy_fcgi:error] [pid 2402339:tid 139825990583872] [client 4.223.71.149:25985] AH01071: Got error 'Primary script unknown' [Fri Jul 31 10:47:14.476057 2026] [proxy_fcgi:error] [pid 2402339:tid 139825839580736] [client 4.223.71.149:25985] AH01071: Got error 'Primary script unknown' [Fri Jul 31 10:47:14.510878 2026] [proxy_fcgi:error] [pid 2402339:tid 139825873151552] [client 4.223.71.149:25985] AH01071: Got error 'Primary script unknown' [Fri Jul 31 10:47:14.545972 2026] [proxy_fcgi:error] [pid 2402339:tid 139825982191168] [client 4.223.71.149:25985] AH01071: Got error 'Primary script unknown' [Fri Jul 31 10:47:14.583936 2026] [proxy_fcgi:error] [pid 2402339:tid 139826527454784] [client 4.223.71.149:25985] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
🇳🇱 prinsbert	2026-07-31 09:40:05 (2 hours ago)	Hit honeypot route /wp-content/plugins/hellopress/wp_filemanager.php	Web App Attack
🇩🇪 Jarda_H	2026-07-31 09:38:56 (2 hours ago)	http-admin-interface-probing	Web App Attack
Anonymous	2026-07-31 09:37:08 (2 hours ago)	4.223.71.149 - - [31/Jul/2026:04:36:50 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.223.71.149 - - [31/Jul/2026:04:36:50 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:50 -0500] "GET /this_is_a_new_hello_world.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:51 -0500] "GET /3PJcpMFsD8B.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:51 -0500] "GET /media.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:51 -0500] "GET /images.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:52 -0500] "GET /adminner.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:52 -0500] "GET ///admin.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:52 -0500] "GET /ops.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:52 -0500] "GET /mac.php HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36:53 -0500] "GET /wp-admin/css/colors/modern/ HTTP/1.0" 403 199 "-" "-" 4.223.71.149 - - [31/Jul/2026:04:36 ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 1090 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 85.217.140.49

🇷🇺 83.69.249.86

🇨🇳 36.108.175.145

🇬🇧 35.203.210.235

🇳🇱 213.176.26.77

🇸🇾 188.133.89.121

🇲🇽 187.170.224.116

🇵🇰 103.213.112.203

🇲🇾 49.125.201.73

🇮🇳 49.37.113.236

🇺🇸 174.23.243.117

🇹🇭 171.97.84.134

🇺🇸 162.216.149.192

🇮🇳 103.44.52.128

🇳🇱 45.148.10.141

🇻🇪 38.159.53.18

🇷🇺 185.224.97.160

🇧🇷 168.90.152.208

🇭🇰 152.32.129.154

🇨🇳 110.249.201.215