20.48.25.221
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Microsoft Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇯🇵 Japan
- City
- Tokyo, Tokyo
Abuse Reports
Total reports
108 from
76 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Derek Linz |
Automated: web scanner probing exploit paths: /.env
|
Port Scan Web App Attack | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇳🇱 StopAbuse |
tcp/80
|
Port Scan | |
| 🇸🇰 iplusv |
Automatic report from IV firewall log.
|
Port Scan Hacking Brute-Force | |
| 🇷🇴 abuse_IP_reporter |
Apr 13 12:52:12 server UFW BLOCK SRC=20.48.25.221 DF PROTO=TCP SPT=56509
|
Port Scan | |
| 🇨🇭 Elysium Security |
Mass port scanning on a whole network
|
Port Scan | |
| 🇺🇸 technash |
Unauthorized network connection attempt(s) via TCP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel]. Deny/drop traffic.
|
Port Scan | |
| 🇬🇧 Nov |
Unauthorized HTTP access attempt (tcp/80)
|
Port Scan | |
| 🇩🇪 arc21 |
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [80/tcp]
Source port: 56509
TTL: 234
Packet length: 40
|
Port Scan Web App Attack | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Web Attack Port 80)
|
Web App Attack Hacking Port Scan | |
| Anonymous |
Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.
|
Web App Attack | |
| 🇫🇷 OrchidsRadiant |
_:80 20.48.25.221 - - [11/Apr/2026:13:51:12 +0000] "GET /.env HTTP/1.1" 404 118 "-" "python-requests/2.26.0"
...
|
Bad Web Bot Web App Attack | |
| 🇳🇱 i-turnradio.nl |
2026-04-11 15:30:24 (CET) ~ Blocked by abusescan risk assessment
|
Web App Attack | |
| Anonymous |
20.48.25.221 - - [11/Apr/2026:15:08:23 +0200] "GET /.env HTTP/1.1" 403 440 "-" "python-requests/2.26.0"
...
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown