JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.189.129.162

Neutral Activity

Abuse Confidence Score

0% Low Risk

119 reports

100 reporters · latest 11 months ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇯🇵 Japan
City: Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.189.129.162 has been reported 119 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

119 from 100 distinct reporters

First reported

December 1st 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-15 08:17:24 UTC · (11 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇬🇧 [email protected]	2025-12-08 00:54:23 UTC · (11 months ago)	...	Brute-Force SSH
🇩🇪 Holger	2025-12-06 23:27:39 UTC · (11 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇩🇪 Holger	2025-12-05 20:07:39 UTC · (11 months ago)	Bruteforce WebAttack	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-12-03 20:10:16 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 homeshowdomain.nl	2025-12-02 23:04:25 UTC · (11 months ago)	Auto-ban: 42 malicious requests on 2025-12-01 (e.g., env/backup probes, brute-force, or error bursts).	Hacking Web App Attack SSH
🇹🇷 rtbh.com.tr	2025-12-02 20:10:14 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇪 Ivo Vynckier	2025-12-02 14:22:00 UTC · (11 months ago)	4.189.129.162 - - [01/Dec/2025:23:33:02 +0100] "GET /1.php HTTP/1.1" 301 250 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 4.189.129.162 - - [01/Dec ... show more 4.189.129.162 - - [01/Dec/2025:23:33:02 +0100] "GET /1.php HTTP/1.1" 301 250 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 4.189.129.162 - - [01/Dec/2025:23:33:02 +0100] "GET /403.php HTTP/1.1" 301 252 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 4.189.129.162 - - [01/Dec/2025:23:33:03 +0100] "GET /aa.php HTTP/1.1" 301 251 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" show less	Web App Attack
🇸🇪 SkyDancer	2025-12-02 12:11:20 UTC · (11 months ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).	Hacking Brute-Force
Anonymous	2025-12-02 06:49:00 UTC · (11 months ago)		Web App Attack
🇬🇧 openstrike.co.uk	2025-12-02 06:14:47 UTC · (11 months ago)	8 attacks on PHP URLs: GET /.well-known/acme-challenge/xa.php HTTP/1.1	Web App Attack
🇧🇪 taivas.nl	2025-12-02 05:32:44 UTC · (11 months ago)	Many_bad_calls	Web App Attack
🇭🇺 DumaNet	2025-12-02 04:51:00 UTC · (11 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 01. 17:49:42 Source IP: 4.189.129.162 Portion of the log(s): 4.189.129.162 - [01/Dec/2025:17:49:40 +0100] "GET /as.php HTTP/1.1" 404 555 "https://www.bing.com/" "Mozilla/5.0 (L ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 01. 17:49:42 Source IP: 4.189.129.162 Portion of the log(s): 4.189.129.162 - [01/Dec/2025:17:49:40 +0100] "GET /as.php HTTP/1.1" 404 555 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 4.189.129.162 - [01/Dec/2025:17:49:40 +0100] "GET /api.php HTTP/1.1" 404 555 "https://www.google.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 4.189.129.162 - [01/Dec/2025:17:49:39 +0100] "GET /alfa.php HTTP/1.1" 404 153 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 4.189.129.162 - [01/Dec/2025:17:49:39 +0100] "GET /akcc.php HTTP/1.1" 404 555 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome show less	Web App Attack
🇭🇺 DumaNet	2025-12-02 04:13:00 UTC · (11 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 01. 16:51:32 Source IP: 4.189.129.162 Portion of the log(s): 4.189.129.162 - [01/Dec/2025:16:51:31 +0100] "GET /as.php HTTP/1.1" 404 153 "https://www.google.com/" "Mozilla/5.0 ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Dec 01. 16:51:32 Source IP: 4.189.129.162 Portion of the log(s): 4.189.129.162 - [01/Dec/2025:16:51:31 +0100] "GET /as.php HTTP/1.1" 404 153 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 4.189.129.162 - [01/Dec/2025:16:51:30 +0100] "GET /api.php HTTP/1.1" 404 555 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 4.189.129.162 - [01/Dec/2025:16:51:30 +0100] "GET /alfa.php HTTP/1.1" 404 153 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 4.189.129.162 - [01/Dec/2025:16:51:30 +0100] "GET /akcc.php HTTP/1.1" 404 555 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML show less	Web App Attack
🇳🇱 Site.eu	2025-12-02 02:23:12 UTC · (11 months ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇬 41.234.211.21

🇷🇴 2.57.121.112

🇱🇹 185.170.252.87

🇧🇷 177.85.63.28

🇫🇷 169.58.238.96

🇮🇳 103.149.160.89

🇦🇿 94.20.62.126

🇨🇦 85.217.149.67

🇺🇸 75.101.226.56

🇺🇸 73.39.114.217

🇳🇱 45.148.10.152

🇹🇭 27.130.102.77

🇳🇱 209.38.102.222

🇳🇱 204.76.203.44

🇲🇾 202.188.47.66

🇳🇱 195.178.110.30

🇺🇸 186.179.39.159

🇩🇪 185.220.100.244

🇨🇳 183.60.93.145

🇰🇷 175.192.78.45