JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.189.97.125

4.189.97.125 was found in our database!

This IP was reported 314 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.189.97.125

Whois 4.189.97.125

IP Abuse Reports for 4.189.97.125:

This IP address has been reported a total of 314 times from 222 distinct sources. 4.189.97.125 was first reported on December 4th 2025, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-15 08:17:32 (8 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇺🇸 bazter.pro	2025-12-12 14:32:58 (8 months ago)	Auto-Ban [2025-12-10T03:51:32.194454]: AI recommendation (90%): IP здійснює багато спроб доступу до ... show more Auto-Ban [2025-12-10T03:51:32.194454]: AI recommendation (90%): IP здійснює багато спроб доступу до .well-known/acme-challenge та інших нестандартних шляхів, всі запити отримують 403, що характерно для сканера або бота. Відсутність легітимних запитів і доменів підсилює підозру.; Suspicious + RateLimit [Paths: 6] show less	Web App Attack
🇺🇸 bazter.pro	2025-12-10 01:51:32 (8 months ago)	Auto-Ban [2025-12-10 03:51:26]: AI recommendation (90%): IP здійснює багато спроб доступу до .well-k ... show more Auto-Ban [2025-12-10 03:51:26]: AI recommendation (90%): IP здійснює багато спроб доступу до .well-known/acme-challenge та інших нестандартних шляхів, всі запити отримують 403, що характерно для сканера або бота. Відсутність легітимних запитів і доменів підсилює підозру.; Suspicious + RateLimit [Paths: 6] \| Details: 403 errors (18): /.well-known/acme-challenge/wp-login.php, /.well-known/acme-challenge/, /.well-known/, /.well-known/acme-challenge/file.php, /.well-knownold/, /.well-known/pki-validation/index.php show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-12-07 20:10:19 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 enjoyably	2025-12-07 01:04:42 (8 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics	Bad Web Bot Web App Attack
Anonymous	2025-12-06 15:21:06 (8 months ago)	spamd: identified spam	Email Spam
🇬🇧 SecondEdge	2025-12-06 06:28:22 (8 months ago)	A web attack was detected from 4.189.97.125 (Japan / Tokyo / Tokyo) against lifeofstu.com (Admin,CGI ... show more A web attack was detected from 4.189.97.125 (Japan / Tokyo / Tokyo) against lifeofstu.com (Admin,CGI-BIN,PHPUnit,Wordpress,Wordpress Admin,XMLRPC) over 2m13s. show less	Web App Attack
🇬🇧 openstrike.co.uk	2025-12-06 06:14:41 (8 months ago)	413 attacks on FCKeditor URLs, PHP URLs: GET /admin/fckeditor/editor/filemanager/ HTTP/1.1 GET /moon ... show more 413 attacks on FCKeditor URLs, PHP URLs: GET /admin/fckeditor/editor/filemanager/ HTTP/1.1 GET /moon.php HTTP/1.1 show less	Web App Attack
🇳🇱 Site.eu	2025-12-06 03:26:28 (8 months ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 AvonleaConsulting	2025-12-05 23:59:44 (8 months ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
🇳🇱 grinthorstnl	2025-12-05 23:59:02 (8 months ago)	Auto-ban: >500 bad req(40x/50x)/5min on 2025-12-04	Hacking Web App Attack SSH
🇨🇴 adalbertoreyes.org	2025-12-05 23:46:06 (8 months ago)	CategoryPortScan	Port Scan
🇫🇷 SpaceHost-Server	2025-12-05 23:42:43 (8 months ago)		Brute-Force Web App Attack
🇫🇷 Murazaki	2025-12-05 23:01:48 (8 months ago)	charif.fr 4.189.97.125 - - [05/Dec/2025:09:42:58 +0100] "GET /cgi-bin/ HTTP/1.1" 503 190 "https://ww ... show more charif.fr 4.189.97.125 - - [05/Dec/2025:09:42:58 +0100] "GET /cgi-bin/ HTTP/1.1" 503 190 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" "-" charif.fr 4.189.97.125 - - [05/Dec/2025:09:42:59 +0100] "GET /cgi-bin/file.php HTTP/1.1" 503 190 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" "-" ldap.benadel.fr 4.189.97.125 - - [05/Dec/2025:16:33:08 +0100] "GET /cgi-bin/ HTTP/1.1" 403 13524 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" "172.22.0.44:9000" git.benadel.fr 4.189.97.125 - - [05/Dec/2025:16:33:08 +0100] "GET /cgi-bin/ HTTP/1.1" 503 592 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, ... show less	Bad Web Bot
🇳🇱 homeshowdomain.nl	2025-12-05 22:59:47 (8 months ago)	Auto-ban: 11 malicious requests on 2025-12-04 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 11 malicious requests on 2025-12-04 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH

Showing 1 to 15 of 314 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 37.150.170.153

🇱🇹 213.176.26.133

🇬🇧 193.228.225.219

🇦🇷 179.36.191.205

🇺🇸 147.185.132.91

🇺🇸 137.184.20.87

🇧🇬 91.92.68.200

🇵🇾 45.191.91.81

🇺🇸 216.25.89.156

🇻🇪 186.90.6.132

🇮🇶 185.158.22.150

🇯🇵 183.76.80.101

🇺🇸 165.154.163.37

🇺🇸 104.28.208.189

🇰🇿 95.57.209.192

🇷🇴 92.118.39.49

🇫🇷 79.143.191.80

🇫🇷 77.239.124.176

🇳🇱 74.125.181.210

🇩🇪 69.5.169.117