JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.216.107.25

Neutral Activity

Abuse confidence score ?

0% Low Risk

225 reports

186 reporters · latest 10 months ago

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.216.107.25 has been reported 225 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 4.216.107.25

This IP address has been reported a total of 225 times from 186 distinct sources. 4.216.107.25 was first reported on November 6th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 [email protected]	2025-11-12 01:02:21 (10 months ago)	...	Brute-Force SSH
🇳🇱 Site.eu	2025-11-11 23:12:13 (10 months ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Holger	2025-11-11 14:21:42 (10 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇩🇪 Holger	2025-11-10 13:48:13 (10 months ago)	WordPress WebAttack	Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-07 20:09:47 (10 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 BSG Webmaster	2025-11-07 08:35:27 (10 months ago)	Port scanning (Port 80)	Port Scan Hacking
🇬🇧 openstrike.co.uk	2025-11-07 06:13:21 (10 months ago)	852 attacks on PHP URLs: GET /manager.php HTTP/1.1	Web App Attack
🇺🇸 octageeks.com	2025-11-07 05:08:12 (10 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇺🇸 Charlesiv	2025-11-07 01:13:00 (10 months ago)	Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CO ... show more Triggered Cloudflare WAF (botFight) from JP. Action taken: MANAGED_CHALLENGE ASN: 8075 (MICROSOFT-CORP-MSN-AS-BLOCK) Protocol: HTTP/1.1 (GET method) Endpoint: /3.php Timestamp: 2025-11-06T22:20:45Z Ray ID: 99a7fae01cfdafb2 UA: Empty string show less	Bad Web Bot
🇬🇧 [email protected]	2025-11-07 00:59:24 (10 months ago)	...	Brute-Force SSH
🇮🇹 mauri64	2025-11-07 00:30:28 (10 months ago)	Troppi errori Apache (163)	Hacking
🇭🇺 DumaNet	2025-11-07 00:17:00 (10 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 06. 14:26:02 Source IP: 4.216. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 06. 14:26:02 Source IP: 4.216.107.25 Portion of the log(s): 4.216.107.25 - [06/Nov/2025:14:26:02 +0100] "GET /mail.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:02 +0100] "GET /ini.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:02 +0100] "GET /bak.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:02 +0100] "GET /1.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:01 +0100] "GET /install.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:01 +0100] "GET /article.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:01 +0100] "GET /ar.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:01 +0100] "GET /v.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:00 +0100] "GET /hi.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:26:00 +0100] "GET /13.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇭🇺 DumaNet	2025-11-06 23:55:00 (10 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 06. 14:15:50 Source IP: 4.216. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 06. 14:15:50 Source IP: 4.216.107.25 Portion of the log(s): 4.216.107.25 - [06/Nov/2025:14:15:50 +0100] "GET /file88.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:50 +0100] "GET /file4.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:50 +0100] "GET /geck.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:50 +0100] "GET /file1.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:49 +0100] "GET /yellow.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:49 +0100] "GET /file21.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:49 +0100] "GET /file18.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:49 +0100] "GET /ffile.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:49 +0100] "GET /nfile.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:15:48 +0100] "GET /ton.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇭🇺 DumaNet	2025-11-06 23:31:00 (10 months ago)	Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 06. 14:06:35 Source IP: 4.216. ... show more Web app attack attempts, scanning for vulnerability. Date: 2025 Nov 06. 14:06:35 Source IP: 4.216.107.25 Portion of the log(s): 4.216.107.25 - [06/Nov/2025:14:05:47 +0100] "GET /wfile.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:47 +0100] "GET /031.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:46 +0100] "GET /doti.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:46 +0100] "GET /bless.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:46 +0100] "GET /bless3.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:46 +0100] "GET /cfile.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:45 +0100] "GET /333.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:45 +0100] "GET /info.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:45 +0100] "GET /gifclass4.php HTTP/1.1" 404 153 "-" "-" 4.216.107.25 - [06/Nov/2025:14:05:45 +0100] "GET /wp-content/wsd.php HTTP/1.1" 404 153 "-" "-" show less	Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-06 23:01:45 (10 months ago)	Auto-ban: >3000 req/min op 2025-11-06	Hacking Web App Attack SSH

Showing 1 to 15 of 225 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.183

🇭🇰 156.239.236.204

🇸🇪 154.14.144.138

🇨🇳 125.124.92.11

🇨🇳 125.124.42.183

🇰🇷 119.203.223.36

🇳🇱 109.160.32.81

🇨🇳 101.43.118.136

🇺🇸 68.225.62.115

🇺🇸 67.205.168.154

🇺🇸 65.49.1.38

🇧🇷 201.63.223.141

🇳🇱 195.178.110.232

🇨🇳 144.123.77.96

🇨🇳 125.124.223.68

🇨🇳 125.124.178.223

🇨🇳 125.124.175.196

🇯🇵 113.158.205.225

🇮🇩 103.113.171.119

🇯🇵 101.33.55.172