JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.225.169.148

4.225.169.148 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇸🇪 Sweden
City	Gavle, Gavleborg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.225.169.148

Whois 4.225.169.148

IP Abuse Reports for 4.225.169.148:

This IP address has been reported a total of 78 times from 67 distinct sources. 4.225.169.148 was first reported on September 5th 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2025-09-06 05:14:07 (10 months ago)	8 attacks on PHP URLs: GET /.well-known/acme-challenge/muse.php HTTP/1.1	Web App Attack
🇧🇪 taivas.nl	2025-09-06 04:32:24 (10 months ago)	Many_bad_calls	Web App Attack
🇺🇸 octageeks.com	2025-09-06 04:06:38 (10 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇨🇦 Mediashaker	2025-09-05 21:11:36 (10 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.225.169.148 (SE/Sweden ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.225.169.148 (SE/Sweden/-) show less	Port Scan
🇦🇺 paulshipley.com.au	2025-09-05 20:53:29 (10 months ago)	paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:39 +1000] "GET /gmo.php HTTP/1.1" 404 71 ... show more paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:39 +1000] "GET /gmo.php HTTP/1.1" 404 71688 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:41 +1000] "GET /elp.php HTTP/1.1" 404 69046 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:43 +1000] "GET /aa.php HTTP/1.1" 404 68969 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:44 +1000] "GET /file.php HTTP/1.1" 404 68966 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:46 +1000] "GET /wp-file.php HTTP/1.1" 404 68974 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:47 +1000] "GET /k.php HTTP/1.1" 404 68968 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:49 +1000] "GET /al.php HTTP/1.1" 404 68969 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:50 +1000] "GET /wp- HTTP/1.1" 404 68966 "-" "-" paulshipley.com.au:443 4.225.169.148 - - [06/Sep/2025:06:52:52 +1000] "GET /admin.php HTTP/1.1" 404 68972 " ... show less	Web App Attack
🇦🇺 2000cn.com.au	2025-09-05 20:43:07 (10 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇩🇪 updown.io	2025-09-05 20:17:02 (10 months ago)	{"level":"info","ts":1757103409.59359,"logger":"http.log.access.log1","msg":"handled request","reque ... show more {"level":"info","ts":1757103409.59359,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"4.225.169.148","remote_port":"2145","client_ip":"4.225.169.148","proto":"HTTP/1.1","method":"GET","host":"newgrounds-status.com","uri":"/gmo.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.000044951,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://newgrounds-status.com/gmo.php"],"Content-Type":[]}} {"level":"info","ts":1757103409.9118602,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"4.225.169.148","remote_port":"1674","client_ip":"4.225.169.148","proto":"HTTP/1.1","method":"GET","host":"newgrounds-status.com","uri":"/elp.php","headers":{}},"bytes_read":0,"user_id":"","duration":0.00004444,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://newgrounds-status.com/elp.php"],"Content-Type":[]}} {"level":"info","ts":1757103410.022 ... show less	DDoS Attack Web App Attack
🇸🇪 Lemmy	2025-09-05 20:05:18 (10 months ago)	apache-noscript	Web App Attack
🇦🇺 advena	2025-09-05 19:16:13 (10 months ago)	4.225.169.148 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-09-05T19:13:36Z after vio ... show more 4.225.169.148 (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK) was intercepted at 2025-09-05T19:13:36Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇩🇪 neckaralb-admin.de	2025-09-05 19:14:07 (10 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇩🇪 thesimonmanuel	2025-09-05 18:05:45 (10 months ago)	4.225.169.148 - - [05/Sep/2025:23:35:45 +0530] "GET /gmo.php HTTP/1.1" 404 27 "-" "-" "-" 4.225.169. ... show more 4.225.169.148 - - [05/Sep/2025:23:35:45 +0530] "GET /gmo.php HTTP/1.1" 404 27 "-" "-" "-" 4.225.169.148 - - [05/Sep/2025:23:35:45 +0530] "GET /elp.php HTTP/1.1" 404 27 "-" "-" "-" 4.225.169.148 - - [05/Sep/2025:23:35:45 +0530] "GET /aa.php HTTP/1.1" 404 27 "-" "-" "-" 4.225.169.148 - - [05/Sep/2025:23:35:45 +0530] "GET /file.php HTTP/1.1" 404 27 "-" "-" "-" 4.225.169.148 - - [05/Sep/2025:23:35:45 +0530] "GET /wp-file.php HTTP/1.1" 404 27 "-" "-" "-" show less	Hacking Web App Attack
🇮🇳 dineshskt4all	2025-09-05 17:36:25 (10 months ago)	[Fri Sep 05 17:36:23.365814 2025] [proxy_fcgi:error] [pid 1407:tid 123496407492288] [client 4.225.16 ... show more [Fri Sep 05 17:36:23.365814 2025] [proxy_fcgi:error] [pid 1407:tid 123496407492288] [client 4.225.169.148:0] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇪🇸 Cognisant-Security	2025-09-05 17:21:00 (10 months ago)	Exceeded the maximum number of page not found errors per minute for a crawler.	Bad Web Bot
🇳🇱 Brict IT	2025-09-05 16:43:31 (10 months ago)		Bad Web Bot Web App Attack
🇺🇸 rdpguard.com	2025-09-05 16:35:14 (10 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 171.25.158.74

🇩🇪 164.92.232.89

🇨🇳 123.131.17.131

🇮🇳 103.199.207.56

🇮🇳 98.70.50.8

🇬🇧 2a06:4880:a000::c6

🇧🇷 2804:14d:b083:8777:bdca:b6b7:4fc5:84cb

🇸🇬 203.116.129.55

🇬🇧 151.217.4.34

🇵🇱 128.127.94.35

🇮🇳 98.70.48.241

🇹🇷 94.154.43.103

🇧🇬 79.124.49.174

🇺🇸 66.132.186.127

🇵🇭 61.9.8.58

🇪🇸 37.143.130.5

🇧🇷 20.226.60.151

🇷🇴 2.57.121.112

🇫🇮 2.26.0.248

🇨🇳 223.199.174.134