JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

109.248.48.217

Neutral Activity

Abuse confidence score ?

0% Low Risk

19 reports

11 reporters · latest 6 months ago

ISP	Biterika Grupp OOO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35048
Domain Name	biterika.com
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

109.248.48.217 has been reported 19 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 109.248.48.217

Export CSV

This IP address has been reported a total of 19 times from 11 distinct sources. 109.248.48.217 was first reported on September 27th 2022, and the most recent report was 6 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-16 18:38:34 (6 months ago)	Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 6.1 ... show more Automated bot traffic — residential proxy, fake browser fingerprint. UA="Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0" show less	Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-04-16 22:05:40 (1 year ago)	Scanning/Probing (12)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-04-08 06:13:34 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 02:13:30.082207 2025] [security2:error] [pid 15209:tid 15209] [client 109.248.48.217:45031] [client 109.248.48.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sherinemec-wies.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sherinemec-wies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_S-ipNc6tlTssFnnsZudQAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-08 01:03:29 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 21:03:25.567057 2025] [security2:error] [pid 4977:tid 4977] [client 109.248.48.217:44845] [client 109.248.48.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|madisonjazzorchestra.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "madisonjazzorchestra.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_R13TO5eE9vAVAlX6ED9gAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 18:58:25 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 14:58:22.129545 2025] [security2:error] [pid 201797:tid 201797] [client 109.248.48.217:58819] [client 109.248.48.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dpcfab.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dpcfab.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_QgTiTEsFoMD_lvk_9uKQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 17:21:04 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 13:21:00.832602 2025] [security2:error] [pid 15956:tid 15956] [client 109.248.48.217:45783] [client 109.248.48.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|chiquebyjj.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "chiquebyjj.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_QJfGPb5Q48s4-jvs_FfgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 14:59:48 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 10:59:42.225293 2025] [security2:error] [pid 1111375:tid 1111375] [client 109.248.48.217:39407] [client 109.248.48.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|apesetx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "apesetx.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_PoXmG17yBxc9LW1eD7uQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-04-07 14:02:22 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 109.248.48.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 10:02:16.166981 2025] [security2:error] [pid 5046:tid 5046] [client 109.248.48.217:34341] [client 109.248.48.217] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|abcollie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abcollie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_Pa6FZCRph6qhyVRuYBDQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-04-05 18:50:11 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14	Exploited Host Web App Attack
🇺🇸 mnsf	2025-04-04 20:05:16 (1 year ago)	Scanning/Probing (12)	Brute-Force Web App Attack
🇩🇪 bsoft.de	2025-04-04 12:15:29 (1 year ago)	109.248.48.217 - - [04/Apr/2025:14:15:28 +0200] "GET /wp-content/themes/woffice/readme.txt HTTP/1.1" ... show more 109.248.48.217 - - [04/Apr/2025:14:15:28 +0200] "GET /wp-content/themes/woffice/readme.txt HTTP/1.1" 301 267 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" show less	Bad Web Bot Web App Attack
Anonymous	2025-01-02 14:00:37 (1 year ago)	“Entra ID Password Spray”	Hacking
🇨🇭 backslash	2024-11-04 06:46:10 (1 year ago)		Web Spam
🇺🇸 Yawning Angel	2024-09-03 19:12:39 (2 years ago)	id=7410496882725617732 itime=2024-09-03 12:12:39 euid=3 epid=101 dsteuid=3 dstepid=101 logflag=2 log ... show more id=7410496882725617732 itime=2024-09-03 12:12:39 euid=3 epid=101 dsteuid=3 dstepid=101 logflag=2 logver=702091688 type=traffic subtype=local level=warning action=deny policyid=2 srcip=109.248.48.217 dstip=REDACTED srcport=52935 dstport=443 trandisp=noop duration=7 proto=6 sentbyte=0 rcvdbyte=0 sentpkt=3 rcvdpkt=0 logid=0001000007 srcname=109.248.48.217 dstname=REDACTED service=HTTPS app=HTTPS srcintfrole=wan dstintfrole=undefined policytype=local-in-policy eventtime=1725390746601153640 poluuid=9f487e16-91c1-51ed-b006-7e8c78e00029 srccountry=Russian Federation dstcountry=United States srcintf=wan2 dstintf=root msg=iprope_in_check() check failed on policy 2 show less	Hacking Web App Attack
🇺🇸 Yawning Angel	2024-07-31 04:09:20 (2 years ago)	msg=SSL user failed to logged in logdesc=SSL VPN login fail user=dan remip=109.248.48.217 group=N/A ... show more msg=SSL user failed to logged in logdesc=SSL VPN login fail user=dan remip=109.248.48.217 group=N/A tunnelid=0 tunneltype=ssl-web dst_host=N/A reason=sslvpn_login_permission_denied show less	Hacking Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.72

🇦🇿 216.147.123.105

🇺🇸 205.210.31.68

🇧🇷 200.163.215.165

🇸🇬 194.164.107.5

🇧🇷 190.89.55.250

🇺🇦 185.191.176.75

🇸🇪 172.160.227.37

🇻🇳 103.195.236.196

🇭🇰 52.128.227.50

🇺🇸 47.251.81.110

🇺🇸 45.79.145.211

🇯🇵 43.163.251.147

🇻🇳 27.73.170.31

🇫🇷 13.140.168.131

🇫🇷 13.140.139.56

🇺🇸 172.59.215.200

🇺🇸 165.154.172.223

🇮🇩 163.7.11.126

🇮🇩 163.7.4.109