JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.200.148.36

Neutral Activity

Abuse confidence score ?

0% Low Risk

15 reports

5 reporters · latest 1 year ago

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.200.148.36 has been reported 15 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.200.148.36

Export CSV

This IP address has been reported a total of 15 times from 5 distinct sources. 172.200.148.36 was first reported on March 23rd 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-03-24 02:00:23 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 22:00:16.552184 2025] [security2:error] [pid 26115:tid 26115] [client 172.200.148.36:4294] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|syvox.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "syvox.net"] [uri "/images/stories/admin-post.php"] [unique_id "Z-C8sFPm4TzPMt1Xfo-QxwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-24 01:27:18 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 21:27:10.242446 2025] [security2:error] [pid 30141:tid 30141] [client 172.200.148.36:2902] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|roguetechhub.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "roguetechhub.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-C07uWwX9CtntRkaZlf6AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-24 00:48:33 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 20:48:28.765649 2025] [security2:error] [pid 24636:tid 24636] [client 172.200.148.36:5474] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.sundollsforever.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.sundollsforever.org"] [uri "/images/stories/admin-post.php"] [unique_id "Z-Cr3CUkjMVZBnrQW02OUgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2025-03-24 00:26:46 (1 year ago)	(mod_security) mod_security (id:20000010) triggered by 172.200.148.36 (US/United States/-): 5 in the ... show more (mod_security) mod_security (id:20000010) triggered by 172.200.148.36 (US/United States/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-03-24 00:23:29 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 20:23:26.738025 2025] [security2:error] [pid 18870:tid 18870] [client 172.200.148.36:7821] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.waterspell.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.waterspell.net"] [uri "/images/stories/admin-post.php"] [unique_id "Z-Cl_qeT0SVHAX_PQDDdCgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2025-03-23 22:17:43 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.200.148.36 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 172.200.148.36 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 22:10:30 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 18:10:23.451117 2025] [security2:error] [pid 125323:tid 125323] [client 172.200.148.36:4884] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.networklivemusic.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.networklivemusic.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-CGz9zEMru1Exm3CiGt6AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 21:31:48 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 17:31:45.001758 2025] [security2:error] [pid 6995:tid 6995] [client 172.200.148.36:5035] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|tomwilsoncounseling.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "tomwilsoncounseling.com"] [uri "/dej.html/images/stories/admin-post.php"] [unique_id "Z-B9wJt_8x1EqQYvri5tiAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 21:05:07 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 17:05:03.108276 2025] [security2:error] [pid 434:tid 455] [client 172.200.148.36:5003] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.a2zlns.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.a2zlns.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-B3f_pmN_3nI0jEYJ82UAAAANM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 20:39:25 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 16:39:21.591595 2025] [security2:error] [pid 12174:tid 12174] [client 172.200.148.36:5842] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.literarylights.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.literarylights.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-BxeeElXA4QeYVwknTDtwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇷 lpar69	2025-03-23 20:14:00 (1 year ago)	multiple attempts to wp related endpoints	Web App Attack
🇧🇪 cmbplf	2025-03-23 19:22:40 (1 year ago)	390 requests to /.well-known/pki-validation/.php 229 requests to /.well-known/acme-challenge/. ... show more 390 requests to /.well-known/pki-validation/.php 229 requests to /.well-known/acme-challenge/.php 141 requests to */wp.php show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2025-03-23 19:06:10 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 15:06:03.821422 2025] [security2:error] [pid 21071:tid 21071] [client 172.200.148.36:2961] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.flatchestedmama.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.flatchestedmama.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-Bbm82y8D0HSYbrIb9sYgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 18:39:53 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 14:39:48.079819 2025] [security2:error] [pid 4209:tid 4209] [client 172.200.148.36:6338] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|ruizpuche.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "ruizpuche.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-BVdLdfn1w9Oj0xme94fwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-23 18:21:53 (1 year ago)	(mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240000) triggered by 172.200.148.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 14:21:49.006859 2025] [security2:error] [pid 2531:tid 2552] [client 172.200.148.36:2127] [client 172.200.148.36] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|transitionalcareservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "transitionalcareservices.com"] [uri "/images/stories/admin-post.php"] [unique_id "Z-BRPUseSc5WKkJKtE_y3gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.72

🇵🇱 194.180.49.127

🇺🇾 179.27.97.205

🇩🇪 172.71.172.112

🇺🇸 162.243.147.237

🇨🇿 109.81.121.29

🇷🇺 94.243.15.226

🇷🇴 92.118.39.77

🇲🇾 47.250.86.46

🇳🇱 34.91.133.21

🇺🇸 23.234.94.177

🇮🇳 203.193.168.136

🇫🇷 146.70.194.222

🇵🇭 120.29.76.44

🇰🇷 118.41.205.179

🇺🇸 108.205.142.216

🇮🇳 106.51.92.114

🇩🇪 94.26.106.74

🇨🇿 78.44.238.178

🇳🇱 77.239.124.44