JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.47.48.22

202.47.48.22 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 19%: ?

19%

ISP	Cyber Internet Services Pakistan
Usage Type	Fixed Line ISP
ASN	AS9541
Domain Name	cyber.net.pk
Country	🇵🇰 Pakistan
City	Karachi, Sindh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.47.48.22

Whois 202.47.48.22

IP Abuse Reports for 202.47.48.22:

This IP address has been reported a total of 14 times from 10 distinct sources. 202.47.48.22 was first reported on April 28th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-10-26 08:07:19 (17 hours ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-193)	Hacking
🇫🇷 solution.it	2026-10-20 12:01:50 (6 days ago)	[Tue Oct 20 14:01:49.901388 2026] [php7:error] [pid 3754241:tid 3754241] [client 202.47.48.22:46540] ... show more [Tue Oct 20 14:01:49.901388 2026] [php7:error] [pid 3754241:tid 3754241] [client 202.47.48.22:46540] script '/var/www/html/www.craccaaltesoro.it/wp-login.php' not found or unable to stat, referer: https://craccaaltesoro.it/wp-login.php show less	Web App Attack
🇺🇸 鬼影233	2026-09-05 16:42:25 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇩 hermawan	2025-12-31 15:42:08 (9 months ago)	[Wed Dec 31 22:42:07.927787 2025] [security2:error] [pid 312119:tid 140002156508864] [client 202.47. ... show more [Wed Dec 31 22:42:07.927787 2025] [security2:error] [pid 312119:tid 140002156508864] [client 202.47.48.22:26386] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.20.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "189"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=473&id=578%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-juni-2015&start=190 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=473&id=578%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-16-22-juni-2015&start=190 Request..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aVVET7qFeg8xUw ... show less	Hacking Web App Attack
Anonymous	2025-11-21 17:11:06 (11 months ago)	scanning http requests from known botnet	Web App Attack
🇮🇩 hermawan	2025-10-05 12:25:09 (1 year ago)	[Sun Oct 05 19:24:39.086760 2025] [security2:error] [pid 2224068:tid 140074252388032] [client 202.47 ... show more [Sun Oct 05 19:24:39.086760 2025] [security2:error] [pid 2224068:tid 140074252388032] [client 202.47.48.22:56262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "WOW64" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "228"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: WOW64 found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.75 Safari/537.36 request_line = GET /index.php/buku/505-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-hujan/buku-prakiraan-musim-hujan-tahun-2017/1133-buku-prakiraan-musim-hujan-tahun-2016-2017-provinsi-jawa-timur HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/index.php/buku/505-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-hujan/buku-prakiraan-musim-hujan-tahun-2017/1133-bu ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-08-04 17:10:01 (1 year ago)	http-no-verb	Hacking
🇦🇺 MAGIC	2024-09-10 16:02:17 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-09-07 10:40:08 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-09-05 04:18:56 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 Yawning Angel	2024-09-03 07:14:31 (2 years ago)	logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=202.47.48 ... show more logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=202.47.48.22 user="penncolor1" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in" show less	Hacking Brute-Force
Anonymous	2024-08-30 00:02:47 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-08-08 23:27:31 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-04-28 14:56:45 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 202.47.48.22 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 202.47.48.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 28 10:56:37.178029 2024] [security2:error] [pid 25907] [client 202.47.48.22:19409] [client 202.47.48.22] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|salernospizza.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "salernospizza.com"] [uri "/wp-json/wp/v2/users/1"] [unique_id "Zi5jpTIp_A23Ow2gWLg4pgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 160.191.115.179

🇺🇸 74.249.195.114

🇺🇸 45.92.229.202

🇳🇱 204.76.203.222

🇷🇴 193.32.162.42

🇧🇷 187.73.183.12

🇦🇷 181.25.151.145

🇺🇸 167.172.136.155

🇩🇴 152.167.139.197

🇰🇷 125.142.37.91

🇧🇷 104.28.230.106

🇳🇱 104.23.170.63

🇻🇳 103.110.87.193

🇳🇱 77.67.26.197

🇭🇰 49.213.6.30

🇺🇸 34.197.70.90

🇧🇪 34.78.64.142

🇺🇸 216.180.246.202

🇩🇪 194.88.98.123

🇳🇱 188.166.30.51