JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.214.48.19

4.214.48.19 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.214.48.19

Whois 4.214.48.19

IP Abuse Reports for 4.214.48.19:

This IP address has been reported a total of 134 times from 118 distinct sources. 4.214.48.19 was first reported on December 13th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2025-12-29 18:41:23 (5 months ago)	Unauthorized web scan.	Web App Attack
🇹🇷 rtbh.com.tr	2025-12-15 20:10:28 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-12-15 08:18:19 (6 months ago)	Blocked: Reason='Auto-block via DW'; Requests=0	Hacking
🇯🇵 beon	2025-12-15 01:19:00 (6 months ago)	This IP was detected 17 times on my original honeypot and also performed automated reconnaissance an ... show more This IP was detected 17 times on my original honeypot and also performed automated reconnaissance and vulnerability scanning against my server between 2025-12-13T20:20:10Z UTC and 2025-12-13T20:20:25Z UTC. The honeypot files included examples such as: /inputs.php,/admin.php,/manager.php and others. It issued 112 HTTP requests targeting 17 distinct suspicious paths within about 15 seconds. The targeted paths included examples such as: /wp-2019.php, /wp-content/plugin.php, /wp-configs.php, /Assets/item.php, /shop/lock.php, /files/log.php and others. Many of the requests specifically probed WordPress-related paths (wp-admin, wp-content, wp-includes, themes, plugins, etc.). Some requests targeted file manager scripts commonly abused for remote code execution (e.g. filemanager or elfinder dialogs). The scan also attempted to access .well-known paths that are often misused in compromised environments. Multiple requests used filenames that resemble PHP web shells or exploitation payloads. show less	Hacking Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-14 22:59:32 (6 months ago)	Auto-ban: 24 malicious requests on 2025-12-13 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 24 malicious requests on 2025-12-13 (e.g., env/backup probes, brute-force, or error bursts). show less	Hacking Web App Attack SSH
🇩🇪 Vegascosmetics	2025-12-14 22:51:27 (6 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇹🇷 rtbh.com.tr	2025-12-14 20:10:27 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇸🇪 peterh	2025-12-14 10:51:00 (6 months ago)	4.214.48.19 - - [13/Dec/2025:18:14:05 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.214.48.19 - - [13/Dec/2025:18:14:05 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 400 "-" "-" show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2025-12-14 05:07:08 (6 months ago)	Wordpress malicious attack:[octascan]	Web App Attack
🇳🇱 CryptoYakari	2025-12-14 01:50:20 (6 months ago)	4.214.48.19 - - [14/Dec/2025:04:50:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.214.48.19 - - [14/Dec/2025:04:50:16 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 6999 "-" "-" 4.214.48.19 - - [14/Dec/2025:04:50:16 +0300] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.0" 404 3515 "-" "-" 4.214.48.19 - - [14/Dec/2025:04:50:16 +0300] "GET /widgets.php HTTP/1.0" 404 531 "-" "-" 4.214.48.19 - - [14/Dec/2025:04:50:17 +0300] "GET /b.php HTTP/1.0" 404 531 "-" "-" 4.214.48.19 - - [14/Dec/2025:04:50:17 +0300] "GET /admin.php HTTP/1.0" 404 531 "-" "-" ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 Campus France	2025-12-14 01:41:44 (6 months ago)	[Sun Dec 14 02:41:39.000980 2025] [php7:error] [pid 3307861] [client 4.214.48.19:22905] script '/var ... show more [Sun Dec 14 02:41:39.000980 2025] [php7:error] [pid 3307861] [client 4.214.48.19:22905] script '/var/www/html/campus-perpignan/widgets.php' not found or unable to stat [Sun Dec 14 02:41:39.461163 2025] [php7:error] [pid 3307861] [client 4.214.48.19:22905] script '/var/www/html/campus-perpignan/b.php' not found or unable to stat [Sun Dec 14 02:41:39.971471 2025] [php7:error] [pid 3307861] [client 4.214.48.19:22905] script '/var/www/html/campus-perpignan/admin.php' not found or unable to stat [Sun Dec 14 02:41:40.433980 2025] [php7:error] [pid 3307861] [client 4.214.48.19:22905] script '/var/www/html/campus-perpignan/autoload_classmap.php' not found or unable to stat [Sun Dec 14 02:41:44.373082 2025] [php7:error] [pid 3307861] [client 4.214.48.19:22905] script '/var/www/html/campus-perpignan/db.php' not found or unable to stat ... show less	Web App Attack
🇫🇷 bazter.pro	2025-12-14 01:39:06 (6 months ago)	Fail2Ban: plesk-scanner - 10 failures	Port Scan Hacking Brute-Force Web App Attack
Anonymous	2025-12-14 01:38:34 (6 months ago)	Portscan: TCP/80 (6x)	Port Scan
🇫🇷 sthoyer.de	2025-12-14 01:35:32 (6 months ago)	4.214.48.19 - - [14/Dec/2025:02:35:27 +0100] "GET /users/sign_in HTTP/1.1" 200 13583 "-" "-" 4.214.4 ... show more 4.214.48.19 - - [14/Dec/2025:02:35:27 +0100] "GET /users/sign_in HTTP/1.1" 200 13583 "-" "-" 4.214.48.19 - - [14/Dec/2025:02:35:28 +0100] "GET /users/sign_in HTTP/1.1" 200 13583 "-" "-" 4.214.48.19 - - [14/Dec/2025:02:35:29 +0100] "GET /users/sign_in HTTP/1.1" 200 13583 "-" "-" 4.214.48.19 - - [14/Dec/2025:02:35:30 +0100] "GET /users/sign_in HTTP/1.1" 200 13583 "-" "-" 4.214.48.19 - - [14/Dec/2025:02:35:31 +0100] "GET /users/sign_in HTTP/1.1" 200 14914 "-" "-" ... show less	Brute-Force
🇺🇦 URAN Publishing Service	2025-12-14 01:30:12 (6 months ago)	4.214.48.19 - - [14/Dec/2025:03:30:12 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ... show more 4.214.48.19 - - [14/Dec/2025:03:30:12 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 288 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 52.167.144.191

🇺🇸 146.190.215.195

🇬🇧 87.236.176.93

🇬🇧 87.236.176.89

🇰🇷 59.24.133.197

🇬🇧 2a06:4880:2000::39

🇺🇸 104.243.35.120

🇨🇦 85.217.149.8

🇧🇿 45.227.254.156

🇨🇳 14.103.117.91

🇺🇸 2a01:111:f403:c107::1

🇲🇽 187.251.123.104

🇩🇪 167.94.146.58

🇭🇰 165.154.4.92

🇺🇸 143.198.185.63

🇸🇬 101.47.155.9

🇺🇸 54.211.242.52

🇻🇳 27.79.44.87

🇮🇹 172.213.2.229

🇰🇷 52.141.57.167