JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

4.217.251.248

Neutral Activity

Abuse Confidence Score

0% Low Risk

36 reports

24 reporters · latest 1 year ago

ISP: Microsoft Corporation
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8075
Domain Name: microsoft.com
Country: 🇰🇷 Korea (the Republic of)
City: Seoul, Seoul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

4.217.251.248 has been reported 36 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

36 from 24 distinct reporters

First reported

August 30th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 octageeks.com	2025-09-01 04:06:06 UTC · (1 year ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 Vegascosmetics	2025-08-31 21:52:19 UTC · (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇨🇭 zynex	2025-08-31 17:37:25 UTC · (1 year ago)	URL Probing: /Sanskrit.php	Web App Attack
🇩🇪 LRob	2025-08-31 17:00:46 UTC · (1 year ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇫🇮 oh.mg	2025-08-31 15:43:44 UTC · (1 year ago)	[Sun Aug 31 17:39:31.197027 2025] [security2:error] [pid 1749073:tid 1749086] [client 4.217.251.248:5034] [client 4.217.251.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/u ... show more [Sun Aug 31 17:39:31.197027 2025] [security2:error] [pid 1749073:tid 1749086] [client 4.217.251.248:5034] [client 4.217.251.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "nei.lol"] [uri "/wp-config.php"] [unique_id "aLRss3Pm3XJ3s23nXlEo4QAAAMs"] [Sun Aug 31 17:43:43.192056 2025] [security2:error] [pid 1742814:tid 1742836] [client 4.217.251.248:7844] [client 4.217.251.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag ... show less	Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2025-08-31 14:12:47 UTC · (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Hacking Web App Attack
🇨🇦 Mediashaker	2025-08-31 14:06:48 UTC · (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.217.251.248 (KR/South Korea/-)	Port Scan
🇺🇸 TPI-Abuse	2025-08-31 12:02:07 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 08:02:00.257114 2025] [security2:error] [pid 31770:tid 31770] [client 4.217.251.248:4247] Mo ... show more (mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 08:02:00.257114 2025] [security2:error] [pid 31770:tid 31770] [client 4.217.251.248:4247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arofish.us"] [uri "/wp-config.php"] [unique_id "aLQ5uFcF_PXP84hBjiMz1AAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-08-31 08:24:08 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 04:24:00.656236 2025] [security2:error] [pid 21402:tid 21402] [client 4.217.251.248:4945] Mo ... show more (mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 04:24:00.656236 2025] [security2:error] [pid 21402:tid 21402] [client 4.217.251.248:4945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onyxcc.com"] [uri "/wp-config.php"] [unique_id "aLQGoPVJZjRb1K2tKT4NhwAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ps-center	2025-08-31 07:55:35 UTC · (1 year ago)	MYH: Web Attack GET /admin/controller/extension/extension/ultra.php	Web Spam Hacking Bad Web Bot Web App Attack
🇬🇧 Apache	2025-08-31 07:21:43 UTC · (1 year ago)	(mod_security) mod_security (id:20000010) triggered by 4.217.251.248 (KR/South Korea/-): 5 in the last 300 secs	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-08-31 06:39:09 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 02:39:05.039242 2025] [security2:error] [pid 25606:tid 25606] [client 4.217.251.248:6208] Mo ... show more (mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 02:39:05.039242 2025] [security2:error] [pid 25606:tid 25606] [client 4.217.251.248:6208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lizlemos.org"] [uri "/wp-config.php"] [unique_id "aLPuCTwsILKRg_cxNSnF7wAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-08-31 05:19:26 UTC · (1 year ago)		Bad Web Bot
🇲🇾 Rizzy	2025-08-31 05:02:04 UTC · (1 year ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-08-31 04:38:34 UTC · (1 year ago)	(mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 00:38:27.361306 2025] [security2:error] [pid 2474:tid 2478] [client 4.217.251.248:3175] ModS ... show more (mod_security) mod_security (id:210492) triggered by 4.217.251.248 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 31 00:38:27.361306 2025] [security2:error] [pid 2474:tid 2478] [client 4.217.251.248:3175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stonyp.com"] [uri "/wp-config.php"] [unique_id "aLPRwzme3rWDJmijNh8ImwAAAUE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.32.162.218

🇺🇸 98.174.45.123

🇺🇸 20.64.97.98

🇺🇸 192.190.221.7

🇨🇳 175.153.221.109

🇺🇸 172.96.182.111

🇨🇳 124.88.174.143

🇺🇸 98.89.3.48

🇲🇩 94.176.79.147

🇺🇸 66.132.224.80

🇨🇳 61.155.167.61

🇨🇱 190.160.85.143

🇦🇷 181.13.210.250

🇺🇸 152.163.101.138

🇺🇸 45.79.109.236

🇺🇸 20.38.15.21

🇨🇳 223.83.131.241

🇳🇱 200.138.46.113

🇹🇳 196.203.231.220

🇮🇶 169.224.99.70