AbuseIPDB » 48.210.195.177

48.210.195.177 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 31%: ?

31%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 48.210.195.177

Whois 48.210.195.177

IP Abuse Reports for 48.210.195.177:

This IP address has been reported a total of 12 times from 10 distinct sources. 48.210.195.177 was first reported on May 14th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
TPI-Abuse	2025-05-15 14:54:53 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 48.210.195.177 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 48.210.195.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 15 10:54:46.614408 2025] [security2:error] [pid 1251296:tid 1251296] [client 48.210.195.177:1266] [client 48.210.195.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffreycopeland.com"] [uri "/.env/"] [unique_id "aCYANk3u6Id5MObi5A_mIwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
penjaga BRIN	2025-05-15 13:17:24 (1 month ago)	nginx-alfa-240	Web App Attack
lpar69	2025-05-15 07:07:00 (1 month ago)	requests to wp exploit endpoints	Hacking Web App Attack
TPI-Abuse	2025-05-15 04:42:18 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 48.210.195.177 (-): 1 in the last 300 secs; Por ... show more(mod_security) mod_security (id:210492) triggered by 48.210.195.177 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 15 00:42:12.764323 2025] [security2:error] [pid 688736:tid 688736] [client 48.210.195.177:2172] [client 48.210.195.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yarbroughfamily.org"] [uri "/.env/"] [unique_id "aCVwpEY_LRGCC1A2CVg2aAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
kosada.com	2025-05-15 03:17:19 (1 month ago)	Web vulnerability probing	Web App Attack
el-brujo	2025-05-14 18:24:01 (1 month ago)	Cloudflare WAF: Request Path: /wp-content/plugins/formcraft/file-upload/server/php/ Request Query: ... show moreCloudflare WAF: Request Path: /wp-content/plugins/formcraft/file-upload/server/php/ Request Query: Host: www.elhacker.net userAgent: python-requests/2.27.1 Action: block Source: ratelimit ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: JP Method: GET Timestamp: 2025-05-14T18:24:01Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
silisoftware.com	2025-05-14 14:36:39 (1 month ago)	/WP/	Web App Attack
exxos	2025-05-14 14:22:48 (1 month ago)	web exploit attacks	Web App Attack
nfsec.pl	2025-05-14 14:14:15 (1 month ago)	48.210.195.177 - - [14/May/2025:16:14:03 +0200] "GET /WP/ HTTP/1.1" 404 31301 "-" "python-requests/2 ... show more48.210.195.177 - - [14/May/2025:16:14:03 +0200] "GET /WP/ HTTP/1.1" 404 31301 "-" "python-requests/2.27.1" 48.210.195.177 - - [14/May/2025:16:14:06 +0200] "GET /bc/ HTTP/1.1" 404 31386 "-" "python-requests/2.27.1" 48.210.195.177 - - [14/May/2025:16:14:09 +0200] "GET /bk/ HTTP/1.1" 404 31448 "-" "python-requests/2.27.1" 48.210.195.177 - - [14/May/2025:16:14:12 +0200] "GET /db/ HTTP/1.1" 404 31264 "-" "python-requests/2.27.1" 48.210.195.177 - - [14/May/2025:16:14:14 +0200] "GET /js/ HTTP/1.1" 404 31249 "-" "python-requests/2.27.1" ... show less	Exploited Host Web App Attack
masterguru	2025-05-14 13:53:45 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (11 ... show moreBAD BOT - Detected and Blocked.. Matched phrase "python-requests" at REQUEST_HEADERS:User-Agent. (1100000-124) show less	Bad Web Bot
el-brujo	2025-05-14 12:42:09 (1 month ago)	Cloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: forum.elhacker ... show moreCloudflare WAF: Request Path: /wp-content/ALFA_DATA/alfacgiapi/ Request Query: Host: forum.elhacker.net userAgent: python-requests/2.27.1 Action: log Source: firewallManaged ASN Description: MICROSOFT-CORP-MSN-AS-BLOCK Country: JP Method: GET Timestamp: 2025-05-14T12:42:09Z ruleId: 9f35644b7f734c87a57cfd6d8b036974. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
botreporter	2025-05-14 12:08:03 (1 month ago)	CMS vulnerability/installation scanning	Brute-Force Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩