48.210.227.229

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
34 reports
32 reporters · latest 1 year ago
ISP
Microsoft Limited
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇯🇵 Japan
City
Tokyo, Tokyo
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

48.210.227.229 has been reported 34 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
34 from 32 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 octageeks.com
Wordpress malicious attack:[octascan]
Web App Attack
🇺🇦 URAN Publishing Service
48.210.227.229 - - [17/Oct/2025:01:05:26 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 280 "-" "-" ...
Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2025-10-16
Hacking Web App Attack SSH
🇩🇪 neckaralb-admin.de
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇮🇩 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/crowdsec-appsec-outofband(). Ip 48.210.227.229 performed 'crowdsecurity/crowdsec-appsec-outofband' (6 events over 2.668201719s) at 2025-10-16 20:34:19.875166744 +0000 UTC
Web App Attack
🇺🇸 antlac1
crowdsecurity/http-probing
Brute-Force Web App Attack
🇦🇺 nzhost.co.nz
$f2bV_matches
Hacking Brute-Force
🇳🇱 Roderic
48.210.227.229 (JP/Japan/Tokyo/Tokyo/-/[redacted]), more than 30 Apache 403 hits
Hacking
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 48.210.227.229 (JP/Japan/-): 1 in the last 3600 secs
Web App Attack
🇩🇪 Petros Stefanakis
(mod_security) mod_security triggered on hostname [redacted] 48.210.227.229 (JP/Japan/-)
SQL Injection
Anonymous
Multiple web server 400 error codes from same source ip
Web App Attack
🇩🇪 ps-center
MYH: Web Attack GET /wp-content/plugins/hellopress/wp_filemanager.php
Web Spam Hacking Bad Web Bot Web App Attack
🇩🇪 kjaerulff
Probing for PHP files (wp.php)
Web App Attack
🇺🇸 ROCKETLAB
Bot that is scanning for compromised php files. Advise blocking entire 48.210.0.0 segment
Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.152
🇳🇱 193.47.62.69
🇺🇸 192.136.235.68
🇺🇸 172.210.66.114
🇸🇬 152.42.242.1
🇺🇸 152.32.208.9
🇺🇦 93.171.225.234
🇺🇸 71.6.233.130
🇺🇸 59.152.125.155
🇺🇸 32.189.238.195
🇮🇪 18.200.155.2
🇬🇧 18.135.209.62
🇺🇸 4.246.204.51
🇨🇭 209.99.190.186
🇮🇳 203.145.143.181
🇬🇪 188.129.176.99
🇺🇸 147.185.132.178
🇳🇱 109.160.32.144
🇸🇬 94.231.206.134
🇷🇺 91.202.233.64
feedback