AbuseIPDB » 48.210.25.23

48.210.25.23 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 41%: ?

41%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 48.210.25.23

Whois 48.210.25.23

IP Abuse Reports for 48.210.25.23:

This IP address has been reported a total of 24 times from 14 distinct sources. 48.210.25.23 was first reported on May 14th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Vegascosmetics	2025-05-15 21:50:41 (4 weeks ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
stinpriza	2025-05-15 11:18:01 (4 weeks ago)	(WPLOGINGET) Failed Wordpress GET 48.210.25.23 (JP/Japan/-): 3 in the last 3600 secs	Web App Attack
TPI-Abuse	2025-05-15 07:41:56 (4 weeks ago)	(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 15 03:41:52.685019 2025] [security2:error] [pid 3740885:tid 3740885] [client 48.210.25.23:3047] [client 48.210.25.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|kenmalone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "kenmalone.com"] [uri "/images/stories/admin-post.php"] [unique_id "aCWawIzFn7js_X8_lctNngAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
LTM	2025-05-15 06:20:02 (4 weeks ago)	WebServer - Attempts to exploit	Hacking Brute-Force Web App Attack
TPI-Abuse	2025-05-15 06:07:33 (4 weeks ago)	(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 15 02:07:28.202578 2025] [security2:error] [pid 2377952:tid 2377952] [client 48.210.25.23:8536] [client 48.210.25.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|irish-boat-registration.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "irish-boat-registration.com"] [uri "/images/stories/admin-post.php"] [unique_id "aCWEoDNoz5KTCEClrFKbnwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Site.eu	2025-05-15 03:18:43 (1 month ago)	Excessive multi-domain requests	Brute-Force
TPI-Abuse	2025-05-15 01:48:39 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 14 21:48:31.237641 2025] [security2:error] [pid 3249266:tid 3249266] [client 48.210.25.23:1481] [client 48.210.25.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|stormstrips.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "stormstrips.com"] [uri "/images/stories/admin-post.php"] [unique_id "aCVH72W1pPH-U_gOS-qv1wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-05-15 01:28:42 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 14 21:28:39.341787 2025] [security2:error] [pid 670587:tid 670587] [client 48.210.25.23:7200] [client 48.210.25.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|bakakuna.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "bakakuna.com"] [uri "/images/stories/admin-post.php"] [unique_id "aCVDRwz70gnya14q7OPFeAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
QT	2025-05-15 01:06:24 (1 month ago)	Website hack attempted at 2025-05-15 11:06:23 +1000	Web App Attack
taivas.nl	2025-05-15 01:02:23 (1 month ago)	Site scraper	Web App Attack
TPI-Abuse	2025-05-15 00:48:10 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:240000) triggered by 48.210.25.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 14 20:48:05.230098 2025] [security2:error] [pid 1388023:tid 1388023] [client 48.210.25.23:4062] [client 48.210.25.23] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|dtla2028.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "dtla2028.com"] [uri "/images/stories/admin-post.php"] [unique_id "aCU5xR4L3gS0aIJuo6xitAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Site.eu	2025-05-15 00:19:10 (1 month ago)	Excessive 404/403 errors	Brute-Force
dynamix	2025-05-15 00:07:10 (1 month ago)	Multiple WAF Violations	Web App Attack
Anonymous	2025-05-15 00:02:36 (1 month ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Roderic	2025-05-14 23:46:42 (1 month ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan