JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 48.214.54.37

48.214.54.37 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 48%: ?

48%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Boydton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 48.214.54.37

Whois 48.214.54.37

IP Abuse Reports for 48.214.54.37:

This IP address has been reported a total of 52 times from 37 distinct sources. 48.214.54.37 was first reported on August 8th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 vgfdvsdhfds	2026-09-03 00:01:19 (3 hours ago)	Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sand ... show more Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sandboxed. show less	Brute-Force SSH
🇳🇱 vgfdvsdhfds	2026-09-01 23:59:25 (1 day ago)	Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sand ... show more Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sandboxed. show less	Brute-Force SSH
🇳🇱 vgfdvsdhfds	2026-08-31 23:17:02 (2 days ago)	Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sand ... show more Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sandboxed. show less	Brute-Force SSH
🇳🇱 vgfdvsdhfds	2026-08-30 23:15:34 (3 days ago)	Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sand ... show more Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sandboxed. show less	Brute-Force SSH
🇳🇱 vgfdvsdhfds	2026-08-29 23:14:38 (4 days ago)	Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sand ... show more Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (18 attempts) and sandboxed. show less	Brute-Force SSH
🇳🇱 jonathanselea.se	2026-08-29 12:44:28 (4 days ago)	"Exessive login attempts"	Brute-Force
🇺🇸 knock	2026-08-29 11:47:24 (4 days ago)	Knock-Knock honeypot brute-force: SSH (2 total hits)	Brute-Force SSH
🇳🇱 vgfdvsdhfds	2026-08-29 11:14:38 (4 days ago)	Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (14 attempts) and sand ... show more Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (14 attempts) and sandboxed. show less	Brute-Force SSH
🇸🇬 focusnic.com	2026-08-29 11:02:40 (4 days ago)	Multiple SSH login attempts from 48.214.54.37 targeting user(s): root \| Server Managed by Focusnic	Brute-Force SSH
🇳🇱 majo-it.nl	2026-08-29 08:51:15 (4 days ago)	Aug 29 08:51:12 fail2ban sshd[4083157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Aug 29 08:51:12 fail2ban sshd[4083157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.214.54.37 user=root Aug 29 08:51:13 fail2ban sshd[4083157]: Failed password for root from 48.214.54.37 port 37952 ssh2 ... show less	Brute-Force SSH
🇺🇦 TawnyBalfour	2026-08-29 08:37:00 (4 days ago)	SSH honeypot. 2 failed login attempts. 1 login with weak credentials. 13 commands executed after acc ... show more SSH honeypot. 2 failed login attempts. 1 login with weak credentials. 13 commands executed after access. Target port: 22. Window: 2026-08-29 08:34 to 2026-08-29 08:37 UTC. show less	Hacking SSH
🇺🇸 TPI-Abuse	2026-08-24 20:37:59 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 48.214.54.37 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 48.214.54.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 16:37:54.761646 2026] [security2:error] [pid 13337:tid 13337] [client 48.214.54.37:19813] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.justinrudd.com"] [uri "/.git/config"] [unique_id "aoyrovZudOWKibv24KJmywAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 pltcldvlpr	2026-08-24 20:28:53 (1 week ago)	CMS/framework probe: 48.214.54.37 - - [24/Aug/2026:22:28:52 +0200] "GET /.git/config HTTP/1.1" 404 1 ... show more CMS/framework probe: 48.214.54.37 - - [24/Aug/2026:22:28:52 +0200] "GET /.git/config HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0" asn=8075 org="Microsoft Corporation" country=US ... show less	Web App Attack
🇺🇸 Rayulcifer	2026-08-10 14:59:40 (3 weeks ago)	48.214.54.37 - - [10/Aug/2026:09:59:38 -0500] "GET http://ipv4.download.thinkbroadband.com/1MB.zip H ... show more 48.214.54.37 - - [10/Aug/2026:09:59:38 -0500] "GET http://ipv4.download.thinkbroadband.com/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 48.214.54.37 - - [10/Aug/2026:09:59:38 -0500] "GET http://cachefly.cachefly.net/200mb.test HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 48.214.54.37 - - [10/Aug/2026:09:59:38 -0500] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 48.214.54.37 - - [10/Aug/2026:09:59:38 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 403 344 "-" "-" 48.214.54.37 - - [10/Aug/2026:09:59:38 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 403 344 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇦🇺 FEWA	2026-07-29 23:07:59 (1 month ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇦 178.81.247.115

🇺🇸 159.223.184.166

🇧🇩 103.200.37.97

🇮🇳 103.178.47.180

🇫🇷 91.196.152.245

🇫🇮 77.42.80.164

🇺🇸 66.32.64.20

🇺🇸 43.165.127.225

🇬🇧 34.39.104.170

🇰🇬 212.241.5.35

🇺🇸 200.225.187.46

🇳🇱 195.178.110.137

🇺🇦 194.9.14.73

🇺🇸 164.92.79.180

🇳🇱 159.223.239.60

🇺🇸 147.185.132.249

🇳🇱 89.248.172.9

🇳🇱 85.11.167.191

🇸🇬 47.84.141.109

🇬🇧 35.203.211.237