JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 48.217.107.113

48.217.107.113 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 48.217.107.113

Whois 48.217.107.113

IP Abuse Reports for 48.217.107.113:

This IP address has been reported a total of 76 times from 61 distinct sources. 48.217.107.113 was first reported on April 8th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-06-02 20:15:58 (1 day ago)	2026-06-02 20:15:58 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack
Anonymous	2026-06-02 19:37:59 (1 day ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 www.winos.me	2026-06-02 19:22:47 (1 day ago)	Shield: Layer4 Port 9 Trap	Port Scan Hacking
🇩🇪 bescared	2026-06-02 18:42:42 (1 day ago)	F2B - Malicious activity detected. Excessive port scans. -151302cd-	Port Scan
🇧🇾 lns.bz	2026-06-02 18:41:28 (1 day ago)	Too many 404 requests [BY]	Web App Attack
🇫🇮 6kilowatti	2026-06-02 18:32:05 (1 day ago)	2026-06-02T21:32:03.964795+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-06-02T21:32:03.964795+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=48.217.107.113 DST=192.168.0.102 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=11150 DF PROTO=TCP SPT=47374 DPT=2087 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-02 18:31:59 (1 day ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇧🇬 pa4080	2026-06-02 17:45:34 (1 day ago)	Detected by ModSecurity. Request URI: /.git/HEAD	Web App Attack
🇺🇸 Rayulcifer	2026-04-20 12:51:12 (1 month ago)	48.217.107.113 - - [20/Apr/2026:07:51:12 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 874 "-" "ax ... show more 48.217.107.113 - - [20/Apr/2026:07:51:12 -0500] "GET http://httpbin.org/ip HTTP/1.1" 200 874 "-" "axios/1.14.0" 48.217.107.113 - - [20/Apr/2026:07:51:12 -0500] "GET http://httpbin.org/get HTTP/1.1" 200 874 "-" "axios/1.14.0" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇳🇱 Selckie	2026-04-17 13:46:38 (1 month ago)	fail2ban: NGINX unusual impact	Web App Attack
🇩🇪 2048	2026-04-17 13:44:12 (1 month ago)	2026-04-17T14:44:09.368579+01:00 machodeer kernel: [4690269.424704] [UFW BLOCK] IN=ens3 OUT= MAC=RED ... show more 2026-04-17T14:44:09.368579+01:00 machodeer kernel: [4690269.424704] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=48.217.107.113 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=51119 DF PROTO=TCP SPT=45076 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-17T14:44:10.377816+01:00 machodeer kernel: [4690270.434076] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=48.217.107.113 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=51120 DF PROTO=TCP SPT=45076 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-17T14:44:11.406792+01:00 machodeer kernel: [4690271.463059] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=48.217.107.113 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=51121 DF PROTO=TCP SPT=45076 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 SiyCah	2026-04-10 06:00:04 (1 month ago)	48.217.107.113 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time ... show more 48.217.107.113 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time wasted: 29s. Total bytes sent by tarpit: 2.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇨🇳 ThreatBook.io	2026-04-09 23:20:37 (1 month ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/48.217.107.113 2026-04-09 0 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/48.217.107.113 2026-04-09 03:04:19 ["pwd"] 2026-04-09 02:26:57 ["pwd"] 2026-04-09 02:24:03 ["whoami"] 2026-04-09 02:25:57 ["nproc 2>/dev/null \|\| (grep -c '^processor' /proc/cpuinfo 2>/dev/null) \|\| echo 0"] 2026-04-09 02:50:03 ["ssh -V"] 2026-04-09 02:21:23 ["uname -a"] 2026-04-09 02:35:27 ["env \| head -10"] 2026-04-09 02:41:07 ["whoami"] 2026-04-09 02:45:33 ["uname -a"] show less	SSH
🇫🇷 SiyCah	2026-04-09 06:00:03 (1 month ago)	48.217.107.113 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time ... show more 48.217.107.113 fell into Endlessh tarpit; 0/8 total connections are currently still open. Total time wasted: 29s. Total bytes sent by tarpit: 2.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇨🇦 mwolleben	2026-04-08 19:56:25 (1 month ago)	SSH attack - banned by fail2ban on public server	Brute-Force SSH

Showing 16 to 30 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.190.35.163

🇨🇳 119.53.253.2

🇧🇩 103.114.166.226

🇳🇱 45.153.34.32

🇳🇱 45.148.10.152

🇨🇳 42.5.108.130

🇨🇳 223.223.199.221

🇰🇷 222.232.176.7

🇮🇶 212.237.119.29

🇨🇱 200.29.173.201

🇬🇧 193.176.29.3

🇳🇱 172.94.9.166

🇳🇱 172.94.9.65

🇸🇬 148.66.142.9

🇺🇿 144.124.192.68

🇻🇳 113.161.39.122

🇭🇰 103.115.56.3

🇨🇳 220.168.118.133

🇪🇹 196.188.116.56

🇳🇱 185.242.226.126