48.217.140.98
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
Abuse Reports
Total reports
14 from
13 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan | |
| 🇧🇾 stroytrest |
2026-09-06T10:49:12.330365+03:00 gate kernel: [442127.675377] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=48.217.140.98 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=17174 DF PROTO=TCP SPT=40192 DPT=23 WINDOW=64240 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 110100 | Desc: Suricata: Exploit (ET WEB_SERVER GNU InetUtils Authentication Bypass via USER Environment Variable (CVE-2026-24061)) 48.217.140.98
|
Port Scan Brute-Force SSH | |
| 🇫🇷 hxsain |
Blocked by UFW on fr2 [23/tcp] | SPT: 40192 | TTL: 45 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=40192 dstport=23
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [23/tcp]
Source port: 40192
TTL: 45
Packet length: 60
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:40192 dst:23
|
Port Scan | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force | |
| 🇺🇸 RAP |
2026-09-06 02:45:38 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇸🇬 gbzret4d |
Blocked by CrowdSec. Scenario: crowdsecurity/ssh-slow-bf
|
Brute-Force SSH | |
| 🇸🇬 gbzret4d |
Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown