48.217.227.85
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇺🇸 United States of America
- City
- Dulles Town Center, Virginia
Abuse Reports
Total reports
36 from
30 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 Bytemark |
48.217.227.85 - - [01/Nov/2026:09:56:04 +0000] "HEAD / HTTP/1.1" 301 256 "-" "python-requests/2.31.0"
|
Brute-Force Web App Attack | |
| 🇺🇸 Starburst SysOp Team |
Remote Command Execution: Unix Shell Expression Found. Pattern match "\\\\$(?:\\\\((?: (932130-mnz6-1)
|
Hacking | |
| Anonymous |
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection | |
| Anonymous |
Banned by Fail2Ban on server
|
Web App Attack | |
| 🇺🇸 mnsf |
Too many Status 40X (11)
|
Brute-Force Web App Attack | |
| 🇩🇪 pltcldvlpr |
Bogus Useragent: 48.217.227.85 - - [07/Aug/2026:08:30:47 +0200] "GET /nodeinfo/2.0 HTTP/2.0" 200 295 "-" "curl/8.5.0" asn=8075 org="Microsoft Corporation" country=US
...
|
Bad Web Bot | |
| 🇫🇷 service Informatique |
/___proxy_subdomain_whm/login
|
Web App Attack | |
| 🇺🇸 IndigoRidge |
|
Web App Attack | |
| 🇦🇺 PetePK |
Probed 12 time(s): TCP/2077, TCP/2083, TCP/443, TCP/2082, TCP/2095, TCP/80, TCP/2096, TCP/2078, TCP/2086, TCP/8443, TCP/8088, TCP/2087
|
Port Scan | |
| 🇺🇸 IndigoRidge |
|
Web App Attack | |
| 🇩🇪 SwinT |
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack | |
| 🇩🇪 www.fransveldman.world |
Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.
|
Bad Web Bot | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇳🇱 SysAdmin Dylan |
(mod_security) mod_security (id:210730) triggered by 48.217.227.85 (US/United States/-): 10 in the last 3600 secs
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown