JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 48.217.251.137

48.217.251.137 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 100%: ?

100%

ISP	Microsoft Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Washington, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 48.217.251.137

Whois 48.217.251.137

IP Abuse Reports for 48.217.251.137:

This IP address has been reported a total of 49 times from 32 distinct sources. 48.217.251.137 was first reported on March 31st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 gbzret4d	2026-06-13 19:03:50 (1 week ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 2095 [1], 2078 [1], 2096 [1], 3001 ... show more Honeypot [uk-production01]: Empty payload (likely service probe); 2095 [1], 2078 [1], 2096 [1], 3001 [1], 2077 [1] TCP show less	Port Scan
🇧🇷 RafaLeardi	2026-06-13 18:05:55 (1 week ago)	Leardi-Servers Firewall: M(106.1) Port_Scanner	Port Scan
🇺🇸 xmission.com	2026-06-13 16:40:35 (1 week ago)	Blocked by UFW (TCP on 8090) Source port: 18629 TTL: 47 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 8090) Source port: 18629 TTL: 47 Packet length: 60 TOS: 0x00 This report (for 48.217.251.137) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-13 16:08:51 (1 week ago)	Blocked by UFW on MVI [8880/tcp] \| SPT: 18472 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on MVI [8880/tcp] \| SPT: 18472 \| TTL: 47 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 SiyCah	2026-06-13 06:00:09 (1 week ago)	48.217.251.137 fell into Endlessh tarpit; 0/75 total connections are currently still open. Total tim ... show more 48.217.251.137 fell into Endlessh tarpit; 0/75 total connections are currently still open. Total time wasted: 5m 31s. Total bytes sent by tarpit: 32.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇩🇪 SiyCah	2026-06-12 06:00:07 (1 week ago)	48.217.251.137 fell into Endlessh tarpit; 0/75 total connections are currently still open. Total tim ... show more 48.217.251.137 fell into Endlessh tarpit; 0/75 total connections are currently still open. Total time wasted: 5m 31s. Total bytes sent by tarpit: 32.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇩🇪 SiyCah	2026-06-10 06:00:06 (2 weeks ago)	48.217.251.137 fell into Endlessh tarpit; 0/75 total connections are currently still open. Total tim ... show more 48.217.251.137 fell into Endlessh tarpit; 0/75 total connections are currently still open. Total time wasted: 5m 31s. Total bytes sent by tarpit: 32.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇫🇷 Ozelot	2026-06-10 02:51:51 (2 weeks ago)	2026-06-10T03:51:40.595590+01:00 ozelot sshd-session[2858501]: Failed password for root from 48.217. ... show more 2026-06-10T03:51:40.595590+01:00 ozelot sshd-session[2858501]: Failed password for root from 48.217.251.137 port 28715 ssh2 2026-06-10T03:51:47.685588+01:00 ozelot sshd-session[2859182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 user=root 2026-06-10T03:51:49.447697+01:00 ozelot sshd-session[2859182]: Failed password for root from 48.217.251.137 port 28714 ssh2 show less	Brute-Force SSH
🇫🇷 HyperSpeeed	2026-06-10 02:51:02 (2 weeks ago)	2026-06-10T04:50:54.310507+02:00 vmd183731 sshd[597139]: Failed password for invalid user r00t from ... show more 2026-06-10T04:50:54.310507+02:00 vmd183731 sshd[597139]: Failed password for invalid user r00t from 48.217.251.137 port 28713 ssh2 2026-06-10T04:50:52.098886+02:00 vmd183731 sshd[597139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 2026-06-10T04:50:54.310507+02:00 vmd183731 sshd[597139]: Failed password for invalid user r00t from 48.217.251.137 port 28713 ssh2 2026-06-10T04:50:59.255524+02:00 vmd183731 sshd[597179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 user=root 2026-06-10T04:51:01.427585+02:00 vmd183731 sshd[597179]: Failed password for root from 48.217.251.137 port 28712 ssh2 ... show less	Brute-Force SSH
🇫🇷 pr0vieh	2026-06-10 02:25:15 (2 weeks ago)	2026-06-10T03:24:54.977503+02:00 Linux05 sshd[15720]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-06-10T03:24:54.977503+02:00 Linux05 sshd[15720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 user=root 2026-06-10T03:24:57.084530+02:00 Linux05 sshd[15720]: Failed password for root from 48.217.251.137 port 28713 ssh2 2026-06-10T04:24:51.670220+02:00 Linux05 sshd[20471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 user=root 2026-06-10T04:24:53.250419+02:00 Linux05 sshd[20471]: Failed password for root from 48.217.251.137 port 28714 ssh2 2026-06-10T04:24:58.385857+02:00 Linux05 sshd[20698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 user=root 2026-06-10T04:25:00.928652+02:00 Linux05 sshd[20698]: Failed password for root from 48.217.251.137 port 28715 ssh2 2026-06-10T04:25:05.465497+02:00 Linux05 sshd[20850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.25 ... show less	Brute-Force SSH
🇩🇪 RuslanUC	2026-06-10 02:21:11 (2 weeks ago)	Jun 9 12:25:19 alpha-ef21b5050c sshd[1159238]: Invalid user r00t from 48.217.251.137 port 28738 Jun ... show more Jun 9 12:25:19 alpha-ef21b5050c sshd[1159238]: Invalid user r00t from 48.217.251.137 port 28738 Jun 9 17:21:10 alpha-ef21b5050c sshd[1646424]: Invalid user r00t from 48.217.251.137 port 28713 ... show less	Port Scan Brute-Force SSH
🇫🇷 floofy.tech	2026-06-10 02:20:59 (2 weeks ago)	2026-06-10T04:20:49.690340 yip.floofy.tech sshd[531335]: Failed password for invalid user r00t from ... show more 2026-06-10T04:20:49.690340 yip.floofy.tech sshd[531335]: Failed password for invalid user r00t from 48.217.251.137 port 28714 ssh2 2026-06-10T04:20:56.479278 yip.floofy.tech sshd[531428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 user=root 2026-06-10T04:20:58.140721 yip.floofy.tech sshd[531428]: Failed password for root from 48.217.251.137 port 28713 ssh2 ... show less	Brute-Force SSH
🇺🇸 0xem.ma	2026-06-10 01:53:53 (2 weeks ago)	2026-06-10T03:53:48.220040+02:00 vmi3299174 sshd[575676]: Failed password for invalid user r00t from ... show more 2026-06-10T03:53:48.220040+02:00 vmi3299174 sshd[575676]: Failed password for invalid user r00t from 48.217.251.137 port 28736 ssh2 2026-06-10T03:53:51.024686+02:00 vmi3299174 sshd[575698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.217.251.137 user=root 2026-06-10T03:53:52.786848+02:00 vmi3299174 sshd[575698]: Failed password for root from 48.217.251.137 port 28738 ssh2 ... show less	Brute-Force SSH
🇫🇷 ISPLtd	2026-06-10 01:47:39 (2 weeks ago)	Jun 9 22:47:39 48.217.251.137 TCP SPT=28713 DPT=22 SYN ...	Port Scan SSH
🇸🇪 basil s	2026-06-10 01:40:27 (2 weeks ago)	Malicious activity \| 824667784540 events \| (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US) \| Network: 48.19 ... show more Malicious activity \| 824667784540 events \| (AS8075 MICROSOFT-CORP-MSN-AS-BLOCK, US) \| Network: 48.192.0.0/11 show less	Hacking

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 223.204.248.78

🇹🇼 198.235.24.33

🇺🇸 185.180.141.69

🇮🇶 151.244.159.101

🇻🇳 58.186.196.220

🇮🇳 209.38.120.71

🇺🇸 205.210.31.71

🇪🇹 197.156.69.33

🇩🇪 194.187.176.79

🇸🇬 194.5.82.168

🇧🇩 103.157.246.138

🇧🇩 103.153.110.190

🇧🇪 34.77.150.192

🇧🇷 187.0.187.19

🇧🇷 177.8.166.2

🇮🇳 160.202.37.0

🇨🇱 152.174.7.159

🇱🇹 141.98.9.110

🇳🇱 91.92.42.102

🇱🇻 89.254.162.142