JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 69.48.204.170

69.48.204.170 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	IONOS Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip69-48-204-170.pbiaas.com
Domain Name	ionos.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 69.48.204.170

Whois 69.48.204.170

IP Abuse Reports for 69.48.204.170:

This IP address has been reported a total of 10 times from 9 distinct sources. 69.48.204.170 was first reported on August 22nd 2025, and the most recent report was 6 months ago.

Old Reports: The most recent abuse report for this IP address is from 6 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2025-12-19 01:41:56 (6 months ago)	Request contained illegal characters in path/query (potential SQLi/XSS) (tenant=82 method=GET path=/ ... show more Request contained illegal characters in path/query (potential SQLi/XSS) (tenant=82 method=GET path=/ ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36') show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 17:09:32 (6 months ago)	(mod_security) mod_security (id:221010) triggered by 69.48.204.170 (ip69-48-204-170.pbiaas.com): 1 i ... show more (mod_security) mod_security (id:221010) triggered by 69.48.204.170 (ip69-48-204-170.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 10 12:09:25.136242 2025] [security2:error] [pid 3187:tid 3187] [client 69.48.204.170:53057] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:h\\\\.(?:version_(?:id\|note\|data)\|ucm_(?:item\|type)_id\|save_date\|editor_user_id\|character_count\|sha1_hash\|keep_forever)(?:\\\\,\\\\ ?)?)+$" against "ARGS:list[select]" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "38"] [id "221010"] [rev "4"] [msg "COMODO WAF: SQL injection vulnerability in Joomla! 3.2 before 3.4.5 (CVE-2015-7297, CVE-2015-7857, CVE-2015-7858)\|\|ccbank.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "ccbank.net"] [uri "/index.php"] [unique_id "aTmpReHoKIkZfds1ht-RgAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WizardsToolkit	2025-11-21 13:14:17 (7 months ago)	trying to hack through ajxSendEmail	Hacking
🇳🇿 reddog	2025-10-20 03:30:00 (8 months ago)	File Probing	DDoS Attack Port Scan Hacking
🇫🇷 countdownmail.com	2025-10-04 17:49:00 (8 months ago)	Intensive SQL injection attacks with multiple payload variations. Credential brute-force attempts wi ... show more Intensive SQL injection attacks with multiple payload variations. Credential brute-force attempts with multiple failed login requests. Extensive web application scanning for vulnerabilities. High-volume automated attack. Generated many 404 errors and many redirects. Sample: GET /timer0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z/create show less	DDoS Attack SQL Injection Brute-Force Web App Attack
🇳🇿 reddog	2025-09-28 23:25:00 (8 months ago)	A user with IP address 69.48.204.170 has been locked out from signing in or using the password recov ... show more A user with IP address 69.48.204.170 has been locked out from signing in or using the password recovery form for the following reason: Used an invalid username 'MBWUpmEH' to try to sign in. show less	DDoS Attack Hacking
🇩🇪 Rainer.Lessing	2025-09-22 13:52:00 (9 months ago)	try to create many accounts: 2025-09-22 15:47:31 69.48.204.170 200 POST /shop.php?do=Creat ... show more try to create many accounts: 2025-09-22 15:47:31 69.48.204.170 200 POST /shop.php?do=CreateRegistree/Proceed HTTP/1.1 show less	Web App Attack
🇫🇷 mikekarl	2025-09-16 11:46:02 (9 months ago)	SQL INJECTION deS2fUZSYw') OR 42=(SELECT 42 FROM PG_SLEEP(15))--	SQL Injection
🇫🇷 NetworkAdmin	2025-09-13 14:46:00 (9 months ago)	DDOS ATTACK from IONOS SERVER 69.48.204.170 Trying to make the server crash by sending Sql command ... show more DDOS ATTACK from IONOS SERVER 69.48.204.170 Trying to make the server crash by sending Sql command in the URL 0'XOR(if(now()=sysdate(),sleep(15),0))XOR' DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)\|\|CHR(99)\|\|CHR(99),15) /if(now()=sysdate(),sleep(15),0) show less	DDoS Attack Hacking SQL Injection Web App Attack
🇺🇸 mnsf	2025-08-22 09:05:06 (10 months ago)	Too many Status 40X (15) Too many Status 50X (447) Request Overload (493)	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.14.226.190

🇨🇭 209.99.184.143

🇰🇪 197.248.8.33

🇭🇰 43.155.21.198

🇧🇷 201.49.98.249

🇺🇸 107.175.69.109

🇻🇳 103.176.24.57

🇵🇱 95.160.34.175

🇸🇬 74.114.31.153

🇺🇸 65.49.1.187

🇰🇷 59.21.37.60

🇺🇸 44.221.116.76

🇦🇷 190.220.172.154

🇧🇴 181.188.176.242

🇳🇱 176.65.149.178

🇺🇸 173.230.150.73

🇩🇪 154.14.23.208

🇺🇸 146.70.98.152

🇨🇳 117.175.51.134

🇨🇳 112.19.161.224