74.148.48.19
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Microsoft Limited
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS8075
- Domain Name
- microsoft.com
- Country
- 🇦🇹 Austria
- City
- Vienna, Vienna
Abuse Reports
Total reports
73 from
55 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Holger |
Bruteforce WebAttack
|
Brute-Force Web App Attack | |
| 🇩🇪 NihiliousMonk |
Fail2Ban report from jail npm-scanners
|
Bad Web Bot Web App Attack | |
| 🇩🇪 altenglaner |
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
|
Hacking Web App Attack | |
| 🇺🇸 freehosts.eu |
|
Bad Web Bot | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env)
|
Hacking Brute-Force Web App Attack | |
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | |
| 🇺🇸 francelink.fr |
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T02:24:59.000Z.
|
Web App Attack | |
| 🇦🇺 A.i.D.A.N.N |
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected
|
Web App Attack | |
| Anonymous |
Automated report (2026-11-09T20:26:17-05:00). Caught probing for env file.
|
Hacking Web App Attack Open Proxy | |
| 🇿🇦 conure.sh |
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s
|
Web App Attack | |
| Anonymous |
Probing for exposed secret / credential files
|
Hacking Web App Attack | |
| 🇩🇪 BlueWire Hosting |
High-confidence malicious configuration/VCS probe
|
Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇬🇧 Aetherweb Ark |
(mod_security) mod_security (id:949110) triggered by 74.148.48.19 (AT/Austria/-): N in the last X secs
|
Web App Attack | |
| 🇺🇸 TtlPst |
App probing / vulnerability scanning in path /.env
|
Web App Attack Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown