JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

169.40.142.177

Recent Activity

Abuse confidence score ?

100% Critical

1,033 reports

373 reporters · latest 1 hour ago

ISP	TerraTransit AG
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215599
Domain Name	terratransit.de
Country	🇫🇷 France
City	Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 169.40.142.177

Export CSV

This IP address has been reported a total of 1,033 times from 373 distinct sources. 169.40.142.177 was first reported on September 1st 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: Germany with 276 reports; United States of America with 160 reports; France with 115 reports. The most common categories in these recent reports were: Web App Attack 700 times; Bad Web Bot 304 times; Brute-Force 226 times; Hacking 204 times; Port Scan 154 times; Other 146 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-25 13:10:04 (1 hour ago)	[ti-12al] Web exploit scanning: 13 suspicious requests detected by fail2ban jail <name>. Example: 16 ... show more [ti-12al] Web exploit scanning: 13 suspicious requests detected by fail2ban jail <name>. Example: 169.40.142.177 - - \[22/Oct/2026:14:00:51 +0200\] "GET /.env.txt HTTP/1.1" 301 630 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/126.0.0.0 Safari/537.36" 169.40.142.177 - - \[22/Oct/2026:14:00:51 +0200\] "GET /.git/config HTTP/1.1" 301 636 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/126.0.0.0 Safari/537.36" 169.40.142.177 - - \[22/Oct/2026:14:00:52 +0200\] "GET /.env.save HTTP/1.1" 301 632 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/126.0.0.0 Safari/537.36" 169.40.142.177 - - \[22/Oct/2026:14:00:52 +0200\] "GET /.git/HEAD HTTP/1.1" 301 632 "-" "Mo ... show less	Bad Web Bot Web App Attack
🇺🇸 koinkash.org	2026-10-25 12:47:05 (1 hour ago)	They are fraudulent. Malicious threat actor requesting php file /index.php	Web App Attack
🇵🇱 Budyn	2026-10-25 12:27:42 (1 hour ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: test.budyn.top \| URI: //phpinfo.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"169.40.142.177","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5013783bf609ea9-CDG","Accept":"\/","Accept-Encoding":"gzip, br","X-Forwarded-For":"169.40.142.177"} show less	Bad Web Bot Web App Attack
🇨🇦 CentiDevOps	2026-10-25 10:33:31 (3 hours ago)	Web app scan: 14 requests in 1 s across 4 domains (301/404/444). Paths: /.git/index, /fr/pathscan-7d ... show more Web app scan: 14 requests in 1 s across 4 domains (301/404/444). Paths: /.git/index, /fr/pathscan-7d7791b75f36-nope.env, /pathscan-7d7791b75f36-nope.env (+3 more). Sample: 2026-10-25T10:33:31Z "GET /pathscan-7d7791b75f36-nope.env" 301 show less	Hacking Web App Attack
🇺🇸 cyfordtechnologies.com	2026-10-25 09:56:19 (4 hours ago)	Non-human high traffic: 8/7 : Reported by Cyford API	DDoS Attack
🇫🇷 dynamix	2026-10-25 09:08:46 (5 hours ago)	Multiple WAF Violations	Web App Attack
🇵🇱 Budyn	2026-10-25 08:48:58 (5 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: apm.sweetpuddingtrap.xyz \| URI: //phpinfo.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"FR","Cf-Connecting-Ip":"169.40.142.177","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4fff71c9aabf18f-CDG","Accept":"\/","Accept-Encoding":"gzip, br","X-Forwarded-For":"169.40.142. show less	Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-10-25 08:29:17 (5 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 GoodOldTOS	2026-10-25 07:23:27 (6 hours ago)	Highly suspect IP	Hacking Web App Attack
🇫🇮 kumiko	2026-10-25 06:30:29 (7 hours ago)	[2026-10-25 08:30:29] Probing for exploits [1 requests] "GET //phpinfo.php HTTP/1.1" 404	Brute-Force Bad Web Bot Web App Attack
🇨🇿 akac	2026-10-25 06:01:10 (8 hours ago)	Web vulnerability scanning: HTTP/1.1 GET /phpinfo.php	Hacking Brute-Force Bad Web Bot Web App Attack
🇸🇪 Minglarn	2026-10-25 06:00:24 (8 hours ago)	Malicious crawler, scraper or bad bot detected. (3 hits). Log: 169.40.142.177 - - [25/Oct/2026:06:00 ... show more Malicious crawler, scraper or bad bot detected. (3 hits). Log: 169.40.142.177 - - [25/Oct/2026:06:00:23 +0000] "GET / HTTP/1.1" 404 2251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.177 - - [25/Oct/2026:06:00:23 +0000] "GET /[REDACTED_DOMAIN] HTTP/1.1" 404 2251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.177 - - [25/Oct/2026:06:00:23 +0000] "GET /.[REDACTED_DOMAIN] HTTP/1.1" 404 2251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" show less	Bad Web Bot
Anonymous	2026-10-25 05:19:19 (8 hours ago)	24 hits, proto=tcp, ports=443,80	Port Scan Hacking
🇩🇪 DEV-DNS	2026-10-25 04:57:52 (9 hours ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇩🇪 IVski.com	2026-10-25 04:20:48 (9 hours ago)	IVski WAF \| WordPress Gravity SMTP plugin configuration probe	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 1033 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.71

🇧🇷 201.92.186.12

🇳🇱 193.176.31.216

🇧🇩 103.159.2.113

🇹🇼 221.120.6.242

🇺🇸 199.165.159.82

🇺🇸 199.165.159.25

🇧🇴 181.188.176.242

🇺🇸 172.234.218.210

🇪🇸 172.68.135.107

🇺🇸 162.216.149.124

🇫🇷 92.148.72.117

🇫🇷 91.196.152.30

🇲🇦 81.192.46.49

🇮🇹 34.154.176.209

🇸🇬 34.87.166.181

🇦🇪 31.215.246.22

🇦🇪 2.50.104.84

🇺🇸 192.236.202.11

🇮🇩 163.7.6.41