JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.139.104.176

Activity Trending Down

Abuse Confidence Score

100% Critical

1,334 reports

505 reporters · latest 1 week ago

ISP: 49.3 Networking LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS399979
Domain Name: 493networking.cc
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,334 from 505 distinct reporters

First reported

June 30th 2022

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 287 🇺🇸 United States of America 227 🇳🇱 Netherlands 141

Most common categories Web App Attack 928 Bad Web Bot 418 Brute-Force 380 Hacking 262 Port Scan 153

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1cyb3rpunk	2026-10-28 04:47:49 (1 week ago)	Coordinated campaign CMP-1786835248-000: 2785 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2785 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇹🇲 Anonymous	2026-10-27 10:44:00 (1 week ago)	Sent a high volume of HTTP GET requests in a short time frame	DDoS Attack
🇺🇸 c y	2026-10-26 10:34:41 (1 week ago)	Security Monitor detected: sensitive_path_access	Port Scan
Anonymous	2026-10-24 13:55:20 (1 week ago)	fail2ban jail apache-scanner: 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.docker HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.prod HTTP/1.1" 404 458 "-" " ... show more fail2ban jail apache-scanner: 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.docker HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.prod HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.example HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.save HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.uat HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.test HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.production.local HTTP/1.1" 404 458 "-" "Mozilla/5.0 show less	Web App Attack Port Scan
🇺🇸 1cyb3rpunk	2026-10-23 18:42:50 (1 week ago)	Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇹🇷 neron	2026-10-21 18:35:00 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 bogdanv	2026-10-21 16:53:25 (2 weeks ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-21 13:43:14 (2 weeks ago)	fail2ban jail apache-secrets-probe: 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.dev HTTP/1.1" 404 7693 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)"	Web App Attack
Anonymous	2026-10-21 13:27:35 (2 weeks ago)	fail2ban jail apache-scanner: 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.docker HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.prod HTTP/1.1" 404 458 "-" " ... show more fail2ban jail apache-scanner: 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.docker HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.prod HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.example HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.save HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.uat HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.test HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.production.local HTTP/1.1" 404 458 "-" "Mozilla/5.0 show less	Web App Attack Port Scan
🇺🇸 1cyb3rpunk	2026-10-19 20:13:03 (2 weeks ago)	Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 bogdanv	2026-10-18 18:55:53 (2 weeks ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-10-15 03:07:20 (2 weeks ago)	Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 bogdanv	2026-10-12 13:08:32 (3 weeks ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
🇩🇪 bogdanv	2026-10-11 08:42:05 (3 weeks ago)	$f2bV_matches	DDoS Attack Web Spam SQL Injection Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-10 02:59:50 (3 weeks ago)	fail2ban jail apache-scanner: 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.docker HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.prod HTTP/1.1" 404 458 "-" " ... show more fail2ban jail apache-scanner: 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.docker HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.prod HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.example HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.save HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.uat HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.test HTTP/1.1" 404 458 "-" "Mozilla/5.0 (compatible; UnifiedPaths/1.0)" 45.139.104.176 - - [10/Sep/2026:19:13:03 -0700] "GET /.env.production.local HTTP/1.1" 404 458 "-" "Mozilla/5.0 show less	Web App Attack Port Scan

Showing 1 to 15 of 1334 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 193.3.53.2

🇩🇪 161.35.72.14

🇵🇱 109.205.211.205

🇷🇴 92.118.39.49

🇺🇸 69.46.46.127

🇺🇸 47.253.218.190

🇺🇸 45.136.24.33

🇬🇧 45.135.141.181

🇮🇱 34.165.154.24

🇧🇷 179.184.85.167

🇨🇳 122.97.212.240

🇳🇱 86.38.187.209

🇷🇴 80.94.92.234

🇺🇸 66.33.23.224

🇺🇸 66.33.23.179

🇧🇷 200.192.145.241

🇳🇱 185.136.15.111

🇺🇸 69.46.46.126

🇺🇸 20.98.138.55

🇺🇸 204.8.96.64