JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 109.71.252.174

109.71.252.174 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 100%: ?

100%

ISP	ByteHosting
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58087
Hostname(s)	174.252.71.109.in-addr.arpa
Domain Name	bytehosting.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 109.71.252.174

Whois 109.71.252.174

IP Abuse Reports for 109.71.252.174:

This IP address has been reported a total of 89 times from 45 distinct sources. 109.71.252.174 was first reported on April 9th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-30 19:41:24 (3 hours ago)	109.71.252.174 - - [30/Jun/2026:21:41:18 +0200] "GET /.git/HEAD HTTP/1.1" 404 450 "-" "Mozilla/5.0 ( ... show more 109.71.252.174 - - [30/Jun/2026:21:41:18 +0200] "GET /.git/HEAD HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 109.71.252.174 - - [30/Jun/2026:21:41:18 +0200] "GET /.git/HEAD HTTP/1.1" 404 250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 109.71.252.174 - - [30/Jun/2026:21:41:20 +0200] "GET /.env HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 109.71.252.174 - - [30/Jun/2026:21:41:20 +0200] "GET /.env HTTP/1.1" 404 250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" 109.71.252.174 - - [30/Jun/2026:21:41:22 +0200] "GET /config.json HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 S ... show less	Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2026-06-30 18:09:25 (4 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 masterguru	2026-06-30 15:55:31 (7 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇲🇾 Rizzy	2026-06-30 14:05:25 (8 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 4server	2026-06-30 10:35:17 (12 hours ago)	[TueJun3012:35:14.9891282026][security2:error][pid61353:tid61373][client109.71.252.174:0]ModSecurity ... show more [TueJun3012:35:14.9891282026][security2:error][pid61353:tid61373][client109.71.252.174:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"assmra.org.136-243-54-122.cpanel.site\"][uri\"/.git/HEAD\"][unique_id\"akOb4gLAHfEebcYXWkZb5QAAAAk\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 wlt-blocker	2026-06-30 05:44:19 (17 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇩🇪 ger-stg-sifi1	2026-06-29 17:07:38 (1 day ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 wteiken	2026-06-29 07:16:36 (1 day ago)	2026-06-29T03:16:34.490278-04:00 nostromo.teiken.net kernel: [95481.075845] syn_limit:IN=en-wan OUT= ... show more 2026-06-29T03:16:34.490278-04:00 nostromo.teiken.net kernel: [95481.075845] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=109.71.252.174 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=42621 DF PROTO=TCP SPT=52214 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-29T03:16:34.490534-04:00 nostromo.teiken.net kernel: [95481.075845] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=109.71.252.174 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=55 ID=60442 DF PROTO=TCP SPT=52176 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-29T03:16:34.490613-04:00 nostromo.teiken.net kernel: [95481.076967] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=109.71.252.174 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=55 ID=22550 DF PROTO=TCP SPT=52182 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-06-29T03:16:35.504518-04:00 nostromo.teiken.net kernel: [95482.091866] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8 ... show less	Port Scan
🇫🇷 masterguru	2026-06-28 21:57:28 (2 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇺🇸 Starburst SysOp Team	2026-06-28 21:38:42 (2 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-mnz6-7)	Hacking Web App Attack
🇺🇸 lnklnx	2026-06-28 21:12:54 (2 days ago)	sundown.lnklnx.com:443 109.71.252.174 - - [28/Jun/2026:16:12:52 -0500] "GET /.git/HEAD HTTP/1.1" 404 ... show more sundown.lnklnx.com:443 109.71.252.174 - - [28/Jun/2026:16:12:52 -0500] "GET /.git/HEAD HTTP/1.1" 404 503 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Kreapptivo	2026-06-28 20:54:49 (2 days ago)	[28/Jun/2026:22:54:47 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Macintosh; I ... show more [28/Jun/2026:22:54:47 +0200] Web-Request: "GET /.git/config", User-Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇩🇪 nyt	2026-06-28 20:32:52 (2 days ago)	Sensitive File Probe	Web App Attack
🇫🇷 dynamix	2026-06-28 17:58:30 (2 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 16:54:04 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 109.71.252.174 (174.252.71.109.in-addr.arpa): 1 ... show more (mod_security) mod_security (id:210492) triggered by 109.71.252.174 (174.252.71.109.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 12:53:58.367910 2026] [security2:error] [pid 11154:tid 11191] [client 109.71.252.174:49862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunshinepumpers.com"] [uri "/.env"] [unique_id "akFRppEhgryIVq7SAUVtTwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 190.151.143.171

🇵🇰 182.190.213.19

🇭🇰 152.32.211.69

🇦🇹 68.210.200.55

🇧🇷 201.71.157.137

🇹🇼 198.235.24.95

🇬🇧 195.206.182.201

🇲🇽 187.211.130.232

🇺🇸 165.22.134.78

🇫🇷 85.217.140.32

🇫🇷 85.217.140.19

🇺🇸 66.132.186.209

🇺🇸 66.132.172.229

🇸🇬 47.82.52.216

🇫🇷 37.44.238.68

🇺🇸 13.90.206.6

🇭🇰 13.70.30.6

🇩🇪 194.187.176.177

🇲🇽 187.190.35.163

🇮🇩 103.165.221.121