217.76.48.22

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
310 reports
185 reporters · latest 37 minutes ago
ISP
Contabo GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS51167
Hostname(s)
vmi1397777.contaboserver.net
Domain Name
contabo.com
Country
🇫🇷 France
City
Lauterbourg, Grand Est
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
310 from 185 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 69 🇺🇸 United States of America 57 🇵🇱 Poland 33
Most common categories Web App Attack 259 Bad Web Bot 107 Hacking 72 Brute-Force 53 Port Scan 21
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 sternwart
Automatisch erkannt: Zugriff auf /.env (alpasana.ch)
Web App Attack Bad Web Bot
Anonymous
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪 BlueWire Hosting
High-confidence malicious configuration/VCS probe
Web App Attack
Anonymous
http scanning for .env files ...
Hacking Web App Attack
Anonymous
Web scanner: GET /.env
Web App Attack Hacking
🇫🇷 Baking333
Bad Web Bot Web App Attack
🇨🇭 lufi
2026-11-09T11:41:17+01:00 lufischer04 ids442 2026-11-09 11:41:17 217.76.48.22: blacklistedPath: /.env ...
Web Spam Brute-Force Hacking Web App Attack
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host Web App Attack
🇩🇪 ghostwarriors
Webpage scraping
Brute-Force Bad Web Bot Web App Attack
🇬🇧 seniorlinuxadmin
217.76.48.22 - - [09/Nov/2026:02:05:50 +0000] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
Port Scan Web App Attack
🇱🇻 radix
Automated probing for sensitive configuration files and environment leaks.
Brute-Force Web App Attack
🇬🇧 AvonleaConsulting
Brute force attack stopped by firewall
Web Spam Brute-Force Web App Attack
🇫🇷 Baking333
Bad Web Bot Web App Attack
🇬🇧 sc user
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot Web App Attack Port Scan
🇺🇸 stdcout9090
AetherGuard WAF blocked: Matched phrase "/.env" at REQUEST_URI. Target: management.aetherguard.xyz/.env Payload / matched WAF rule data: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇿 77.75.76.172
🇺🇸 47.198.29.231
🇺🇸 40.76.120.183
🇪🇹 196.189.185.197
🇺🇸 136.144.19.217
🇿🇦 102.133.162.110
🇬🇧 81.19.219.200
🇺🇸 71.6.202.219
🇧🇪 35.210.18.235
🇿🇦 209.203.55.141
🇧🇷 186.200.6.38
🇸🇬 128.199.97.232
🇳🇬 102.92.22.95
🇺🇸 72.215.46.191
🇳🇱 46.151.178.14
🇧🇩 36.50.104.72
🇧🇪 35.206.133.206
🇧🇷 34.39.172.102
feedback