217.76.48.22
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Contabo GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS51167
- Hostname(s)
- vmi1397777.contaboserver.net
- Domain Name
- contabo.com
- Country
- 🇫🇷 France
- City
- Lauterbourg, Grand Est
Abuse Reports
Total reports
299 from
179 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 seniorlinuxadmin |
217.76.48.22 - - [09/Nov/2026:02:05:50 +0000] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
|
Port Scan Web App Attack | |
| 🇱🇻 radix |
Automated probing for sensitive configuration files and environment leaks.
|
Brute-Force Web App Attack | |
| 🇬🇧 AvonleaConsulting |
Brute force attack stopped by firewall
|
Web Spam Brute-Force Web App Attack | |
| 🇫🇷 Baking333 |
|
Bad Web Bot Web App Attack | |
| 🇬🇧 sc user |
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
|
Bad Web Bot Web App Attack Port Scan | |
| 🇺🇸 stdcout9090 |
AetherGuard WAF blocked: Matched phrase "/.env" at REQUEST_URI.
Target: management.aetherguard.xyz/.env
Payload / matched WAF rule data:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
|
Web App Attack | |
| 🇧🇪 voormedia |
Accessed trap at '/.env'
|
Web App Attack | |
| 🇬🇧 Yosi |
RdpGuard detected brute-force attempt on HTTP
|
Brute-Force | |
| 🇩🇪 NetReportsGermany |
2026-11-08 18:26:55 UTC - blocked by AbuseIPDB blocklist - ports: 443 - TCP flags: S, src port: 65216, TTL: 119, length: 52 bytes
|
Port Scan | |
| 🇭🇰 ncsr-sec |
Attacked NCSR.CN production server: SSH brute-force / web scanning / honeypot trips. fail2ban banned. Evidence in server logs.
|
Brute-Force Bad Web Bot | |
| Anonymous |
Probing for exposed secret / credential files
|
Hacking Web App Attack | |
| 🇩🇪 Vegascosmetics |
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.env (Match: /.env)
|
Hacking Brute-Force Web App Attack | |
| 🇬🇧 myintarweb |
217.76.48.22 - - [08/Nov/2026:14:42:09 +0000] 443 "GET /.env HTTP/1.1" 404 6774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
|
Hacking Bad Web Bot Web App Attack | |
| 🇮🇳 TFG-Server |
Automated block: File theft attempt - tried to download secret/backup file x1 (e.g. /.env)
|
Web App Attack Hacking | |
| 🇩🇪 gurnip |
Vulnerability probe of page /.env, not found on the server.
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown