JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 4.246.135.66

4.246.135.66 was found in our database!

This IP was reported 179 times. Confidence of Abuse is 72%: ?

72%

ISP	Microsoft Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8075
Domain Name	microsoft.com
Country	🇺🇸 United States of America
City	Dulles Town Center, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 4.246.135.66

Whois 4.246.135.66

IP Abuse Reports for 4.246.135.66:

This IP address has been reported a total of 179 times from 125 distinct sources. 4.246.135.66 was first reported on July 29th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 schematics.cc	2026-08-24 01:01:30 (1 day ago)	Blocked by on honeypot2 [2086/tcp] \| SPT: 32085 \| TTL: 114 \| LEN: 40 \| TOS: 0x00 • Reported by: abus ... show more Blocked by on honeypot2 [2086/tcp] \| SPT: 32085 \| TTL: 114 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
Anonymous	2026-08-24 00:45:01 (1 day ago)	Blocked by os-abuseipdb; 20 hits, proto=tcp, ports=2077,2078,2082,2083,2086,2087,2095,2096,443,80	Port Scan Hacking Brute-Force
🇬🇧 Aetherweb Ark	2026-08-24 00:41:30 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 4.246.135.66 (US/United States/-): N in the las ... show more (mod_security) mod_security (id:949110) triggered by 4.246.135.66 (US/United States/-): N in the last X secs show less	Web App Attack
🇷🇸 Scan	2026-08-23 23:59:53 (1 day ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇳🇱 globcom	2026-08-23 22:08:50 (1 day ago)	General hacking/exploits/scanning	Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 22:04:38 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 4.246.135.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 4.246.135.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 18:04:32.178525 2026] [security2:error] [pid 407:tid 407] [client 4.246.135.66:33239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.188"] [uri "/.git/HEAD"] [unique_id "aotucNC0yrpSyD_aEHV46wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 21:26:49 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 4.246.135.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 4.246.135.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:26:43.543359 2026] [security2:error] [pid 22691:tid 22819] [client 4.246.135.66:31810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.130"] [uri "/.git/HEAD"] [unique_id "aotlk1CJMIWKpgjiF4M-TwAAAhI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-08-23 21:13:04 (1 day ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-08-23 21:12:18.162 \|	Web App Attack
🇬🇧 djboddington	2026-08-23 21:00:48 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 ghostwarriors	2026-08-23 20:50:41 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-08-23 20:20:10 (1 day ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.246.135.66 (US/United ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 4.246.135.66 (US/United States/-) show less	Port Scan
🇯🇵 SentinalX by uzumaru	2026-08-15 07:28:33 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: youpass.vn:443:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-08-07 02:12:55 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: proof.ovh.net:443 show less	Open Proxy Port Scan
🇺🇸 Rayulcifer	2026-08-07 02:11:28 (2 weeks ago)	4.246.135.66 - - [06/Aug/2026:21:11:26 -0500] "GET http://ipv4.download.thinkbroadband.com/1MB.zip H ... show more 4.246.135.66 - - [06/Aug/2026:21:11:26 -0500] "GET http://ipv4.download.thinkbroadband.com/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 4.246.135.66 - - [06/Aug/2026:21:11:26 -0500] "GET http://speedtest.tele2.net/1MB.zip HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 4.246.135.66 - - [06/Aug/2026:21:11:26 -0500] "GET http://cachefly.cachefly.net/200mb.test HTTP/1.1" 403 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 4.246.135.66 - - [06/Aug/2026:21:11:26 -0500] "CONNECT proof.ovh.net:443 HTTP/1.1" 403 344 "-" "-" 4.246.135.66 - - [06/Aug/2026:21:11:26 -0500] "CONNECT speed.cloudflare.com:443 HTTP/1.1" 403 344 "-" "-" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇩🇪 www.fransveldman.world	2026-07-15 11:48:00 (1 month ago)	Fetched browser challenge page 10 times in <2h without solving. Likely bad bot.	Bad Web Bot

Showing 1 to 15 of 179 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c17::12d

🇺🇸 195.184.76.15

🇳🇱 195.178.110.137

🇸🇬 193.37.32.227

🇫🇮 178.20.210.151

🇺🇸 142.252.120.59

🇵🇰 103.167.163.154

🇨🇳 36.213.131.122

🇬🇧 35.203.211.113

🇬🇧 35.203.210.75

🇧🇪 34.62.179.101

🇻🇳 27.74.252.120

🇬🇧 217.154.62.224

🇦🇷 200.189.31.124

🇹🇳 197.2.191.253

🇲🇽 189.204.230.91

🇨🇳 171.42.213.220

🇿🇦 102.66.183.226

🇩🇪 69.5.169.6

🇦🇲 46.36.123.28