JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.39.69.47

45.39.69.47 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 43%: ?

43%

ISP	Subnet Digital LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	Unknown
Domain Name	subnetdigital.com
Country	🇹🇷 Turkey
City	Istanbul, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.39.69.47

Whois 45.39.69.47

IP Abuse Reports for 45.39.69.47:

This IP address has been reported a total of 47 times from 30 distinct sources. 45.39.69.47 was first reported on June 11th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-17 05:31:03 (1 month ago)	[WedJun1707:30:56.5271232026][security2:error][pid3721751:tid3722130][client45.39.69.47:0]ModSecurit ... show more [WedJun1707:30:56.5271232026][security2:error][pid3721751:tid3722130][client45.39.69.47:0]ModSecurity:Accessdeniedwithcode403$phase1$.Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"e20ti.ch\"][uri\"/api/.env\"][unique_id\"ajIxEKdvED_zF9PHTtnoxwAAAAc\"] show less	Hacking Web App Attack
🇨🇭 TheCoon	2026-06-17 04:45:01 (1 month ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇧🇷 Halux	2026-06-17 03:57:10 (1 month ago)	45.39.69.47 Probing protected path or service	Web App Attack
🇩🇪 4server	2026-06-17 03:23:07 (1 month ago)	[WedJun1705:23:02.7430442026][security2:error][pid2757566:tid2757654][client45.39.69.47:0]ModSecurit ... show more [WedJun1705:23:02.7430442026][security2:error][pid2757566:tid2757654][client45.39.69.47:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"elyon2.ch\"][uri\"/new/.env\"][unique_id\"ajITFmI2ALKVufv3EtoXhQAAAQk\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 bazter.pro	2026-06-16 23:06:25 (1 month ago)	Auto-Ban [2026-06-17 02:06:17]: CRITICAL: .env attack; DC: Subnet Digital LLC [Paths: 11] \| Details: ... show more Auto-Ban [2026-06-17 02:06:17]: CRITICAL: .env attack; DC: Subnet Digital LLC [Paths: 11] \| Details: Exploit trap paths: /.env, /app/.env, /member/.env, /api/.env, /backend/.env \| Sensitive files/paths: /.env, /app/.env, /member/.env, /api/.env, /backend/.env \| 404 errors (11): /backend/.env, /core/.env, /.env, /new/.env, /admin/.env, /api/.env, /dev/.env, /app/.env, /core/.env.save, /.env.save (and 1 more) show less	Web App Attack Hacking
🇫🇮 Erpelstolz	2026-06-16 19:53:25 (1 month ago)	external host: 45.39.69.47 - - [16/Jun/2026:21:53:25 +0200] "GET /admin/.env HTTP/1.1" 404 5744 "-" ... show more external host: 45.39.69.47 - - [16/Jun/2026:21:53:25 +0200] "GET /admin/.env HTTP/1.1" 404 5744 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" CF-Ray:- CF-IP:- show less	Web App Attack
🇨🇭 Zdeněk Svancar	2026-06-16 19:01:42 (1 month ago)	45.39.69.47 - - [16/Jun/2026:19:01:41 +0000] "GET /new/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Maci ... show more 45.39.69.47 - - [16/Jun/2026:19:01:41 +0000] "GET /new/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.39.69.47 - - [16/Jun/2026:19:01:41 +0000] "GET /api/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 TNZ	2026-06-16 18:37:43 (1 month ago)	Automated honeypot: bot_detected:no_accept_language \| Path: /member/.env \| ISP: AS213751 YALNIZ BILI ... show more Automated honeypot: bot_detected:no_accept_language \| Path: /member/.env \| ISP: AS213751 YALNIZ BILISIM TEKNOLOJILERI TIC. LTD.STI. \| ASN: AS213751 YALNIZ BILISIM TEKNOLOJILERI TIC. LTD.STI. \| Abuse score: 100 \| Open ports: [] \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like show less	Web App Attack
🇩🇪 todix	2026-06-16 18:18:05 (1 month ago)	Web App Attack Exploid from 45.39.69.47	Web App Attack
🇫🇷 ELYAZ	2026-06-16 17:08:28 (1 month ago)	(y3) Failed access -byebye- from 45.39.69.47 (TR/Türkiye/-): (CF_ENABLE)	Hacking
🇨🇦 dispensight	2026-06-16 17:08:25 (1 month ago)	Probe via dispensight.* redirect honeypot — attacker hit https://www.dispensight.club/member/.env, 3 ... show more Probe via dispensight.* redirect honeypot — attacker hit https://www.dispensight.club/member/.env, 301-redirected to canonical dispensight.com, Referer header exposed origin (2 req(s) on dispensight.com, UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 1). show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-13 21:59:08 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-12. show less	Web App Attack SSH Hacking
🇫🇷 ELYAZ	2026-06-13 20:25:12 (1 month ago)	(y3) Failed access -byebye- from 45.39.69.47 (TR/Türkiye/-): (CF_ENABLE)	Hacking
🇫🇷 bellovacorp	2026-06-13 19:25:02 (1 month ago)	[CrowdSec/Noliae] crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 17:42:20 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.39.69.47 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.39.69.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:42:15.877008 2026] [security2:error] [pid 13958:tid 13958] [client 45.39.69.47:35710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manufacturassantiago.com"] [uri "/.env"] [unique_id "ai2Wd_KxjnB4FWMWeKcigQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.28.208.189

🇸🇮 102.220.160.63

🇷🇴 92.118.39.77

🇧🇷 69.6.222.101

🇺🇸 47.251.171.144

🇲🇲 45.125.5.125

🇬🇧 2.99.211.44

🇷🇴 2.57.121.112

🇺🇸 2607:f8b0:4001:c00::125

🇧🇬 193.24.211.76

🇩🇪 167.94.145.30

🇨🇼 161.0.103.98

🇰🇷 152.32.139.96

🇮🇳 139.59.61.214

🇧🇷 138.117.220.170

🇺🇸 104.28.208.191

🇮🇩 103.112.245.85

🇷🇺 95.215.0.144

🇳🇱 45.148.10.239

🇬🇧 35.203.210.230