JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

45.8.46.16

Activity Trending Down

Abuse Confidence Score

100% Critical

31 reports

28 reporters · latest 1 week ago

ISP: MAGIT'ST SRL
Usage Type: Data Center/Web Hosting/Transit
ASN: AS49468
Domain Name: magit.ro
Country: 🇷🇴 Romania
City: Timisoara, Timis County

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

31 from 28 distinct reporters

First reported

October 30th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 13 🇫🇷 France 8 🇺🇸 United States of America 4

Most common categories Port Scan 27 Brute-Force 4 Web App Attack 3 Hacking 2 SSH 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 FoxSec	2026-11-01 21:07:18 UTC · (1 week ago)	Honeypot: Elasticsearch API probing, 19 attempts	Web App Attack
🇸🇬 heyzg	2026-11-01 20:23:13 UTC · (1 week ago)	HTTP Web Scanning (observed): 11 HTTP, 45s	Bad Web Bot Web App Attack
🇭🇰 鹏鹏	2026-11-01 07:05:15 UTC · (1 week ago)	monitor: on ser162528253480 \| port: 5000 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇭🇰 鹏鹏	2026-11-01 05:20:42 UTC · (1 week ago)	monitor: on ser162528253480 \| port: 8001 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇭🇰 鹏鹏	2026-11-01 00:21:03 UTC · (1 week ago)	monitor: on ser162528253480 \| port: 8188 \| ttl: 245 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 Aurealize	2026-10-31 17:17:46 UTC · (1 week ago)	firewall port scanning detected. 2 or more observation(s) from 2026-10-31T15:14:21.000Z through 2026-10-31T15:14:21.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:04:31.000Z through 2026-10-31T16:04:31.000Z. firewa ... show more firewall port scanning detected. 2 or more observation(s) from 2026-10-31T15:14:21.000Z through 2026-10-31T15:14:21.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:04:31.000Z through 2026-10-31T16:04:31.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:23:18.000Z through 2026-10-31T16:23:18.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:25:34.000Z through 2026-10-31T16:25:34.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:33:25.000Z through 2026-10-31T16:33:25.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:47:11.000Z through 2026-10-31T16:47:12.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:55:16.000Z through 2026-10-31T16:55:16.000Z. firewall port scanning detected. 2 or more observation(s) from 2026-10-31T16:58:21.000Z through 2026-10-31T16:58:21.000Z. firewall port scanning d show less	Port Scan
🇩🇪 snhosting	2026-10-30 21:50:42 UTC · (1 week ago)	45.8.46.16 - - [30/Oct/2026:22:50:30 +0100] "GET /.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 45.8.46.16 - - [30/Oct/2026:22:50:31 +0100] "GET /.env.local HTTP/1.1" 30 ... show more 45.8.46.16 - - [30/Oct/2026:22:50:30 +0100] "GET /.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 45.8.46.16 - - [30/Oct/2026:22:50:31 +0100] "GET /.env.local HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 45.8.46.16 - - [30/Oct/2026:22:50:32 +0100] "GET /.env.dev HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 45.8.46.16 - - [30/Oct/2026:22:50:32 +0100] "GET /.env.development HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 45.8.46.16 - - [30/Oct/2026:22:50:33 +0100] "GET /.env.prod HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇺🇸 schematics.cc	2026-10-30 21:33:02 UTC · (1 week ago)	Blocked by on honeypot2 [2375/tcp] \| SPT: 54753 \| TTL: 240 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun	Port Scan
🇫🇷 cityhunter_rhone	2026-10-30 21:30:14 UTC · (1 week ago)	Connection attempts on sensitive port(s) 11434 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.	Port Scan Hacking
🇩🇪 Ilop	2026-10-30 21:30:13 UTC · (1 week ago)	[hp-100] 12 unsolicited packets to honeypot ports 1234,11436,1235,11435,4001,8188 (OCI DShield sensor)	Port Scan
Anonymous	2026-10-30 21:30:05 UTC · (1 week ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 GabrielJST	2026-10-30 21:25:58 UTC · (1 week ago)	Port Scan detected from 45.8.46.16 (RO/Romania/lesch.zernox.info).	Port Scan
🇫🇷 sthoyer.de	2026-10-30 21:22:03 UTC · (1 week ago)	Oct 30 22:17:32 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.8.46.16 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=39848 PROTO=TCP SPT=54753 DPT=8189 WINDOW=1024 RES=0x00 SYN URGP=0 ... show more Oct 30 22:17:32 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.8.46.16 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=39848 PROTO=TCP SPT=54753 DPT=8189 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 22:18:21 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.8.46.16 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=53274 PROTO=TCP SPT=54753 DPT=4000 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 22:20:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.8.46.16 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=20404 PROTO=TCP SPT=54753 DPT=1337 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 22:21:59 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=45.8.46.16 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=1389 PROTO=TCP SPT=54753 DPT=30000 WINDOW=1024 RES=0x00 SYN URGP ... show less	Port Scan
🇨🇦 Blinker73	2026-10-30 21:20:29 UTC · (1 week ago)	2026-10-30T17:12 kernel: OUT= SRC=45.8.46.16 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=21480 PROTO=TCP SPT=54753 DPT=30001 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-30T17:13 kernel: OUT= SRC=45.8.46.16 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=28612 ... show more 2026-10-30T17:12 kernel: OUT= SRC=45.8.46.16 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=21480 PROTO=TCP SPT=54753 DPT=30001 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-30T17:13 kernel: OUT= SRC=45.8.46.16 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=28612 PROTO=TCP SPT=54753 DPT=1234 WINDOW=1024 RES=0x00 SYN URGP=0 2026-10-30T17:18 kernel: OUT= SRC=45.8.46.16 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=13995 PROTO=TCP SPT=54753 DPT=1337 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇫🇷 wiredalter	2026-10-30 21:17:14 UTC · (1 week ago)	Blocked by fail2ban on o2VPS [4000/tcp] Source Port: 54753 TTL: 238 Packet Length: 40 TOS: 0x00 Analyzed by https://ip.wiredalter.com	Brute-Force SSH

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇿 216.147.123.106

🇧🇷 205.210.31.225

🇧🇷 205.210.31.178

🇺🇸 205.210.31.48

🇺🇸 172.236.126.127

🇩🇪 161.35.219.9

🇳🇱 142.93.135.191

🇧🇩 103.179.127.55

🇩🇪 94.183.174.99

🇩🇪 69.5.169.85

🇺🇸 65.49.1.30

🇧🇩 58.147.171.11

🇧🇪 35.210.132.2

🇧🇪 35.195.19.202

🇰🇪 197.254.62.38

🇧🇷 187.111.196.61

🇮🇩 182.16.188.122

🇧🇩 160.191.115.74

🇺🇸 109.105.210.67

🇫🇷 85.217.140.22