JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

46.101.108.178

Recent Activity

Abuse Confidence Score

100% Critical

227 reports

148 reporters · latest 8 hours ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

227 from 148 distinct reporters

First reported

October 26th 2026

Most recent report

8 hours ago

Last 60 days

Top reporter locations 🇫🇷 France 48 🇺🇸 United States of America 36 🇩🇪 Germany 35

Most common categories Port Scan 82 Web App Attack 70 Brute-Force 62 Hacking 58 Bad Web Bot 30

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-11-03 23:05:32 (8 hours ago)	2026-10-30 16:40:19,743 fail2ban.actions [1116]: NOTICE [apache-badbots] Ban 46.101.108.178 2026-10-30 16:40:19,743 fail2ban.actions [1116]: NOTICE [apache-badbots] Ban 46.101.108.178 2026-10-30 16:40:19,743 fail2ban.actions [1 ... show more 2026-10-30 16:40:19,743 fail2ban.actions [1116]: NOTICE [apache-badbots] Ban 46.101.108.178 2026-10-30 16:40:19,743 fail2ban.actions [1116]: NOTICE [apache-badbots] Ban 46.101.108.178 2026-10-30 16:40:19,743 fail2ban.actions [1116]: NOTICE [apache-badbots] Ban 46.101.108.178 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇦🇺 GE	2026-11-03 00:23:40 (1 day ago)	...	Port Scan
🇺🇸 chronos	2026-11-02 06:52:52 (2 days ago)	[AUTORAVALT][[02/11/2026 - 03:52:52 -03:00 UTC] Attack from [46.101.108.178] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to ... show more [AUTORAVALT][[02/11/2026 - 03:52:52 -03:00 UTC] Attack from [46.101.108.178] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force attacks on webpage l] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇬🇧 knock	2026-11-02 02:21:52 (2 days ago)	Knock-Knock honeypot brute-force: HTTP (1 total hits)	Web App Attack
🇫🇷 Kejult	2026-11-02 02:07:59 (2 days ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 3 payload-bearing connection/event(s), 318 payload byte(s) total, maximum payload 106 byte(s). Target port(s): 6000.	Port Scan Hacking
Anonymous	2026-11-02 01:45:49 (2 days ago)	46.101.108.178 - - [02/Nov/2026:02:45:48 +0100] "GET / HTTP/1.0" 400 659 "-" "-" ...	Web App Attack
🇺🇸 iwle	2026-11-02 01:25:00 (2 days ago)	2026-11-01T20:24:56.606322 main.justuptowngames.com postfix/smtpd[1380425]: improper command pipelining after CONNECT from unknown[46.101.108.178]: \026\003\003\001\247\001\000\001\243\003\003\272G\202\253\200\366\r+\307@AN.\361\303\221\3028\326\207\ ... show more 2026-11-01T20:24:56.606322 main.justuptowngames.com postfix/smtpd[1380425]: improper command pipelining after CONNECT from unknown[46.101.108.178]: \026\003\003\001\247\001\000\001\243\003\003\272G\202\253\200\366\r+\307@AN.\361\303\221\3028\326\207\004\216<\267T\362\315\271\344\373\212\257 \343\vf(\274P\326\245\236\336\256\257T\2244na\002\320Cq\327\f\253\354\261\375\270[&\000\323\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2026-11-01T20:24:56.862230 main.justuptowngames.com postfix/smtpd[1379867]: improper command pipelining after CONNECT from unknown[46.101.108.178]: \026\003\003\001\247\001\000\001\243\003\003\341\207\376\310\277\260\323L\332\273\355\344\237\367\355$\027\2762B;\301#\323\206\206\370\371\313\n\343\r Q\314\256:B0i=\017\333\304+\233\326{-\240-/\233:\006$\227\211\2244\020\316\001\350{\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= 2026-11-01T20:24:57.108759 main.justuptowngames.com postfix/s ... show less	Brute-Force
🇬🇧 Steve	2026-11-02 00:30:00 (2 days ago)	Attempts against Pop3/IMAP	Brute-Force
🇦🇺 GE	2026-11-01 22:38:42 (2 days ago)	2026-11-02T08:38:40.212384+10:00 smtp.geddy.au exim[2417286]: SMTP call from [46.101.108.178] dropped: too many syntax or protocol errors (last command was "?", NULL) 2026-11-02T08:38:40.862344+10:00 smtp.geddy.au exim[2417287]: SMTP call from [46.10 ... show more 2026-11-02T08:38:40.212384+10:00 smtp.geddy.au exim[2417286]: SMTP call from [46.101.108.178] dropped: too many syntax or protocol errors (last command was "?", NULL) 2026-11-02T08:38:40.862344+10:00 smtp.geddy.au exim[2417287]: SMTP call from [46.101.108.178] dropped: too many syntax or protocol errors (last command was "?", NULL) 2026-11-02T08:38:41.519155+10:00 smtp.geddy.au exim[2417288]: SMTP call from [46.101.108.178] dropped: too many syntax or protocol errors (last command was "?", NULL) ... show less	Port Scan
🇺🇸 Mark--	2026-11-01 21:38:38 (2 days ago)	Unauthorized connection attempt detected port 8080	Hacking
Anonymous	2026-11-01 20:37:49 (2 days ago)	46.101.108.178 - - [01/Nov/2026:21:37:48 +0100] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 403 5692 "http://185.26.127.186:80/query?q=SHOW+DIAGNOSTICS" "Go-http-client/1.1" ...	Web App Attack
🇺🇸 johuang92	2026-11-01 14:34:19 (2 days ago)	Cowrie SSH honeypot: session 5e4ffc95bdc3 \| 2 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇫🇷 Kejult	2026-11-01 12:30:15 (2 days ago)	Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.	Hacking
🇹🇷 oalver	2026-11-01 11:54:38 (2 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_smb, nginx_path_signature. Sources: nginx, honeypot. Details: path_signature: request to /solr/admin/info/system (HTTP 301). First seen: 2026-10-31. Risk sco ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_smb, nginx_path_signature. Sources: nginx, honeypot. Details: path_signature: request to /solr/admin/info/system (HTTP 301). First seen: 2026-10-31. Risk score: 60/100. show less	Hacking Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia	2026-11-01 09:36:08 (2 days ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking IoT Targeted Port Scan

Showing 1 to 15 of 227 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.136.15.111

🇩🇪 69.5.169.132

🇷🇺 46.148.227.131

🇳🇱 200.138.46.82

🇺🇸 195.184.76.116

🇦🇷 179.51.204.22

🇭🇰 152.32.189.59

🇮🇳 122.179.88.140

🇺🇸 108.32.73.3

🇩🇪 104.248.32.34

🇭🇰 103.44.162.114

🇪🇸 95.21.73.9

🇪🇸 95.18.27.170

🇫🇷 91.231.89.218

🇬🇧 80.195.138.152

🇮🇹 79.12.210.185

🇮🇳 61.2.212.194

🇲🇾 47.250.57.175

🇻🇳 45.118.138.158

🇺🇸 34.29.49.176