46.101.123.239
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
26 from
21 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| 🇫🇷 Thaliruth |
Nov 11 09:25:10 151 postfix/smtpd[1747243]: lost connection after CONNECT from unknown[46.101.123.239]
...
|
Hacking Brute-Force | |
| 🇸🇬 drewf.ink |
[02:11] Connected to IMAP honeypot
|
Brute-Force Hacking | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
|
Hacking | |
| 🇸🇬 drewf.ink |
[20:49] Port scanning. Port(s) scanned: TCP/9092
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 12 packets across 1 port (23). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=46.101.123.239 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=52414 DF PROTO=TCP SPT=22523 DPT=23 WINDOW=64240 RES=0x00 SYN URGP=0
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 14 hits on ports [2525] (automated)
|
Port Scan | |
| 🇺🇸 thefuzz4 |
SSH tarpit (endlessh): 13 unsolicited connection(s) to port 22, held 4 minute(s). Automated report.
|
Brute-Force SSH | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 6000.
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 8 application-level events across 8 source port(s). Sensor(s): Tanner.
|
Port Scan | |
| 🇩🇪 gurnip |
Vulnerability probe of page /odinhttpcall1794263439, not found on the server.
|
Brute-Force Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 10 Dionaea events.
|
Port Scan | |
| 🇺🇸 Justin Goetz |
Probed /HNAP1
|
Web App Attack | |
| 🇺🇸 lnklnx |
www.lnklnx.com:80 46.101.123.239 - - [09/Nov/2026:01:01:39 -0600] "GET /HNAP1 HTTP/1.1" 301 551 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)"
...
|
Web App Attack | |
| 🇺🇸 MarkJGreen |
Telnet brute force: 6 login attempts, 4 shell commands after login. Last seen 2026-11-09 05:10 UTC (honeypot).
|
Brute-Force IoT Targeted |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown