46.148.227.131
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Selectel Network
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS49505
- Domain Name
- selectel.ru
- Country
- 🇷🇺 Russian Federation
- City
- Saint Petersburg, St. Petersburg
Abuse Reports
Total reports
151 from
137 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Kaas |
Automatic ban by Fail2Ban
|
Brute-Force Email Spam | |
| 🇫🇷 Kaas |
Automatic ban by Fail2Ban
|
Brute-Force Email Spam | |
| 🇫🇷 ACE-INFORMATIQUE.NC |
Brute-Force + SSH (honeypot) blocked by Fail2ban
|
Brute-Force SSH | |
| 🇧🇾 lns.bz |
.env scanning [BY]
|
Web App Attack | |
| 🇩🇪 TheDjRider |
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-11-04T16:27:35.27591906Z. Context: http_status=404
|
Web App Attack | |
| 🇩🇪 Gwyneth Llewelyn |
|
Brute-Force Web App Attack | |
| 🇩🇪 Mr-Money |
46.148.227.131 - - [04/Nov/2026:17:06:48 +0100] "GET /.env HTTP/1.1" 404 381 "-" "VantageResearchScanner/1.0 (+https://vantage.dev.blesk.cloud/scanner)"
...
|
Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack | |
| 🇩🇪 itak |
postfix Server DDoS - AUTH drops, early HANGUPs, other DDoS attacks, etc. Might contain brute-force dictionary attack sightings on IMAP and SMTP.
|
DDoS Attack Port Scan | |
| 🇩🇪 jann |
Honeypot: connection to unused port 23 at 2026-11-04 15:40:59 UTC. No service runs there, any connection is unsolicited scanning.
|
Port Scan | |
| 🇩🇪 XICTRON |
ModSecurity rule violation detected by Fail2Ban
|
Web App Attack | |
| 🇩🇪 Callum |
remote code execution attempts, probing for exposed files and admin pages and path traversal: 49 attempts within 1 minutes, seen by web server log
|
Hacking Web App Attack | |
| 🇩🇪 Callum |
remote code execution attempts, path traversal and probing for exposed files and admin pages: 16 attempts within 1 minutes, seen by web server log
|
Hacking Web App Attack | |
| 🇩🇪 gadix |
[04/Nov/2026:16:20:28.275319 +0100] autNPOBUpoc1H67AEtJSMgAAAEo 46.148.227.131 43316 127.0.0.1 7080
[04/Nov/2026:16:20:28.331216 +0100] autNPKdRVq7XRV048Q9XVQAAAIw 46.148.227.131 43326 127.0.0.1 7080
...
|
Web App Attack | |
| 🇩🇪 rednaw |
|
Brute-Force Exploited Host Web App Attack SSH | |
| 🇩🇪 ValtonTahiri |
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown