JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

46.151.182.252

Neutral Activity

Abuse confidence score ?

0% Low Risk

17 reports

12 reporters · latest 10 months ago

ISP	Ghosty Networks LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS403005
Domain Name	ghostynetworks.com
Country	🇸🇨 Seychelles
City	Victoria, La Riviere Anglaise

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

46.151.182.252 has been reported 17 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 46.151.182.252

Export CSV

This IP address has been reported a total of 17 times from 12 distinct sources. 46.151.182.252 was first reported on November 30th 2025, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 KIDOS	2025-12-02 16:52:38 (10 months ago)	KASM auto: exploit_/.env	Brute-Force SSH
🇺🇸 Rayulcifer	2025-12-01 06:20:11 (10 months ago)	46.151.182.252 - - [01/Dec/2025:01:20:10 -0500] "GET /runtime.b8ae84f2d852434b.js HTTP/1.1" 200 9626 ... show more 46.151.182.252 - - [01/Dec/2025:01:20:10 -0500] "GET /runtime.b8ae84f2d852434b.js HTTP/1.1" 200 9626 "-" "Go-http-client/1.1" 46.151.182.252 - - [01/Dec/2025:01:20:10 -0500] "GET /polyfills.482bb5fb9fed0f99.js HTTP/1.1" 200 71222 "-" "Go-http-client/1.1" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇬🇧 openstrike.co.uk	2025-12-01 06:13:45 (10 months ago)	2 attacks on env grabbing URLs: GET /.env HTTP/1.1	Hacking
Anonymous	2025-12-01 01:43:32 (10 months ago)	Honey Pot Hit / Attack Vector found!	Port Scan Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-11-30 23:45:24 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 46.151.182.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 46.151.182.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 30 18:45:19.010448 2025] [security2:error] [pid 5075:tid 5075] [client 46.151.182.252:56084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trafficstopper.com"] [uri "/.env"] [unique_id "aSzXD3ifYQPMQlNSAAlfVwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-30 22:41:43 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 46.151.182.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 46.151.182.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 30 17:41:37.952545 2025] [security2:error] [pid 12663:tid 12663] [client 46.151.182.252:40300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.174"] [uri "/.env"] [unique_id "aSzIIYZCLN1cNNmDTCbGrwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-30 21:40:00 (10 months ago)	(mod_security) mod_security (id:210492) triggered by 46.151.182.252 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 46.151.182.252 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 30 16:39:55.991889 2025] [security2:error] [pid 16271:tid 16271] [client 46.151.182.252:33722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.92"] [uri "/.env"] [unique_id "aSy5q-3MtT4TYm7SkcuciAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sdos.es	2025-11-30 21:15:40 (10 months ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
🇪🇸 loadsoporte	2025-11-30 19:27:12 (10 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇮🇩 Burayot	2025-11-30 19:19:20 (10 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 46.151.182.252 (NL/The Netherlands/- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 46.151.182.252 (NL/The Netherlands/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 xmission.com	2025-11-30 18:52:14 (10 months ago)	Blocked by UFW (TCP on 80) Source port: 58636 TTL: 48 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 58636 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 46.151.182.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2025-11-30 18:09:41 (10 months ago)	Probing to gain illegal access	Web App Attack
🇩🇪 Bedios GmbH	2025-11-30 14:15:51 (10 months ago)	Login credentials theft attempt	Hacking
🇺🇸 jfz-abuse	2025-11-30 13:39:00 (10 months ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇸🇪 KIDOS	2025-11-30 10:29:38 (10 months ago)	KASM auto: exploit_/.env	Brute-Force SSH

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇾 205.209.65.70

🇭🇰 94.190.229.193

🇳🇱 77.239.124.151

🇷🇴 2.57.121.112

🇨🇭 209.99.190.186

🇩🇪 167.94.145.16

🇫🇷 85.217.140.11

🇨🇳 218.94.4.146

🇫🇷 164.68.127.59

🇩🇪 164.30.17.82

🇦🇫 149.54.40.94

🇦🇪 94.59.138.50

🇺🇸 91.230.168.223

🇺🇸 91.230.168.124

🇵🇱 82.47.63.121

🇳🇱 45.148.10.240

🇰🇷 20.196.208.116

🇺🇸 20.124.84.235

🇬🇧 109.74.194.44

🇨🇳 101.96.209.234