JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.16.34.49

46.16.34.49 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 100%: ?

100%

ISP	ALEXHOST SRL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200019
Hostname(s)	root
Domain Name	alexhost.com
Country	🇺🇸 United States of America
City	Las Vegas, Nevada

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.16.34.49

Whois 46.16.34.49

IP Abuse Reports for 46.16.34.49:

This IP address has been reported a total of 97 times from 80 distinct sources. 46.16.34.49 was first reported on August 21st 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-08-23 01:03:03 (7 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 Grossmann-Gruppe	2026-08-23 00:10:00 (8 hours ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇺🇸 xmission.com	2026-08-22 21:11:06 (11 hours ago)	Blocked by UFW (TCP on 80) Source port: 50359 TTL: 245 Packet length: 44 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 50359 TTL: 245 Packet length: 44 TOS: 0x00 This report (for 46.16.34.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇨🇭 Kepler-1649c	2026-08-22 20:22:00 (12 hours ago)	Unauthorized access attempts	Port Scan
🇫🇷 service Informatique	2026-08-22 04:00:37 (1 day ago)	GET /config	Web App Attack
🇫🇷 ACE-INFORMATIQUE.NC	2026-08-21 19:00:11 (1 day ago)	Web App Attack blocked by Fail2ban	Web App Attack
🇬🇧 Andrew	2026-08-21 18:33:46 (1 day ago)	Blocked by UFW (TCP on port 80). Source port: 50343 TTL: 237 Packet length: 44 TOS: 0x00 This repor ... show more Blocked by UFW (TCP on port 80). Source port: 50343 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 46.16.34.49) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-08-21 18:33:14 (1 day ago)	Aug 21 20:33:07 mail2 Nextcloud[89509]: {"reqId":"aoiZ49CZMHptdOr6ASXd4QAAARY","level":1,"time":"202 ... show more Aug 21 20:33:07 mail2 Nextcloud[89509]: {"reqId":"aoiZ49CZMHptdOr6ASXd4QAAARY","level":1,"time":"2026-08-21T18:33:07+00:00","remoteAddr":"46.16.34.49","user":"--","app":"core","method":"GET","url":"/.env","scriptName":"/index.php","message":"Trusted domain error. \"46.16.34.49\" tried to access using \"178.254.3.7\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","version":"32.0.9.2","data":{"app":"core"}} Aug 21 20:33:10 mail2 Nextcloud[116258]: {"reqId":"aoiZ5tn9W8zKTzDsZoAM7QAAAVA","level":1,"time":"2026-08-21T18:33:10+00:00","remoteAddr":"46.16.34.49","user":"--","app":"core","method":"GET","url":"/.env.local","scriptName":"/index.php","message":"Trusted domain error. \"46.16.34.49\" tried to access using \"178.254.3.7\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","version":"32.0.9.2","data":{"app":"core" ... show less	Brute-Force Web App Attack
🇸🇰 HILKA	2026-08-21 18:30:07 (1 day ago)	Automatic report from HLK firewall log.	Port Scan Hacking Brute-Force
🇺🇸 CBJ	2026-08-21 18:29:45 (1 day ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 18:27:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 46.16.34.49 (root): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 46.16.34.49 (root): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 14:27:25.084086 2026] [security2:error] [pid 18560:tid 18560] [client 46.16.34.49:36132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.192"] [uri "/.env"] [unique_id "aoiYjaMzBAsXb6cu7e_FdwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 acadeova	2026-08-21 18:27:19 (1 day ago)	Blocked by UFW on vps4 [80/tcp] Source port: 50343 TTL: 235 Packet length: 44 TOS: 0x00 This report ... show more Blocked by UFW on vps4 [80/tcp] Source port: 50343 TTL: 235 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 kosada.com	2026-08-21 18:24:40 (1 day ago)	Web vulnerability probing: /config.php (bogus vhost/SNI)	Web App Attack
Anonymous	2026-08-21 18:23:05 (1 day ago)	46.16.34.49 - - [21/Aug/2026:18:23:04 +0000] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows ... show more 46.16.34.49 - - [21/Aug/2026:18:23:04 +0000] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-" "91.98.135.170" ... show less	Hacking Bad Web Bot Web App Attack
🇸🇰 DSSYSTEMS	2026-08-21 18:19:48 (1 day ago)	Automatic report from DSS firewall log.	Port Scan Hacking Brute-Force

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 177.226.162.234

🇫🇮 147.185.133.190

🇵🇹 81.193.216.17

🇺🇸 2607:f8b0:4001:c72::129

🇱🇹 213.176.26.165

🇦🇷 181.47.129.12

🇺🇸 136.108.22.1

🇷🇺 188.254.110.95

🇺🇸 154.197.57.205

🇮🇳 152.58.59.10

🇧🇷 131.221.117.4

🇨🇳 123.133.68.146

🇳🇱 45.148.10.69

🇸🇬 43.134.38.171

🇧🇪 35.240.94.139

🇺🇸 35.90.29.29

🇺🇸 34.68.34.64

🇰🇷 222.232.176.7

🇧🇷 201.71.192.108

🇳🇱 195.178.110.30