JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.23.108.246

46.23.108.246 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 100%: ?

100%

ISP	Bullet-Group
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215762
Domain Name	bullethost.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.23.108.246

Whois 46.23.108.246

IP Abuse Reports for 46.23.108.246:

This IP address has been reported a total of 104 times from 75 distinct sources. 46.23.108.246 was first reported on May 22nd 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 internetworld	2026-07-06 20:21:27 (10 hours ago)	46.23.108.246 - - [06/Jul/2026:20:21:26 +0000] "GET /.git/HEAD HTTP/1.1" 200 330 "-" "Mozilla/5.0 (W ... show more 46.23.108.246 - - [06/Jul/2026:20:21:26 +0000] "GET /.git/HEAD HTTP/1.1" 200 330 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-06 16:35:01 (13 hours ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
Anonymous	2026-07-06 13:54:50 (16 hours ago)	Blocked by ModSec and CSF	Port Scan
🇬🇧 Apache	2026-07-06 12:48:50 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 46.23.108.246 (AZ/Azerbaijan/-): 5 in the last ... show more (mod_security) mod_security (id:210492) triggered by 46.23.108.246 (AZ/Azerbaijan/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 Ba-Yu	2026-07-06 05:22:13 (1 day ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 Aetherweb Ark	2026-07-06 00:39:47 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 46.23.108.246 (AZ/Azerbaijan/-): N in the last ... show more (mod_security) mod_security (id:949110) triggered by 46.23.108.246 (AZ/Azerbaijan/-): N in the last X secs show less	Web App Attack
🇨🇿 ddw	2026-07-05 21:26:41 (1 day ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇨🇭 4server	2026-07-05 20:27:33 (1 day ago)	[SunJul0522:27:30.5355562026][security2:error][pid218528:tid218731][client46.23.108.246:0]ModSecurit ... show more [SunJul0522:27:30.5355562026][security2:error][pid218528:tid218731][client46.23.108.246:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"flyingberber.com\"][uri\"/.git/HEAD\"][unique_id\"akq-MtPf7FjICrp_vEB4IQAAABY\"] show less	Hacking Web App Attack
🇬🇧 consul.to	2026-07-05 20:04:23 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-05 17:03:02 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Cloud secrets probing show less	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-05 16:43:06 (1 day ago)	Accessed trap at '/.git/HEAD'	Web App Attack
🇺🇸 TPI-Abuse	2026-07-05 14:45:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 46.23.108.246 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 46.23.108.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 10:45:38.549770 2026] [security2:error] [pid 1834:tid 1834] [client 46.23.108.246:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.hvacs-aircon.com"] [uri "/.git/HEAD"] [unique_id "akpuEvbfYuPDYq4yi9Y9LAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-05 14:15:39 (1 day ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2026-07-05 13:58:14 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 46.23.108.246 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 46.23.108.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 09:58:07.820719 2026] [security2:error] [pid 25940:tid 25940] [client 46.23.108.246:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.theabstractpress.com"] [uri "/.git/HEAD"] [unique_id "akpi7192VsFuP3MhVrByaAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 IVski	2026-07-05 13:14:55 (1 day ago)	IVski WAF \| Sensitive file probe detected - looking for .git	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇸🇬 188.215.235.104

🇦🇷 181.104.2.87

🇧🇷 177.36.214.46

🇺🇸 170.247.222.68

🇺🇸 170.247.222.55

🇺🇸 170.247.222.4

🇸🇬 165.154.200.185

🇻🇳 116.110.6.98

🇷🇸 109.106.239.77

🇺🇸 91.230.168.214

🇳🇱 45.148.10.147

🇺🇸 2600:3c00::2000:2aff:fee2:8a79

🇩🇪 185.248.141.81

🇨🇳 183.162.100.224

🇺🇸 170.247.222.250

🇺🇸 170.247.222.218

🇺🇸 170.247.221.91

🇫🇷 146.70.194.254

🇮🇹 93.42.140.96