JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.232.235.3

46.232.235.3 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 100%: ?

100%

ISP	NextServ LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215599
Domain Name	dnepr.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.232.235.3

Whois 46.232.235.3

IP Abuse Reports for 46.232.235.3:

This IP address has been reported a total of 70 times from 53 distinct sources. 46.232.235.3 was first reported on July 30th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇰 ScamAware	2026-07-31 13:23:37 (1 hour ago)	Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ... show more Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 4. Unique request paths counted internally: 2. Cloudflare action: block. Cloudflare source: firewallCustom. show less	Web App Attack
🇺🇸 RH5	2026-07-31 13:12:14 (2 hours ago)	Restricted URL probing (/.git) (UTC 2026-07-31 13:12)	Web App Attack
🇨🇦 polycoda	2026-07-31 11:55:46 (3 hours ago)	🧭 vhost fuzzing	Hacking Web App Attack
🇺🇸 rdpguard.com	2026-07-31 11:42:12 (3 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇦🇺 Bay13	2026-07-31 11:13:14 (4 hours ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇺🇸 TPI-Abuse	2026-07-31 10:41:27 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 46.232.235.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 46.232.235.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 06:41:23.788192 2026] [security2:error] [pid 141260:tid 141260] [client 46.232.235.3:41988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackjobsnetwork.com"] [uri "/.env"] [unique_id "amx707KsnUZpy7JJF2bR3AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-07-31 08:43:56 (6 hours ago)	cloudlinux2 fail2ban: 2026-07-31 10:42:12,011 fail2ban.filter [1838]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-07-31 10:42:12,011 fail2ban.filter [1838]: INFO [plesk-modsecurity] Found 202.63.210.174 - 2026-07-31 10:42:11cloudlinux2 fail2ban: 2026-07-31 10:42:22,857 fail2ban.filter [1838]: INFO [plesk-modsecurity] Found 202.63.210.174 - 2026-07-31 10:42:22cloudlinux2 fail2ban: 2026-07-31 10:42:16,928 fail2ban.filter [1838]: INFO [plesk-modsecurity] Found 46.232.235.6 - 2026-07-31 10:42:16cloudlinux2 fail2ban: 2026-07-31 10:42:22,869 fail2ban.filter [1838]: INFO [plesk-modsecurity] Found 46.232.235.3 - 2026-07-31 10:42:22cloudlinux2 fail2ban: 2026-07-31 10:42:22,847 fail2ban.filter [1838]: INFO [plesk-modsecurity] Found 46.232.235.3 - 2026-07-31 10:42:22cloudlinux2 fail2ban: 2026-07-31 10:42:16,216 fail2ban.filter [1838]: INFO [plesk-modsecurity] Found 46.232.235.6 - 2026-07-31 10:42:16cloudlinux2 fail2ban: 2026-07-31 10:42:28,932 fail2ban.filter [1838]: INFO [recidive] Found 46.232.235.3 - 2026-07-31 10:42:28cloudli show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-31 08:29:22 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 46.232.235.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 46.232.235.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 31 04:29:13.628443 2026] [security2:error] [pid 384927:tid 384932] [client 46.232.235.3:45208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jpdesign.us"] [uri "/.env"] [unique_id "amxc2VtrHYSaPDwjrHfvEAAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 securejdprop	2026-07-31 06:29:04 (8 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.	Hacking
🇮🇳 evicky2002	2026-07-31 06:00:00 (9 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 lindi	2026-07-31 05:26:07 (9 hours ago)	trying to access .env file ...	Hacking Web App Attack
🇩🇪 4server	2026-07-31 05:25:05 (9 hours ago)	[FriJul3107:25:01.1484352026][security2:error][pid3931512:tid3931641][client46.232.235.3:0]ModSecuri ... show more [FriJul3107:25:01.1484352026][security2:error][pid3931512:tid3931641][client46.232.235.3:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoconfig.ponzellini.ch\"][uri\"/.git/config\"][unique_id\"amwxrRTqp6TCVRtHz4jBcgAAARE\"] show less	Port Scan Brute-Force Web App Attack
🇷🇺 DZBOT	2026-07-31 03:42:17 (11 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 wbsouza	2026-07-31 03:24:34 (11 hours ago)	CrowdSec: crowdsecurity/appsec-vpatch — automated firewall drops on self-hosted IDS sensor	Hacking
🇩🇪 Ba-Yu	2026-07-31 03:21:09 (11 hours ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.237.155.240

🇺🇸 172.3.162.90

🇺🇸 162.216.149.169

🇩🇪 161.35.205.74

🇫🇮 147.185.133.60

🇨🇦 142.161.77.89

🇵🇰 72.255.7.127

🇺🇸 66.249.73.164

🇬🇧 35.203.211.169

🇺🇸 20.9.85.55

🇰🇷 222.108.250.153

🇳🇱 213.176.26.77

🇰🇷 211.184.53.155

🇦🇿 188.253.212.139

🇷🇺 188.43.204.45

🇨🇱 186.104.180.7

🇺🇸 172.238.188.122

🇨🇳 115.207.29.99

🇺🇸 104.26.12.225

🇮🇩 103.166.226.235