JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 46.249.98.84

46.249.98.84 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 84%: ?

84%

ISP	BitCommand LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212552
Domain Name	bitcommand.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 46.249.98.84

Whois 46.249.98.84

IP Abuse Reports for 46.249.98.84:

This IP address has been reported a total of 35 times from 19 distinct sources. 46.249.98.84 was first reported on May 19th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-09-02 22:33:29 (13 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: goblinpot.site \| URI: /cms/.env \| UA: Mozilla/5.0 (Android 15; Mobile; rv:136.0) Gecko/136.0 Firefox/136.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇵🇱 Budyn	2026-09-02 12:48:28 (22 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.xyz \| URI: /lib/phpunit/src/Util/PHP/eval-stdin.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edge/44.18363.8131 \| BODY: <?php echo(md5("Hello")); show less	Hacking Web App Attack
🇬🇧 consul.to	2026-09-02 11:18:33 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇵🇱 Budyn	2026-09-02 00:36:07 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.astropot.site \| URI: /admin/.env \| UA: Mozilla/5.0 (X11; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇮 kumiko	2026-09-01 05:54:19 (2 days ago)	[2026-09-01 08:54:18] Probing for exploits [1 requests] "POST /app/vendor/phpunit/phpunit/src/Util ... show more [2026-09-01 08:54:18] Probing for exploits [1 requests] "POST /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 403 show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-31 18:20:06 (2 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-08-31 18:15:28 (2 days ago)	46.249.98.84 - - [31/Aug/2026:20:15:25 +0200] "POST /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-std ... show more 46.249.98.84 - - [31/Aug/2026:20:15:25 +0200] "POST /ws/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 302 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 46.249.98.84 - - [31/Aug/2026:20:15:25 +0200] "POST /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 302 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 46.249.98.84 - - [31/Aug/2026:20:15:26 +0200] "POST /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/2.0" 302 473 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 46.249.98.84 - - [31/Aug/2026:20:15:25 +0200] "GET /turbo-rascal-syntax-error-expected-but-begin/ HTTP/2.0" 200 30138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 46.249.98.84 - - [31/Aug/2026:20:15:26 +0200] "GET show less	Web App Attack Brute-Force
🇫🇷 largo-it.net	2026-08-31 10:17:45 (3 days ago)	[31/Aug/2026:12:17:45.431] HTTP 404 - POST https://finance.largo.fr/lib/phpunit/phpunit/src/Util/PHP ... show more [31/Aug/2026:12:17:45.431] HTTP 404 - POST https://finance.largo.fr/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php [31/Aug/2026:12:17:45.467] HTTP 404 - POST https://finance.largo.fr/phpunit/Util/PHP/eval-stdin.php [31/Aug/2026:12:17:45.504] HTTP 404 - POST https://finance.largo.fr/lib/phpunit/phpunit/Util/PHP/eval-stdin.php [31/Aug/2026:12:17:45.538] HTTP 404 - POST https://finance.largo.fr/index.php [31/Aug/2026:12:17:45.584] HTTP 404 - POST https://finance.largo.fr/cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php [31/Aug/2026:12:17:45.618] HTTP 404 - GET https://finance.largo.fr/.env.example [31/Aug/2026:12:17:45.684] HTTP 404 - POST https://finance.largo.fr/yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php [31/Aug/2026:12:17:45.718] HTTP 404 - POST https://finance.largo.fr/zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Hacking Bad Web Bot Web App Attack
Anonymous	2026-08-31 00:12:03 (3 days ago)	apache-auth	Brute-Force Web App Attack
🇺🇸 mnsf	2026-08-30 10:06:28 (4 days ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇵🇱 Budyn	2026-08-30 09:37:44 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.site \| URI: /backend/.env \| UA: Mozilla/5.0 (Android 14; Mobile; rv:136.0) Gecko/136.0 Firefox/136. \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-08-30 06:31:48 (4 days ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 ger-stg-sifi1	2026-08-29 22:59:37 (4 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇵🇱 Budyn	2026-08-29 22:00:11 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.goblinpot.space \| URI: /home/.env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/134.0.6998.99 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 17:25:30 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 46.249.98.84 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 46.249.98.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 13:25:25.618963 2026] [security2:error] [pid 21818:tid 21818] [client 46.249.98.84:57279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sweak.com"] [uri "/home/.env"] [unique_id "apMWBSk0LbXTI8OcRkPEkwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇫🇮 170.168.29.58

🇺🇸 161.38.201.14

🇸🇬 159.65.2.17

🇺🇸 136.107.63.158

🇸🇬 8.219.160.31

🇧🇬 5.188.206.30

🇺🇦 212.90.163.77

🇭🇰 199.45.154.76

🇳🇱 45.156.128.167

🇩🇪 36.255.97.190

🇷🇴 193.46.255.86

🇺🇸 147.185.132.188

🇺🇸 146.88.241.44

🇺🇸 85.208.96.199

🇳🇱 45.156.128.164

🇺🇸 20.106.36.9

🇱🇹 213.176.24.43

🇧🇷 152.237.185.104

🇵🇱 109.205.211.110