JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

46.8.64.85

Recent Activity

Abuse confidence score ?

100% Critical

38 reports

26 reporters · latest 15 minutes ago

ISP	CGI GLOBAL LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56971
Domain Name	cloudbackbone.net
Country	🇱🇻 Latvia
City	Riga, Riga

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 46.8.64.85

Export CSV

This IP address has been reported a total of 38 times from 26 distinct sources. 46.8.64.85 was first reported on October 13th 2026, and the most recent report was 15 minutes ago. In the last 60 days, the top reporter locations were: United States of America with 16 reports; Germany with 8 reports; Brazil with 3 reports. The most common categories in these recent reports were: Web App Attack 34 times; Bad Web Bot 17 times; Brute-Force 16 times; Hacking 8 times; DDoS Attack 1 time; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-15 08:00:08 (15 minutes ago)	[ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 46.8.64.85 - - [15/Oct/2026:09:59:46 +0200] "GET /.git/config HTTP/1.1" 301 464 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.5 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 Dominik Lysiak	2026-10-15 06:42:43 (1 hour ago)	46.8.64.85 - - [15/Oct/2026:08:39:22 +0200] "GET /.git/HEAD HTTP/1.1" 200 9786 "-" "Mozilla/5.0 (SS; ... show more 46.8.64.85 - - [15/Oct/2026:08:39:22 +0200] "GET /.git/HEAD HTTP/1.1" 200 9786 "-" "Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 46.8.64.85 - - [15/Oct/2026:08:41:13 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0" 46.8.64.85 - - [15/Oct/2026:08:42:43 +0200] "GET /.git/index HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; rv:128.0) Gecko/20100101 Firefox/128.0" ... show less	Web App Attack
🇬🇧 consul.to	2026-10-15 06:39:26 (1 hour ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 05:55:26 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:55:17.972232 2026] [security2:error] [pid 30475:tid 30503] [client 46.8.64.85:40354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cibernetic.com"] [uri "/.git/HEAD"] [unique_id "atBqxY4D5Y5634dOqRexiAAAApc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-15 05:02:43 (3 hours ago)	Web Server Exposed Git Repository Information Disclosure.	Hacking
🇺🇸 TPI-Abuse	2026-10-15 04:10:43 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 00:10:35.956179 2026] [security2:error] [pid 7920:tid 7920] [client 46.8.64.85:49804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dmasoftlab.com"] [uri "/.git/config"] [unique_id "atBSOwUb3p64a--AVS9WyAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 VXG-NET	2026-10-15 04:06:49 (4 hours ago)	port=80, indicator_type=info-leak	Hacking
🇩🇪 altenglaner	2026-10-15 03:01:52 (5 hours ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ... show more Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban. show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 02:26:41 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 22:26:34.215610 2026] [security2:error] [pid 9628:tid 9628] [client 46.8.64.85:34150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fingerprintinternational.com"] [uri "/.git/HEAD"] [unique_id "atA52jYJTtwypE-j_JFj3AAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-10-15 01:49:49 (6 hours ago)	(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 46.8.64.85 (LV/Latvia/-): 2 in t ... show more (web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 46.8.64.85 (LV/Latvia/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇩🇪 Phenix Info	2026-10-15 01:31:06 (6 hours ago)	SmallGuard.fr/Prestashop Forbidden Ext.	Web App Attack
🇰🇷 UserList	2026-10-15 01:24:00 (6 hours ago)	2026/10/15 06:55:05 [error] 15677#15677: 44528 access forbidden by rule, client: 46.8.64.85, server ... show more 2026/10/15 06:55:05 [error] 15677#15677: 44528 access forbidden by rule, client: 46.8.64.85, server: , request: "GET /.git/HEAD HTTP/1.1", host: "" 2026/10/15 06:56:14 [error] 15682#15682: 44677 access forbidden by rule, client: 46.8.64.85, server: , request: "GET /.git/config HTTP/1.1", host: "" 2026/10/15 06:56:34 [error] 15682#15682: 44736 access forbidden by rule, client: 46.8.64.85, server: , request: "GET /.git/config HTTP/1.1", host: "" 2026/10/15 06:58:49 [error] 15682#15682: *45015 access forbidden by rule, client: 46.8.64.85, server: , request: "GET /.git/index HTTP/1.1", host: "" show less	Web App Attack
🇺🇸 Lee Daniel	2026-10-15 00:58:39 (7 hours ago)	46.8.64.85 - - [14/Oct/2026:20:58:39 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (X11; Linu ... show more 46.8.64.85 - - [14/Oct/2026:20:58:39 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/117.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 23:05:03 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 46.8.64.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:04:56.888500 2026] [security2:error] [pid 14603:tid 14603] [client 46.8.64.85:39636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jetzilla.com"] [uri "/.git/HEAD"] [unique_id "atAKmDW2N6fDoQjdYvnLSgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-14 22:50:03 (9 hours ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.128.57.2

🇺🇸 162.216.149.41

🇮🇳 160.30.82.42

🇺🇸 147.185.132.99

🇻🇳 110.172.28.143

🇻🇳 103.200.25.79

🇫🇷 91.231.89.142

🇫🇷 91.196.152.10

🇩🇪 69.5.169.130

🇰🇷 61.38.2.231

🇸🇬 43.172.197.223

🇦🇷 38.51.31.247

🇺🇸 20.62.196.215

🇮🇳 20.40.44.6

🇳🇱 185.242.226.104

🇳🇱 185.242.226.9

🇺🇸 172.208.51.148

🇨🇦 165.245.228.249

🇺🇸 165.154.172.111

🇺🇸 162.216.149.254