JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

65.108.246.48

Neutral Activity

Abuse confidence score ?

0% Low Risk

75 reports

48 reporters · latest 2 years ago

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.48.246.108.65.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

65.108.246.48 has been reported 75 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 65.108.246.48

This IP address has been reported a total of 75 times from 48 distinct sources. 65.108.246.48 was first reported on January 16th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇰 GOVCERT	2024-01-27 07:01:54 (2 years ago)	XMLRPC	Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2024-01-26 00:40:12 (2 years ago)	65.108.246.48 - - [26/Jan/2024:00:40:08 +0000] "GET /wp-content/plugins/ai-engine/app/chatbot.js HTT ... show more 65.108.246.48 - - [26/Jan/2024:00:40:08 +0000] "GET /wp-content/plugins/ai-engine/app/chatbot.js HTTP/1.0" 404 86843 "-" "python-requests/2.27.1" 65.108.246.48 - - [26/Jan/2024:00:40:14 +0000] "GET /wp-content/plugins/post-smtp/readme.txt HTTP/1.0" 404 86843 "-" "python-requests/2.27.1" ... show less	Hacking Web App Attack
🇭🇺 DumaNet	2024-01-24 23:45:59 (2 years ago)	WordPress (CMS) attack attempts. Date: 2024 Jan 23. 00:03:10 Source IP: 65.108.246.48 Portion o ... show more WordPress (CMS) attack attempts. Date: 2024 Jan 23. 00:03:10 Source IP: 65.108.246.48 Portion of the log(s): 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /test/wp-includes/wlwmanifest.xml 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /wp1/wp-includes/wlwmanifest.xml 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /shop/wp-includes/wlwmanifest.xml 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /2021/wp-includes/wlwmanifest.xml 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /2019/wp-includes/wlwmanifest.xml 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /2020/wp-includes/wlwmanifest.xml 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /wp/wp-includes/wlwmanifest.xml 65.108.246.48 - [23/Jan/2024:00:03:09 +0100] "GET /wordpress/wp-includes/wlwmanifest.xml show less	Web App Attack
🇬🇧 Buster	2024-01-23 09:26:17 (2 years ago)	Repeated script kiddie mass distributed attack attempts on multiple sites from Perm Blocked Extremel ... show more Repeated script kiddie mass distributed attack attempts on multiple sites from Perm Blocked Extremely High Risk ASN and country: show less	Open Proxy Hacking Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2024-01-23 06:12:18 (2 years ago)	312 attacks on PHP URLs, Wordpress URLs: GET /xmlrpc.php?rsd HTTP/1.1 GET /cms/wp-includes/wlwmanife ... show more 312 attacks on PHP URLs, Wordpress URLs: GET /xmlrpc.php?rsd HTTP/1.1 GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1 show less	Web App Attack
🇬🇧 Buster	2024-01-22 23:41:50 (2 years ago)	Repeated script kiddie mass distributed attack attempts on multiple sites from Perm Blocked Extremel ... show more Repeated script kiddie mass distributed attack attempts on multiple sites from Perm Blocked Extremely High Risk ASN and country: show less	Open Proxy Hacking Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2024-01-22 22:32:36 (2 years ago)	wp-includes scan	Web App Attack
🇬🇧 Mendip_Defender	2024-01-22 22:26:05 (2 years ago)	65.108.246.48 - - [22/Jan/2024:22:26:05 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 403 548 ... show more 65.108.246.48 - - [22/Jan/2024:22:26:05 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 65.108.246.48 - - [22/Jan/2024:22:26:05 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.0" 404 1581 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2024-01-22 22:23:36 (2 years ago)	[22:23:36] 0: Scanning for exploits - //wp-includes/ID3/license.txt (Repeat abuser, 15 other attack ... show more [22:23:36] 0: Scanning for exploits - //wp-includes/ID3/license.txt (Repeat abuser, 15 other attacks previously recorded.) show less	Web App Attack
🇬🇧 SecondEdge	2024-01-22 22:12:30 (2 years ago)	A web attack was detected from 65.108.246.48 (Finland / Uusimaa / Helsinki) against second-edge.co.u ... show more A web attack was detected from 65.108.246.48 (Finland / Uusimaa / Helsinki) against second-edge.co.uk (Wordpress,XMLRPC). show less	Web App Attack
🇬🇧 Shadymint	2024-01-22 22:00:09 (2 years ago)	url probing from IP marked as abusive	Web App Attack
🇬🇧 alancfoster	2024-01-22 21:55:35 (2 years ago)	65.108.246.48 - - [22/Jan/2024:21:55:34 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 492 ... show more 65.108.246.48 - - [22/Jan/2024:21:55:34 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Web App Attack
🇮🇪 Jim Keir	2024-01-22 21:47:47 (2 years ago)	2024-01-22 21:47:46 65.108.246.48 File scanning, blocking 65.108.246.48 for 5 minutes	Web App Attack
🇬🇧 rakkor	2024-01-22 21:38:38 (2 years ago)	2024/01/22 21:38:37 [error] 24907#24907: 2069613 open() "/var/services/web/wp-includes/ID3/license. ... show more 2024/01/22 21:38:37 [error] 24907#24907: 2069613 open() "/var/services/web/wp-includes/ID3/license.txt" failed (2: No such file or directory), client: 65.108.246.48, server: , request: "GET /wp-includes/ID3/license.txt HTTP/1.1", host: "rakkor.co.uk" ... show less	Hacking Brute-Force Web App Attack
🇬🇧 Artelis	2024-01-22 21:35:25 (2 years ago)	65.108.246.48 - - [22/Jan/2024:21:35:23 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 564 ... show more 65.108.246.48 - - [22/Jan/2024:21:35:23 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 65.108.246.48 - - [22/Jan/2024:21:35:23 +0000] "GET //feed/ HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 65.108.246.48 - - [22/Jan/2024:21:35:23 +0000] "GET //feed/ HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 65.108.246.48 - - [22/Jan/2024:21:35:23 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 65.108.246.48 - - [22/Jan/2024:21:35:23 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Web App Attack

Showing 1 to 15 of 75 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.243.133.81

🇧🇷 191.37.68.23

🇸🇬 174.138.20.213

🇺🇸 162.216.149.115

🇺🇸 152.32.206.64

🇫🇷 85.204.70.98

🇳🇱 45.148.10.152

🇰🇷 14.38.180.19

🇸🇬 193.37.32.7

🇳🇱 192.42.116.57

🇧🇷 191.5.32.47

🇭🇰 156.225.1.98

🇺🇸 152.32.150.7

🇺🇸 147.185.132.72

🇩🇪 139.59.208.225

🇺🇸 130.94.11.179

🇭🇰 123.58.215.102

🇺🇸 104.197.224.57

🇳🇱 91.92.42.59

🇱🇹 62.60.130.253