JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 75.119.146.252

75.119.146.252 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3117011.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 75.119.146.252

Whois 75.119.146.252

IP Abuse Reports for 75.119.146.252:

This IP address has been reported a total of 38 times from 37 distinct sources. 75.119.146.252 was first reported on June 17th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hary74656	2026-06-19 22:32:40 (1 hour ago)	[Sat Jun 20 00:32:27.180869 2026] [security2:error] [pid 367408:tid 367559] [client 75.119.146.252:5 ... show more [Sat Jun 20 00:32:27.180869 2026] [security2:error] [pid 367408:tid 367559] [client 75.119.146.252:53816] [client 75.119.146.252] ModSecurity: Access denied with code 403 (phase 2). String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1056"] [id "920440"] [msg "URL file extension is restricted by policy"] [data ".backup"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "78.46.107. ... show less	Web App Attack
Anonymous	2026-06-19 22:28:18 (1 hour ago)	IP banned by Fail2Ban	Brute-Force SSH
🇩🇪 ut-addicted.com	2026-06-19 21:58:22 (1 hour ago)	\[19/Jun/2026:23:58:13 +0200\] ajW7deedPLW1bgHPVRO2LAAAAM4 75.119.146.252 35314 78.46.187.162 80 \[1 ... show more \[19/Jun/2026:23:58:13 +0200\] ajW7deedPLW1bgHPVRO2LAAAAM4 75.119.146.252 35314 78.46.187.162 80 \[19/Jun/2026:23:58:16 +0200\] ajW7eOedPLW1bgHPVRO2LwAAANU 75.119.146.252 35314 78.46.187.162 80 \[19/Jun/2026:23:58:21 +0200\] ajW7feedPLW1bgHPVRO2MgAAAMU 75.119.146.252 35314 78.46.187.162 80 show less	Brute-Force Web App Attack
🇨🇦 alexbfr	2026-06-19 20:49:34 (2 hours ago)	Fail2Ban Report, nginx-bot-trap jail: Automated honeypot detection.	Port Scan
🇳🇱 wolfemium	2026-06-19 20:48:32 (2 hours ago)	75.119.146.252 - - [19/Jun/2026:23:48:15 +0300] "GET /wp-config.php HTTP/1.1" 302 138 "-" "Mozilla/5 ... show more 75.119.146.252 - - [19/Jun/2026:23:48:15 +0300] "GET /wp-config.php HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible)" 75.119.146.252 - - [19/Jun/2026:23:48:19 +0300] "GET /wp-config.php.bak HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible)" 75.119.146.252 - - [19/Jun/2026:23:48:23 +0300] "GET /wp-config.php.save HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible)" 75.119.146.252 - - [19/Jun/2026:23:48:23 +0300] "GET /wp-config.php.old HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible)" 75.119.146.252 - - [19/Jun/2026:23:48:28 +0300] "GET /wp-config.php~ HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible)" 75.119.146.252 - - [19/Jun/2026:23:48:32 +0300] "GET /wp-config.php.dist HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible)" ... show less	DDoS Attack
🇺🇸 etu brutus	2026-06-19 19:34:41 (4 hours ago)	75.119.146.252 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
Anonymous	2026-06-19 18:57:13 (4 hours ago)	75.119.146.252 - - [19/Jun/2026:20:57:12 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compa ... show more 75.119.146.252 - - [19/Jun/2026:20:57:12 +0200] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible)" show less	Web App Attack
Anonymous	2026-06-19 18:23:31 (5 hours ago)	Sensitive file access attempt	Hacking
🇺🇸 masterguru	2026-06-19 17:57:34 (5 hours ago)	. Matched phrase "/.env" at REQUEST_URI. (210492-128)	Web App Attack
🇩🇪 pigro	2026-06-19 16:54:17 (6 hours ago)	75.119.146.252 - - [19/Jun/2026:18:54:17 +0200] "GET /backend/.env HTTP/1.1" 404 125 "-" "Mozilla/5. ... show more 75.119.146.252 - - [19/Jun/2026:18:54:17 +0200] "GET /backend/.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible)" 75.119.146.252 - - [19/Jun/2026:18:54:17 +0200] "GET /config/.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible)" ... show less	Web App Attack
Anonymous	2026-06-19 13:06:05 (10 hours ago)	Trying to access config files	Web App Attack
🇦🇺 AWW-Admin	2026-06-19 11:50:26 (11 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 75.119.146.252 (FR/France/vmi3117011.co ... show more (mod_security) mod_security triggered on hostname [redacted] 75.119.146.252 (FR/France/vmi3117011.contaboserver.net) show less	SQL Injection
🇬🇧 pearbright	2026-06-19 06:24:31 (17 hours ago)	2026-06-19T06:10:25.780314+00:00 srv740043 kernel: [2587012.887240] [UFW BLOCK] IN=eth0 OUT= MAC=bc: ... show more 2026-06-19T06:10:25.780314+00:00 srv740043 kernel: [2587012.887240] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=75.119.146.252 DST=147.93.84.193 LEN=40 TOS=0x08 PREC=0x40 TTL=239 ID=57216 PROTO=TCP SPT=49323 DPT=8888 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T06:13:05.928938+00:00 srv740043 kernel: [2587173.035552] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=75.119.146.252 DST=147.93.84.193 LEN=40 TOS=0x08 PREC=0x40 TTL=238 ID=41694 PROTO=TCP SPT=49323 DPT=4000 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T06:15:27.224629+00:00 srv740043 kernel: [2587314.331342] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=75.119.146.252 DST=147.93.84.193 LEN=40 TOS=0x08 PREC=0x40 TTL=239 ID=59762 PROTO=TCP SPT=49323 DPT=9090 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-19T06:15:30.741898+00:00 srv740043 kernel: [2587317.848635] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:cc:aa:85:44:38:39:ff:ff:41:08:00 SRC=75.119.146.252 ... show less	Port Scan
🇩🇪 Phenix Info	2026-06-19 05:54:03 (17 hours ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇩🇪 et-a_network	2026-06-19 05:52:55 (17 hours ago)	75.119.146.252 - - [19/Jun/2026:05:52:38 +0000] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5. ... show more 75.119.146.252 - - [19/Jun/2026:05:52:38 +0000] "GET /.env.example HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible)" host=87.106.176.162 75.119.146.252 - - [19/Jun/2026:05:52:38 +0000] "GET /.env.development HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible)" host=87.106.176.162 75.119.146.252 - - [19/Jun/2026:05:52:50 +0000] "GET /.env.production.local HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible)" host=87.106.176.162 75.119.146.252 - - [19/Jun/2026:05:52:50 +0000] "GET /.env.docker HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible)" host=87.106.176.162 75.119.146.252 - - [19/Jun/2026:05:52:55 +0000] "GET /.env.local.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible)" host=87.106.176.162 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.134

🇨🇳 120.48.124.176

🇳🇱 91.92.40.12

🇵🇱 57.128.247.50

🇺🇸 43.153.13.30

🇺🇸 159.203.116.195

🇫🇷 91.231.89.145

🇺🇸 70.32.86.195

🇳🇱 45.148.10.157

🇺🇸 165.245.167.227

🇫🇮 147.185.133.178

🇺🇸 136.144.35.96

🇨🇳 111.37.64.209

🇨🇳 203.2.164.205

🇵🇾 190.104.178.82

🇨🇳 115.191.9.205

🇨🇳 110.52.5.162

🇸🇬 103.187.147.214

🇺🇸 45.156.129.81

🇬🇧 35.203.211.80