JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

169.40.142.96

Recent Activity

Abuse Confidence Score

100% Critical

348 reports

168 reporters · latest 4 hours ago

ISP: TerraTransit AG
Usage Type: Data Center/Web Hosting/Transit
ASN: AS215599
Domain Name: terratransit.de
Country: 🇫🇷 France
City: Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

348 from 168 distinct reporters

First reported

September 22nd 2026

Most recent report

4 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 93 🇳🇱 Netherlands 49 🇺🇸 United States of America 47

Most common categories Web App Attack 259 Bad Web Bot 86 Hacking 86 Brute-Force 76 Port Scan 28

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@FBN	2026-11-12 17:40:37 UTC · (4 hours ago)	FW-PortScan: Traffic Blocked srcport=59606 dstport=443	Port Scan
🇩🇪 Vegascosmetics	2026-11-12 09:29:47 UTC · (12 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (50, Abuse: 100)	Hacking Exploited Host Web App Attack
🇫🇷 security.rdmc.fr	2026-11-12 08:00:34 UTC · (13 hours ago)	Activity from blacklisted IP	Hacking
🇺🇸 TAY	2026-11-12 04:35:32 UTC · (17 hours ago)	169.40.142.96 - - [12/Nov/2026:12:35:21 +0800] "GET /wp-config.php.bak HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:12:35:22 +0 ... show more 169.40.142.96 - - [12/Nov/2026:12:35:21 +0800] "GET /wp-config.php.bak HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:12:35:22 +0800] "GET /wp-config.php~ HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:12:35:25 +0800] "GET /wp-config.php.save HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:12:35:27 +0800] "GET /wp-config.php.swp HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:12:35:29 +0800] "GET /wp-config.php.old HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Brute-Force
🇺🇸 TAY	2026-11-12 02:57:23 UTC · (18 hours ago)	169.40.142.96 - - [12/Nov/2026:10:57:17 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6130 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:10:57:21 +0 ... show more 169.40.142.96 - - [12/Nov/2026:10:57:17 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6130 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:10:57:21 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:10:57:21 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 55990 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:10:57:22 +0800] "GET /wp-config.php~ HTTP/1.1" 404 50197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [12/Nov/2026:10:57:22 +0800] "GET /wp-config.php.save HTTP/1.1" 404 50197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Brute-Force
🇲🇾 Rizzy	2026-11-12 02:25:08 UTC · (19 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-11-11 07:30:26 UTC · (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 169.40.142.96 (FR/France/-)	SQL Injection
🇫🇷 Kejult	2026-11-11 06:43:26 UTC · (1 day ago)	Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 56 request event(s), 47 distinct path(s), 35 request(s) to suspicious path(s). Examples: /wp-config.php.bak, /wp-config.php.old, /wp-config.php.orig, /wp-config.php ... show more Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 56 request event(s), 47 distinct path(s), 35 request(s) to suspicious path(s). Examples: /wp-config.php.bak, /wp-config.php.old, /wp-config.php.orig, /wp-config.php.save, /wp-config.php.swp. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TAY	2026-11-11 05:19:13 UTC · (1 day ago)	169.40.142.96 - - [11/Nov/2026:13:19:04 +0800] "GET /wp-config.php.bak HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [11/Nov/2026:13:19:06 +0 ... show more 169.40.142.96 - - [11/Nov/2026:13:19:04 +0800] "GET /wp-config.php.bak HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [11/Nov/2026:13:19:06 +0800] "GET /wp-config.php~ HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [11/Nov/2026:13:19:08 +0800] "GET /wp-config.php.save HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [11/Nov/2026:13:19:09 +0800] "GET /wp-config.php.swp HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 169.40.142.96 - - [11/Nov/2026:13:19:11 +0800] "GET /wp-config.php.old HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G ... show less	Brute-Force
🇳🇱 Alt255	2026-11-11 03:45:53 UTC · (1 day ago)	[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 169.40.142.96 - - [11/Nov/2026:04:45:48 +0100] "GET /composer.lock HTTP/1.1" 404 31230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit ... show more [ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 169.40.142.96 - - [11/Nov/2026:04:45:48 +0100] "GET /composer.lock HTTP/1.1" 404 31230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-11-10 08:37:50 UTC · (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-11-10 07:53:39 UTC · (2 days ago)	Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.	Web App Attack
🇩🇪 D3vNu11	2026-11-09 22:41:23 UTC · (2 days ago)	Level: (LOW): Reputation Unknown via CitrixHoneypot IOC Country: France 1x -> Target Country: Frankreich HTTPS	Hacking Web App Attack
🇨🇭 TheCoon	2026-11-08 10:54:55 UTC · (4 days ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇳🇱 Alt255	2026-11-06 08:28:53 UTC · (6 days ago)	[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 169.40.142.96 - - [06/Nov/2026:09:28:49 +0100] "GET /.hg/store/00manifest.i HTTP/1.1" 301 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ... show more [cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 169.40.142.96 - - [06/Nov/2026:09:28:49 +0100] "GET /.hg/store/00manifest.i HTTP/1.1" 301 535 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 348 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 72.215.46.232

🇵🇱 46.149.211.156

🇳🇱 45.148.10.157

🇰🇷 211.119.11.203

🇳🇱 206.189.4.241

🇦🇷 191.241.142.217

🇨🇴 181.78.238.131

🇸🇬 161.118.251.249

🇫🇷 91.196.152.169

🇳🇱 85.11.167.7

🇺🇸 74.7.242.129

🇸🇪 52.110.18.136

🇺🇸 50.82.130.170

🇲🇾 49.124.152.149

🇮🇳 49.36.216.218

🇧🇪 34.38.57.172

🇹🇭 34.15.133.126

🇺🇸 15.204.210.120

🇹🇼 198.235.24.60

🇹🇷 193.35.153.177