JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.46.102.22

209.46.102.22 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 39%: ?

39%

ISP	Clouvider Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	clouvider.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.46.102.22

Whois 209.46.102.22

IP Abuse Reports for 209.46.102.22:

This IP address has been reported a total of 36 times from 20 distinct sources. 209.46.102.22 was first reported on May 22nd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-12 09:01:16 (1 week ago)	Blocked 14 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delistin ... show more Blocked 14 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible. show less	Email Spam
🇫🇷 dynamix	2026-07-12 02:32:09 (1 week ago)	Multiple WAF Violations	Web App Attack
🇷🇺 DZBOT	2026-06-29 08:46:25 (3 weeks ago)	DZBOT: Brute-force users IMAP/POP3	Brute-Force
🇧🇪 sid3windr	2026-06-26 23:29:38 (4 weeks ago)	GET /config/config.json (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇧🇪 boxed-it	2026-06-26 11:05:41 (4 weeks ago)	GET /.env (Tarpitted for 1d15h8m38s, wasted 8.06MB)	Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-24 20:26:33 (1 month ago)	Honeypot hit: Incoming HTTP traffic on port 81	Web App Attack Bad Web Bot
🇧🇪 boxed-it	2026-06-24 12:43:47 (1 month ago)	GET /config/secrets.yaml (Tarpitted for 1d15h8m29s, wasted 8.06MB)	Web App Attack
🇧🇪 sid3windr	2026-06-23 11:10:35 (1 month ago)	GET /config/config.json (Tarpitted for , wasted 120B)	Web App Attack
🇩🇪 4server	2026-06-19 18:49:23 (1 month ago)	[FriJun1920:49:18.3687442026][security2:error][pid2406918:tid2406988][client209.46.102.22:0]ModSecur ... show more [FriJun1920:49:18.3687442026][security2:error][pid2406918:tid2406988][client209.46.102.22:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"mail.wildpferde.ch\"][uri\"/config/.env\"][unique_id\"ajWPLo5-1gPvLRbirtDzagAAAIk\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 16:35:48 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 209.46.102.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.46.102.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 12:35:42.100452 2026] [security2:error] [pid 10021:tid 10021] [client 209.46.102.22:39360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.construction.bonefrog.com"] [uri "/.env.backup"] [unique_id "ajVv3ufPU-ZHhT-2L_ExYwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-19 16:03:49 (1 month ago)	Honeypot hit: Incoming HTTP traffic on port 81	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-19 11:49:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 209.46.102.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.46.102.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 07:49:41.363078 2026] [security2:error] [pid 17529:tid 17529] [client 209.46.102.22:39896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.garyandthegroove.com"] [uri "/.env.save"] [unique_id "ajUs1ezP1MO-GEaATEiqRgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-06-18 00:21:01 (1 month ago)	Email account brute force: 1 attempts were recorded from 209.46.102.22 2026-06-18T00:42:18+02:00 war ... show more Email account brute force: 1 attempts were recorded from 209.46.102.22 2026-06-18T00:42:18+02:00 warning: unknown[209.46.102.22]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-17 08:27:18 (1 month ago)	Honeypot hit: Incoming HTTP traffic on port 81	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-16 02:02:07 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 209.46.102.22 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 209.46.102.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 22:02:02.768328 2026] [security2:error] [pid 12954:tid 12975] [client 209.46.102.22:53986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradomohs.aafm.us"] [uri "/.env.claude.gpg"] [unique_id "ajCummhTSZEDoapD_pheLgAAAZM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.43.120.12

🇲🇽 201.140.123.130

🇮🇪 98.71.8.129

🇦🇹 85.124.207.102

🇮🇳 49.47.134.101

🇮🇳 223.185.41.156

🇺🇸 216.73.216.39

🇳🇱 195.178.110.137

🇲🇽 189.190.217.141

🇳🇱 185.226.197.10

🇺🇸 162.216.150.185

🇺🇸 162.216.149.24

🇮🇳 157.20.229.131

🇨🇦 142.44.220.174

🇮🇳 103.165.72.196

🇫🇷 91.231.89.68

🇧🇬 91.191.209.118

🇳🇱 89.21.67.178

🇧🇬 78.128.114.66

🇺🇸 71.6.242.124