JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.39.69.47

45.39.69.47 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 45%: ?

45%

ISP	Subnet Digital LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS213751
Domain Name	subnetdigital.com
Country	🇹🇷 Turkey
City	Cekmekoy, Istanbul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.39.69.47

Whois 45.39.69.47

IP Abuse Reports for 45.39.69.47:

This IP address has been reported a total of 47 times from 30 distinct sources. 45.39.69.47 was first reported on June 11th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 4server	2026-06-17 05:31:03 (1 month ago)	[WedJun1707:30:56.5271232026][security2:error][pid3721751:tid3722130][client45.39.69.47:0]ModSecurit ... show more [WedJun1707:30:56.5271232026][security2:error][pid3721751:tid3722130][client45.39.69.47:0]ModSecurity:Accessdeniedwithcode403$phase1$.Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"e20ti.ch\"][uri\"/api/.env\"][unique_id\"ajIxEKdvED_zF9PHTtnoxwAAAAc\"] show less	Hacking Web App Attack
🇨🇭 TheCoon	2026-06-17 04:45:01 (1 month ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇧🇷 Halux	2026-06-17 03:57:10 (1 month ago)	45.39.69.47 Probing protected path or service	Web App Attack
🇩🇪 4server	2026-06-17 03:23:07 (1 month ago)	[WedJun1705:23:02.7430442026][security2:error][pid2757566:tid2757654][client45.39.69.47:0]ModSecurit ... show more [WedJun1705:23:02.7430442026][security2:error][pid2757566:tid2757654][client45.39.69.47:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"elyon2.ch\"][uri\"/new/.env\"][unique_id\"ajITFmI2ALKVufv3EtoXhQAAAQk\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 bazter.pro	2026-06-16 23:06:25 (1 month ago)	Auto-Ban [2026-06-17 02:06:17]: CRITICAL: .env attack; DC: Subnet Digital LLC [Paths: 11] \| Details: ... show more Auto-Ban [2026-06-17 02:06:17]: CRITICAL: .env attack; DC: Subnet Digital LLC [Paths: 11] \| Details: Exploit trap paths: /.env, /app/.env, /member/.env, /api/.env, /backend/.env \| Sensitive files/paths: /.env, /app/.env, /member/.env, /api/.env, /backend/.env \| 404 errors (11): /backend/.env, /core/.env, /.env, /new/.env, /admin/.env, /api/.env, /dev/.env, /app/.env, /core/.env.save, /.env.save (and 1 more) show less	Web App Attack Hacking
🇫🇮 Erpelstolz	2026-06-16 19:53:25 (1 month ago)	external host: 45.39.69.47 - - [16/Jun/2026:21:53:25 +0200] "GET /admin/.env HTTP/1.1" 404 5744 "-" ... show more external host: 45.39.69.47 - - [16/Jun/2026:21:53:25 +0200] "GET /admin/.env HTTP/1.1" 404 5744 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" CF-Ray:- CF-IP:- show less	Web App Attack
🇨🇭 Zdeněk Svancar	2026-06-16 19:01:42 (1 month ago)	45.39.69.47 - - [16/Jun/2026:19:01:41 +0000] "GET /new/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Maci ... show more 45.39.69.47 - - [16/Jun/2026:19:01:41 +0000] "GET /new/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 45.39.69.47 - - [16/Jun/2026:19:01:41 +0000] "GET /api/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇺🇸 TNZ	2026-06-16 18:37:43 (1 month ago)	Automated honeypot: bot_detected:no_accept_language \| Path: /member/.env \| ISP: AS213751 YALNIZ BILI ... show more Automated honeypot: bot_detected:no_accept_language \| Path: /member/.env \| ISP: AS213751 YALNIZ BILISIM TEKNOLOJILERI TIC. LTD.STI. \| ASN: AS213751 YALNIZ BILISIM TEKNOLOJILERI TIC. LTD.STI. \| Abuse score: 100 \| Open ports: [] \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like show less	Web App Attack
🇩🇪 todix	2026-06-16 18:18:05 (1 month ago)	Web App Attack Exploid from 45.39.69.47	Web App Attack
🇫🇷 ELYAZ	2026-06-16 17:08:28 (1 month ago)	(y3) Failed access -byebye- from 45.39.69.47 (TR/Türkiye/-): (CF_ENABLE)	Hacking
🇨🇦 dispensight	2026-06-16 17:08:25 (1 month ago)	Probe via dispensight.* redirect honeypot — attacker hit https://www.dispensight.club/member/.env, 3 ... show more Probe via dispensight.* redirect honeypot — attacker hit https://www.dispensight.club/member/.env, 301-redirected to canonical dispensight.com, Referer header exposed origin (2 req(s) on dispensight.com, UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 1). show less	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-13 21:59:08 (1 month ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-12. show less	Web App Attack SSH Hacking
🇫🇷 ELYAZ	2026-06-13 20:25:12 (1 month ago)	(y3) Failed access -byebye- from 45.39.69.47 (TR/Türkiye/-): (CF_ENABLE)	Hacking
🇫🇷 bellovacorp	2026-06-13 19:25:02 (1 month ago)	[CrowdSec/Noliae] crowdsecurity/http-sensitive-files	Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 17:42:20 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 45.39.69.47 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 45.39.69.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:42:15.877008 2026] [security2:error] [pid 13958:tid 13958] [client 45.39.69.47:35710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manufacturassantiago.com"] [uri "/.env"] [unique_id "ai2Wd_KxjnB4FWMWeKcigQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 165.154.151.207

🇺🇸 162.217.100.201

🇺🇸 147.185.132.150

🇭🇰 101.36.111.155

🇺🇸 66.132.186.180

🇳🇱 45.148.10.157

🇺🇸 45.132.227.12

🇷🇺 45.85.65.109

🇺🇦 31.43.51.206

🇬🇧 18.171.238.67

🇰🇷 183.116.206.204

🇳🇱 176.65.149.212

🇺🇸 174.176.57.15

🇷🇺 94.139.242.30

🇺🇸 20.228.179.34

🇧🇷 205.210.31.244

🇧🇷 191.5.152.91

🇧🇷 187.34.131.136

🇮🇶 185.244.155.190

🇳🇱 107.189.27.179