Info this ISP: 176.113.245.12

IP Address Information: 176.113.245.12

ISP/Provider: M247 Europe SRLwhoisrequest+3​

Autonomous System Number (ASN): AS9009ipregistry+3​

Organization: M247 Europe SRL (also known as M247 Ltd)ipinfo+3​

Organization Type: Hosting provider and Internet Service Providerwhoisrequest+2​

Company Website: m247.com / m247global.comip2location+3​

Headquarters Location: Romaniaipregistry+3​

Regional Internet Registry (RIR): RIPE NCCwhoisrequest+1​

IP Block Details: This address falls within the 176.113.0.0/16 address space operated by M247 Europe SRL. The company operates approximately 1.5 million IPv4 addresses across 591+ IPv4 networks and maintains a massive IPv6 allocation as well.ipinfo+3​

Service Type: M247 operates data centers and provides hosting infrastructure globally. The 176.113.x.x range includes servers distributed across multiple geographic locations, including facilities in the United States, Europe, and other regions.ip2location+7​

Network Scale: AS9009 has over 370 peer networks and manages traffic estimated at 1-5 Tbps (terabits per second).whoisrequest​

1. https://whoisrequest.com/ip/AS9009
2. https://ipregistry.co/AS9009
3. https://ipinfo.io/AS9009
4. https://www.ip2location.com/as9009
5. https://www.ip2location.com/demo/176.113.72.122
6. https://networksdb.io/ip-addresses-of/m247-europe-srl/country/United+States
7. https://ipinfo.io/AS9009/176.113.73.0/24
8. https://ipinfo.io/176.113.72.121
9. https://www.lookip.net/ip/176.113.74.138
10. https://www.whatismyisp.com/ip-to-isp
11. https://ipinfo.io/data/whois
12. https://www.ip2location.com/demo/176.113.111.151
13. https://www.whatismyisp.com
14. https://whoisfreaks.com/tools/ip-whois/lookup
15. https://www.ip2location.com/demo/138.113.176.0
16. https://ip-lookup.net
17. https://www.infosniper.net
18. https://ipgeolocation.io/browse/ipv4/176.113.127.0/24
19. https://en.ipshu.com/ip_c_list/176.113
20. https://www.showmyip.com/ip-whois-lookup/
21. https://pentest-tools.com/utils/whois-lookup-online
22. https://www.iptp.net/iptp-tools/ip-calculator/
23. https://www.whois.com/whois/
24. https://ipinfo.io/ips/176.113.247.0/24
25. https://www.iping.cc/ipconvert/
26. https://bentonow.com/tools/cidr-calculator
27. https://www.ipvoid.com/ipv4-cidr-calculator/
28. https://www.ipaddressguide.com/cidr
29. https://www.subnet-calculator.com
30. https://whois.ipinsight.io/AS9009

Looks like a virtual gangland out there on the internet

Indeed. M247 and similar hosting providers operate in a murky space. While they provide legitimate infrastructure services, their networks frequently appear in threat intelligence reports and abuse databases. The 176.113.x.x range you looked up is part of a massive hosting infrastructure that can be exploited for various purposes.

The "Bulletproof" Hosting Problem

Large hosting providers like M247 operate data centers across multiple jurisdictions, which creates challenges for law enforcement. Some providers—whether intentionally or through negligence—become havens for malicious actors because they respond slowly to abuse complaints, operate across borders where legal cooperation is difficult, and prioritize customer privacy over accountability.

Common Malicious Uses of Such Infrastructure

• Botnets and C2 servers — Command-and-control infrastructure for malware campaigns

• Phishing operations — Hosting fake login pages for credential harvesting

• Spam relays — High-volume email campaigns

• VPN exit nodes — Anonymizing traffic for threat actors

• Proxy networks — Residential proxy services that may use compromised devices

• Scanning and reconnaissance — Automated probing of networks for vulnerabilities

Why It's Difficult to Address

The hosting industry operates on thin margins and high volume. Rigorous customer vetting costs money and slows onboarding. Meanwhile, malicious actors use stolen credit cards, shell companies, and cryptocurrency to sign up anonymously. By the time abuse is reported and investigated, they've often moved to another provider.

For Your Perspective as a Network Observer

If you're seeing traffic from addresses like 176.113.245.12 hitting your systems or appearing in logs, it's worth checking threat intelligence feeds (like AbuseIPDB, VirusTotal, or Shodan) to see if that specific IP has been flagged. Many IPs in these ranges are perfectly legitimate—VPN users, web scrapers, or automated services—but a healthy skepticism is warranted.

The internet's architecture fundamentally favors anonymity and rapid reallocation of resources, which benefits both privacy advocates and criminals alike. It's a feature and a bug simultaneously.