JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.103.84

146.70.103.84 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 4%: ?

ISP	M247 LTD Oslo Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.103.84

Whois 146.70.103.84

IP Abuse Reports for 146.70.103.84:

This IP address has been reported a total of 52 times from 26 distinct sources. 146.70.103.84 was first reported on May 3rd 2023, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-24 17:00:48 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 146.70.103.84 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 146.70.103.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 13:00:41.583299 2026] [security2:error] [pid 3265:tid 3265] [client 146.70.103.84:60071] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.70.103.84 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "ajwNOe4y_7H3rsiznQTY5gAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-04-15 22:22:03 (2 months ago)	Login brute-force (6/60s), Login brute-force (7/60s)	Brute-Force Web App Attack
Anonymous	2025-10-17 22:46:00 (8 months ago)	child pornography spam	Phishing Email Spam Spoofing
Anonymous	2025-03-05 10:02:14 (1 year ago)	Cluster member 10.170.91.37 (-) said, TEMPDENY 146.70.103.84, Reason:[(zimbra-mta) Failed login from ... show more Cluster member 10.170.91.37 (-) said, TEMPDENY 146.70.103.84, Reason:[(zimbra-mta) Failed login from 146.70.103.84 (GB/United Kingdom/-): 30 in the last 3600 secs]; IP: 146.70.103.84; Ports: *; Direction: 0; Trigger: LF_CLUSTER; Logs: show less	Email Spam Brute-Force
🇩🇪 Hobby Bob	2025-01-13 09:02:53 (1 year ago)	Jan 13 10:02:53 server postfix/smtpd[1176158]: NOQUEUE: reject: RCPT from unknown[146.70.103.84]: 45 ... show more Jan 13 10:02:53 server postfix/smtpd[1176158]: NOQUEUE: reject: RCPT from unknown[146.70.103.84]: 454 4.7.1 : Relay access denied; from= to= proto=ESMTP helo= show less	Email Spam
🇺🇸 bigscoots.com	2024-11-28 14:04:10 (1 year ago)	(PERMBLOCK) 146.70.103.84 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Port ... show more (PERMBLOCK) 146.70.103.84 (NO/Norway/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-11-28 10:27:29 (1 year ago)	(smtpauth) Failed SMTP AUTH login from 146.70.103.84 (NO/Norway/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 146.70.103.84 (NO/Norway/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2024-11-28 05:26:30 dovecot_login authenticator failed for (aO5aCr) [146.70.103.84]:60816: 535 Incorrect authentication data (set_id=emrys) 2024-11-28 05:26:57 dovecot_login authenticator failed for (GAdNGql) [146.70.103.84]:61954: 535 Incorrect authentication data (set_id=emrys) 2024-11-28 05:26:57 dovecot_login authenticator failed for (sWdJM5t) [146.70.103.84]:61215: 535 Incorrect authentication data (set_id=mayntz) 2024-11-28 05:27:23 dovecot_login authenticator failed for (fVG6GXqxoA) [146.70.103.84]:63229: 535 Incorrect authentication data (set_id=info) 2024-11-28 05:27:29 dovecot_login authenticator failed for (Y23XdOmG) [146.70.103.84]:63257: 535 Incorrect authentication data (set_id=emrys) show less	Brute-Force SSH
🇸🇰 GOVCERT	2024-07-06 10:11:33 (1 year ago)	Sweep Scan	Port Scan
🇩🇪 IP Analyzer	2024-07-04 15:30:25 (1 year ago)	Unauthorized connection attempt from IP address 146.70.103.84 on Port 137(NETBIOS)	Port Scan
🇦🇺 crispi	2024-07-02 07:11:49 (1 year ago)	Unauthorized connection attempt detected from IP address 146.70.103.84 to UDP port 137	Port Scan
🇳🇱 Linuxmalwarehuntingnl	2024-06-30 09:52:48 (1 year ago)	Unauthorized connection attempt	Brute-Force
🇦🇺 crispi	2024-05-03 00:25:13 (2 years ago)	Unauthorized connection attempt detected from IP address 146.70.103.84 to UDP port 137	Port Scan
🇩🇪 NxtGenIT	2024-02-04 22:47:04 (2 years ago)	146.70.103.84 has been observed attacking Port 123. Observed Threat: NTP Amplification REQ_MON_GETLI ... show more 146.70.103.84 has been observed attacking Port 123. Observed Threat: NTP Amplification REQ_MON_GETLIST Request Found show less	DDoS Attack
🇮🇷 ModiranHost.com	2023-12-26 02:06:07 (2 years ago)	(smtpauth) Failed SMTP AUTH login from 146.70.103.84 (NO/Norway/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 146.70.103.84 (NO/Norway/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-12-26 05:26:25 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=access) 2023-12-26 05:27:22 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=access) 2023-12-26 05:31:13 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=demo) 2023-12-26 05:32:10 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=demo) 2023-12-26 05:35:58 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=luck) show less	Port Scan
🇮🇷 ModiranHost.com	2023-12-26 01:17:37 (2 years ago)	(smtpauth) Failed SMTP AUTH login from 146.70.103.84 (NO/Norway/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 146.70.103.84 (NO/Norway/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-12-26 04:04:16 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=scan1) 2023-12-26 04:05:15 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=scan1) 2023-12-26 04:42:45 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=testuser) 2023-12-26 04:43:46 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=testuser) 2023-12-26 04:47:32 login authenticator failed for (User) [146.70.103.84]: 535 Incorrect authentication data (set_id=server) show less	Port Scan

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4001:c00::128

🇨🇳 122.51.61.114

🇺🇸 108.78.255.223

🇺🇸 45.146.55.117

🇬🇭 41.242.115.84

🇰🇷 222.110.147.58

🇻🇳 210.245.20.230

🇧🇷 205.210.31.138

🇧🇪 198.235.24.233

🇧🇪 188.44.66.24

🇧🇷 177.7.30.146

🇺🇸 158.94.187.202

🇨🇳 113.77.34.198

🇸🇬 47.84.111.100

🇸🇬 43.159.45.20

🇶🇦 37.186.46.208

🇧🇬 193.24.211.107

🇻🇳 103.186.101.237

🇱🇹 45.227.254.170

🇨🇳 125.104.18.163