JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.117.198

146.70.117.198 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	M247 LTD Frankfurt Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.117.198

Whois 146.70.117.198

IP Abuse Reports for 146.70.117.198:

This IP address has been reported a total of 60 times from 43 distinct sources. 146.70.117.198 was first reported on October 3rd 2023, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-06-03 01:06:34 (1 day ago)	(PERMBLOCK) 146.70.117.198 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Po ... show more (PERMBLOCK) 146.70.117.198 (DE/Germany/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇮🇹 Inartis	2026-06-03 00:36:22 (1 day ago)	2026-06-03T02:36:21.244391mail1.inartis.it postfix/smtpd[235594]: warning: unknown[146.70.117.198]: ... show more 2026-06-03T02:36:21.244391mail1.inartis.it postfix/smtpd[235594]: warning: unknown[146.70.117.198]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force
🇫🇮 notelseit	2026-06-03 00:32:11 (1 day ago)	2026-06-03T02:31:56.548877+02:00 mail dovecot: auth-worker(3917320): conn unix:auth-worker (pid=3903 ... show more 2026-06-03T02:31:56.548877+02:00 mail dovecot: auth-worker(3917320): conn unix:auth-worker (pid=3903835,uid=110): auth-worker<7>: sql([email protected],146.70.117.198,<HdQUjk5TKeeSRnXG>): unknown user 2026-06-03T02:31:58.133467+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=146.70.117.198, lip=65.21.131.50, TLS: Connection closed, session=<HdQUjk5TKeeSRnXG> 2026-06-03T02:32:03.492714+02:00 mail dovecot: auth-worker(3917320): conn unix:auth-worker (pid=3903835,uid=110): auth-worker<8>: sql([email protected],146.70.117.198,<465Bjk5TD9WSRnXG>): unknown user 2026-06-03T02:32:05.550536+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=146.70.117.198, lip=65.21.131.50, TLS: Connection closed, session=<465Bjk5TD9WSRnXG> 2026-06-03T02:32:10.889995+02:00 mail dovecot: auth-worker(3917320): ... show less	Brute-Force Email Spam
Anonymous	2026-06-03 00:25:17 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/Hesse/Frankfurt am Main/-/[redacte ... show more (smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/Hesse/Frankfurt am Main/-/[redacted]) show less	Brute-Force
🇺🇸 bigscoots.com	2026-06-03 00:16:01 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-02 19:50:14 dovecot_plain authenticator failed for H=(localhost) [146.70.117.198]:57713: 535 Incorrect authentication data ([email protected]) 2026-06-02 20:15:53 dovecot_plain authenticator failed for H=([10.150.165.179]) [146.70.117.198]:56966: 535 Incorrect authentication data ([email protected]) 2026-06-02 20:15:57 dovecot_plain authenticator failed for H=([10.150.165.179]) [146.70.117.198]:54378: 535 Incorrect authentication data ([email protected]) 2026-06-02 20:15:59 dovecot_login authenticator failed for H=([10.150.165.179]) [146.70.117.198]:56966: 535 Incorrect authentication data ([email protected]) 2026-06-02 20:15:59 dovecot_plain authenticator failed for H=([10.150.165.179]) [146.70.117.198]:64053: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇬🇧 djboddington	2026-06-03 00:07:31 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/postfix-non-smtp-command	Email Spam Exploited Host
🇺🇸 bigscoots.com	2026-06-02 22:57:40 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/-): 5 in the last 3600 secs; Ports ... show more (smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-02 18:57:27 dovecot_plain authenticator failed for H=([10.150.165.179]) [146.70.117.198]:61279: 535 Incorrect authentication data ([email protected]) 2026-06-02 18:57:29 dovecot_login authenticator failed for H=([10.150.165.179]) [146.70.117.198]:61279: 535 Incorrect authentication data ([email protected]) 2026-06-02 18:57:33 dovecot_plain authenticator failed for H=([10.150.165.179]) [146.70.117.198]:51715: 535 Incorrect authentication data ([email protected]) 2026-06-02 18:57:35 dovecot_login authenticator failed for H=([10.150.165.179]) [146.70.117.198]:51715: 535 Incorrect authentication data ([email protected]) 2026-06-02 18:57:39 dovecot_plain authenticator failed for H=([10.150.165.179]) [146.70.117.198]:53816: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇫🇮 notelseit	2026-06-02 20:13:58 (1 day ago)	2026-06-02T22:13:57.302493+02:00 mail postfix/smtps/smtpd[3891386]: lost connection after CONNECT fr ... show more 2026-06-02T22:13:57.302493+02:00 mail postfix/smtps/smtpd[3891386]: lost connection after CONNECT from unknown[146.70.117.198] 2026-06-02T22:13:57.305795+02:00 mail postfix/smtps/smtpd[3891291]: lost connection after CONNECT from unknown[146.70.117.198] 2026-06-02T22:13:57.509897+02:00 mail postfix/submission/smtpd[3891387]: lost connection after CONNECT from unknown[146.70.117.198] ... show less	Brute-Force Email Spam
Anonymous	2026-06-02 17:25:56 (1 day ago)	(smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/-)	Brute-Force
🇫🇮 notelseit	2026-05-30 21:34:30 (4 days ago)	2026-05-30T23:34:17.942808+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth ... show more 2026-05-30T23:34:17.942808+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=146.70.117.198, lip=65.21.131.50, TLS handshaking: Connection closed, session=<D0pBuQ9TqNaSRnXG> 2026-05-30T23:34:17.954126+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=146.70.117.198, lip=65.21.131.50, TLS handshaking: Connection closed, session=<83ZBuQ9TvtOSRnXG> 2026-05-30T23:34:17.954422+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=146.70.117.198, lip=65.21.131.50, session=</XdBuQ9T7/uSRnXG> 2026-05-30T23:34:17.954950+02:00 mail dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=146.70.117.198, lip=65.21.131.50, session=<SHpBuQ9TutOSRnXG> 2026-05-30T23:34:29.280000+02:00 mail dovecot: auth-worker(3392608): conn unix:auth-worker (pid=3364959,uid=110): auth-worker<4>: sql(o.cominfo@note ... show less	Brute-Force Email Spam
🇯🇵 Kinsei Engineering Inc.	2026-05-30 17:12:14 (4 days ago)	UFW:High-frequency access to unused ports	Port Scan
🇸🇪 triplecode	2026-05-29 08:20:32 (6 days ago)	Reported from hMailServer	Hacking
🇨🇦 Mediashaker	2026-05-29 08:02:59 (6 days ago)	(smtpauth) Failed SMTP AUTH login from 146.70.117.198 (DE/Germany/-)	Brute-Force
🇬🇧 djboddington	2026-05-29 01:16:36 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/postfix-spam	Email Spam
🇷🇺 Agrohim	2026-01-16 12:07:13 (4 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force

Showing 16 to 30 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 157.10.26.24

🇮🇳 152.59.83.156

🇺🇸 142.93.78.109

🇮🇩 103.147.159.91

🇷🇴 92.118.39.236

🇮🇷 89.144.134.189

🇩🇪 69.5.169.33

🇨🇳 58.49.26.202

🇲🇦 45.216.82.196

🇳🇱 45.140.222.119

🇦🇺 34.40.193.143

🇩🇪 2400:cb00:696:1000:4287:5164:845f:8f83

🇳🇱 185.242.226.108

🇵🇰 153.117.32.166

🇮🇳 152.59.40.16

🇧🇷 138.117.220.182

🇮🇹 130.25.91.44

🇳🇵 124.41.228.116

🇮🇳 122.161.242.92

🇨🇳 119.127.127.203