JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

146.70.117.53

Recent Activity

Abuse Confidence Score

75% Critical

29 reports

23 reporters · latest 1 day ago

ISP: M247 LTD Frankfurt Infrastructure
Usage Type: Data Center/Web Hosting/Transit
ASN: AS9009
Domain Name: m247.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

29 from 23 distinct reporters

First reported

December 8th 2023

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 10 🇩🇪 Germany 2 🇫🇷 France 2

Most common categories Web App Attack 13 Bad Web Bot 6 Brute-Force 5 SSH 2 Hacking 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-09 20:09:31 UTC · (1 day ago)	2026-11-09T15:08:46.197529 SPARTAN sshd[15842]: Invalid user alpine from 146.70.117.53 port 54960 2026-11-09T15:08:46.364960 SPARTAN sshd[15842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.117.53 20 ... show more 2026-11-09T15:08:46.197529 SPARTAN sshd[15842]: Invalid user alpine from 146.70.117.53 port 54960 2026-11-09T15:08:46.364960 SPARTAN sshd[15842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.117.53 2026-11-09T15:08:48.089497 SPARTAN sshd[15842]: Failed password for invalid user alpine from 146.70.117.53 port 54960 ssh2 2026-11-09T15:08:52.130039 SPARTAN sshd[15857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.70.117.53 user=root 2026-11-09T15:08:54.346126 SPARTAN sshd[15857]: Failed password for root from 146.70.117.53 port 42570 ssh2 ... show less	Brute-Force SSH
🇺🇸 francelink.fr	2026-11-04 01:16:28 UTC · (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T18:00:33.000Z.	Web App Attack
🇺🇸 Charlesiv	2026-11-03 07:02:30 UTC · (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-11-03T05:02:45Z Ray ID: a548d4215eea9f11 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/53 ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-11-03T05:02:45Z Ray ID: a548d4215eea9f11 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 francelink.fr	2026-11-03 00:54:30 UTC · (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-02T20:44:17.000Z.	Web App Attack
🇫🇷 SpaceHost-Server	2026-11-02 23:15:24 UTC · (1 week ago)		Brute-Force Web App Attack
🇺🇸 francelink.fr	2026-11-02 05:34:24 UTC · (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-02T05:32:04.000Z.	Web App Attack
🇺🇸 Charlesiv	2026-11-02 01:16:25 UTC · (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-11-02T01:15:17Z Ray ID: a53f49887a8de868 UA: Mozilla/5.0 (Debian; Linux i686) AppleWebKit/5 ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-11-02T01:15:17Z Ray ID: a53f49887a8de868 UA: Mozilla/5.0 (Debian; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-11-02 00:01:45 UTC · (1 week ago)	Fail2Ban triggered	Web App Attack
🇫🇮 as211431.net	2026-11-01 21:49:53 UTC · (1 week ago)	Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0 This report was generated by: https://github ... show more Triggered Cloudflare WAF (linkMaze) from DE. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:86.0) Gecko/20100101 Firefox/86.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 Comberton	2026-11-01 18:40:18 UTC · (1 week ago)	Ban via F2B web files probes	Brute-Force Web App Attack
🇺🇸 Gabriel Camargo	2026-11-01 17:30:06 UTC · (1 week ago)	146.70.117.53 - - [01/Nov/2026:12:29:46 -0500] "GET / HTTP/1.1" 301 178 "http://mediet.isismaweb.com" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 146.70.117.53 - - [01/Nov/2026:12:29:55 - ... show more 146.70.117.53 - - [01/Nov/2026:12:29:46 -0500] "GET / HTTP/1.1" 301 178 "http://mediet.isismaweb.com" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 146.70.117.53 - - [01/Nov/2026:12:29:55 -0500] "GET / HTTP/1.1" 301 178 "http://mediet.isismaweb.com" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 146.70.117.53 - - [01/Nov/2026:12:30:05 -0500] "GET / HTTP/1.1" 301 178 "http://mediet.isismaweb.com" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇩🇪 4server	2026-11-01 09:08:32 UTC · (1 week ago)	[SunNov0110:08:29.6757552026][security2:error][pid2290622:tid2290719][client146.70.117.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ... show more [SunNov0110:08:29.6757552026][security2:error][pid2290622:tid2290719][client146.70.117.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gpwealth.ch\"][uri\"/favicon.ico\"][unique_id\"aucBjbLDpGZYi7cstSKp8QAAAJY\"]\,referer:https://gpwealth.ch show less	Port Scan Brute-Force Web App Attack
🇨🇭 backslash	2026-11-01 05:48:00 UTC · (1 week ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 francelink.fr	2026-11-01 00:16:30 UTC · (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-31T12:29:12.000Z.	Web App Attack
🇺🇸 francelink.fr	2026-10-31 12:29:26 UTC · (1 week ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-31T12:28:27.000Z.	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.167.233.49

🇸🇪 217.208.90.253

🇳🇱 193.176.31.158

🇱🇹 77.90.185.239

🇹🇼 198.235.24.123

🇨🇳 182.43.235.218

🇨🇳 111.225.214.218

🇳🇱 81.171.72.135

🇨🇳 14.103.25.86

🇨🇿 185.32.183.57

🇺🇦 176.98.89.226

🇺🇸 173.255.223.103

🇮🇳 159.89.167.103

🇵🇱 46.149.216.221

🇵🇱 172.69.155.58

🇳🇱 170.168.30.175

🇨🇳 111.22.218.96

🇷🇴 80.94.92.55

🇺🇸 66.132.159.65

🇺🇸 35.192.178.139