JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.122.66

146.70.122.66 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	M247 LTD Stockholm Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.122.66

Whois 146.70.122.66

IP Abuse Reports for 146.70.122.66:

This IP address has been reported a total of 19 times from 18 distinct sources. 146.70.122.66 was first reported on May 23rd 2023, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 zam	2026-02-02 13:25:30 (4 months ago)	146.70.122.66 - - [02/Feb/2026:13:25:28 +0000] "POST //xmlrpc.php HTTP/1.1" 403 199	Web App Attack
🇮🇩 Burayot	2026-02-01 10:07:44 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 146.70.122.66 (SE/Sweden/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 146.70.122.66 (SE/Sweden/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-02-01 09:27:48 (4 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇳🇱 RvdH	2025-11-21 07:36:20 (6 months ago)	Ignores robots.txt and noindex, nofollow meta/header directives (Honeypot). UserAgent: Mozilla/5.0 ... show more Ignores robots.txt and noindex, nofollow meta/header directives (Honeypot). UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0 show less	Bad Web Bot
🇫🇷 geot	2025-10-23 12:39:26 (7 months ago)	GET /haproxy?stats HTTP/1.1 GET /haproxy-status HTTP/1.1	Web App Attack
🇫🇷 LRob.fr	2025-10-23 00:01:56 (7 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇨🇭 backslash	2025-10-22 23:25:17 (7 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇳🇱 taivas.nl	2025-10-22 23:00:09 (7 months ago)	General_bad_requests	Bad Web Bot
Anonymous	2025-10-22 18:32:44 (7 months ago)	Aggressive web scan	Web App Attack
🇪🇸 el-brujo	2025-10-22 17:54:18 (7 months ago)	22/Oct/2025:19:54:18.425897 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 22/Oct/2025:19:54:18.425897 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 146.70.122.66] ModSecurity: Warning. Matched phrase "wp-config.php" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: wp-config.php found within REQUEST_FILENAME: /blog/wp-config.php.save"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "tails.elhacker.net"] [uri "/blog/wp-config.php.save"] [unique_id "aPkaSifwBMHAXqLb5LzzbwAAAtE"] ... show less	Hacking Web App Attack
🇵🇱 sefinek.net	2025-10-22 17:48:17 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SE. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /backups/wp-config.php.save UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:127.0) Gecko/20100101 Firefox/127.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 Mangelot Hosting	2025-10-22 17:43:30 (7 months ago)	(php_susp_dir) srv201 PHP in suspicious dir 146.70.122.66 (SE/Sweden/-): 1 in the last 3600 secs; Po ... show more (php_susp_dir) srv201 PHP in suspicious dir 146.70.122.66 (SE/Sweden/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 kosada.com	2025-10-22 17:07:09 (7 months ago)	Web vulnerability probing: /docker-compose.prod.yml	Web App Attack
🇩🇪 FeG Deutschland	2025-10-22 16:32:54 (7 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 24	Exploited Host Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-09-19 11:47:04 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:fa59:10:e7f::1

🇮🇩 202.152.204.159

🇧🇷 177.11.196.84

🇨🇳 121.196.232.102

🇨🇦 85.217.149.7

🇳🇱 45.148.10.121

🇸🇬 45.78.198.199

🇺🇸 20.168.0.47

🇺🇸 20.85.246.45

🇸🇪 193.138.218.214

🇸🇬 193.37.32.175

🇹🇷 185.221.64.22

🇭🇰 156.225.29.180

🇺🇸 152.32.233.2

🇨🇳 118.196.86.3

🇨🇳 112.86.225.153

🇪🇸 82.223.120.80

🇨🇦 85.217.149.18

🇨🇳 47.95.255.24

🇺🇸 45.55.158.168