146.70.166.145
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- M247 LTD New York Infrastructure
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS9009
- Domain Name
- m247.com
- Country
- 🇺🇸 United States of America
- City
- New York City, New York
Abuse Reports
Total reports
147 from
27 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 jcochrane |
Blocked VPN configuration probing. Suspected automated requests.
|
Web App Attack | |
| 🇺🇸 jcochrane |
Blocked VPN configuration probing. Suspected automated requests.
|
Web App Attack | |
| 🇪🇸 librebit |
RDWeb scan
|
Web App Attack | |
| 🇩🇪 CELOS-SOC |
Multiple Unauthorized VPN Login Attempts
|
Hacking Brute-Force | |
| 🇩🇪 CELOS-SOC |
Multiple Unauthorized VPN Login Attempts
|
Hacking Brute-Force | |
| 🇦🇺 actrix |
Sophos XGS VPN portal credential stuffing: 34 failed authentication attempts across 15 distinct usernames over 7 separate days since 2026-10-25. Low-and-slow distributed attack.
|
Brute-Force Web App Attack | |
| 🇩🇪 CELOS-SOC |
Multiple Unauthorized VPN Login Attempts
|
Hacking Brute-Force | |
| 🇩🇪 CELOS-SOC |
Multiple Unauthorized VPN Login Attempts
|
Hacking Brute-Force | |
| 🇩🇪 BULLSEYE |
Automated detection from Windows Firewall. Observed patterns: Top: TCP/3389=23 (possible RDP brute-force/scan attempt). Traffic characteristics strongly indicate automated scanning activity.
|
Port Scan Hacking | |
| 🇩🇪 BULLSEYE |
|
Brute-Force | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/global-exclusion-high.
|
Hacking | |
| 🇩🇪 CELOS-SOC |
Multiple Unauthorized VPN Login Attempts
|
Hacking Brute-Force | |
| 🇩🇪 CELOS-SOC |
Multiple Unauthorized VPN Login Attempts
|
Hacking Brute-Force | |
| 🇪🇸 Mugen |
Unauthorized VPN login attempts
|
Brute-Force | |
| 🇦🇺 actrix |
Sophos XGS VPN portal credential stuffing: 15 failed authentication attempts across 7 distinct usernames since 2026-10-21. Automated distributed attack.
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown