JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.170.4

146.70.170.4 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 43%: ?

43%

ISP	M247 LTD Oslo Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇳🇴 Norway
City	Oslo, Oslo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.170.4

Whois 146.70.170.4

IP Abuse Reports for 146.70.170.4:

This IP address has been reported a total of 51 times from 23 distinct sources. 146.70.170.4 was first reported on April 24th 2023, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 DamonOne	2026-10-27 01:16:56 (3 hours ago)	Blocked by OPNsense; 6 hits, proto=tcp, ports=31982	Port Scan Hacking
🇷🇴 DamonOne	2026-10-25 00:15:43 (2 days ago)	Blocked by OPNsense; 6 hits, proto=tcp, ports=56696	Port Scan Hacking
🇩🇪 big-cloud.nl	2026-10-24 19:07:27 (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 John Chrys.	2026-10-18 22:54:47 (1 week ago)	146.70.170.4 - - [19/Oct/2026:01:54:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 5175 "-" "Mozilla/5.0 ... show more 146.70.170.4 - - [19/Oct/2026:01:54:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [19/Oct/2026:01:54:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [19/Oct/2026:01:54:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [19/Oct/2026:01:54:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [19/Oct/2026:01:54:46 +0300] "POST /xmlrpc.php HTTP/1.1" 403 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537 ... show less	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-10-12 15:21:17 (2 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-10-12 15:17:13 (2 weeks ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-12 15:16:17 (2 weeks ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇮🇹 VHosting	2026-10-05 19:00:06 (3 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-10-01 21:37:22 (3 weeks ago)	146.70.170.4 - - [01/Oct/2026:17:37:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 ... show more 146.70.170.4 - - [01/Oct/2026:17:37:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [01/Oct/2026:17:37:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [01/Oct/2026:17:37:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [01/Oct/2026:17:37:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 146.70.170.4 - - [01/Oct/2026:17:37:15 -0400] "POST /xmlrpc.php HTTP/1.1" 200 5139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537 ... show less	Web App Attack
🇺🇸 xmission.com	2026-08-19 21:35:38 (2 months ago)	Blocked by UFW (TCP on 50570) Source port: 42250 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50570) Source port: 42250 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 146.70.170.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 David Koswari	2026-07-06 05:26:00 (3 months ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
Anonymous	2026-07-05 20:01:51 (3 months ago)	IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 ( ... show more IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907) MV:jcesqstq56r.xml.php show less	Hacking
Anonymous	2026-07-05 17:40:09 (3 months ago)	IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 ( ... show more IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907) MV:jcemiksxe8d.xml.php show less	Hacking
Anonymous	2026-07-05 16:47:12 (3 months ago)	IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.9 ... show more IM360 WAF: Unauthenticated front-end JCE editor-profile import in Joomla Content Editor before 2.9.99.5 (CVE-2026-48907) MV:/index.php show less	Web App Attack
Anonymous	2026-07-05 16:47:09 (3 months ago)	IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 ( ... show more IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907) MV:jcevmgygcai.xml.php show less	Hacking

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 218.146.250.174

🇳🇱 204.76.203.4

🇺🇸 156.232.13.246

🇩🇪 109.160.32.178

🇸🇬 43.133.60.94

🇺🇸 2604:a880:800:14::5633:c000

🇨🇴 206.62.142.239

🇺🇸 185.226.198.46

🇩🇪 141.76.94.44

🇺🇸 99.129.196.179

🇹🇼 35.221.230.89

🇷🇴 2.57.122.76

🇬🇧 2a06:4883:1000::8

🇳🇱 200.138.46.128

🇳🇴 185.12.59.118

🇪🇸 185.4.35.93

🇨🇳 175.30.205.161

🇩🇪 167.94.146.41

🇺🇸 50.47.113.196

🇮🇷 46.245.66.243