JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

146.70.18.94

Neutral Activity

Abuse confidence score ?

0% Low Risk

130 reports

46 reporters · latest 2 years ago

ISP	M247 LTD Paris Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇫🇷 France
City	Saint-Denis, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

146.70.18.94 has been reported 130 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 146.70.18.94

Export CSV

This IP address has been reported a total of 130 times from 46 distinct sources. 146.70.18.94 was first reported on June 24th 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-06-20 05:07:27 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 corthorn	2024-06-19 05:37:28 (2 years ago)	146.70.18.94 - - [19/Jun/2024:07:37:26 +0200] "POST /wp-login.php HTTP/1.1" 200 3025 "https://www.re ... show more 146.70.18.94 - - [19/Jun/2024:07:37:26 +0200] "POST /wp-login.php HTTP/1.1" 200 3025 "https://www.revolver.agency/wp-login.php" "Opera/9.80 (Windows NT 6.1) Presto/2.12.388 Version/12.12" ... show less	Brute-Force
Anonymous	2024-06-19 03:52:31 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 BestFans.com	2024-04-10 16:35:35 (2 years ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇦🇺 MAGIC	2024-03-30 13:08:01 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-03-25 12:16:37 (2 years ago)	Common attack or app scan event detected and blocked	Port Scan Hacking Web App Attack
🇺🇦 URAN Publishing Service	2024-03-24 15:33:56 (2 years ago)	146.70.18.94 - - [24/Mar/2024:17:33:50 +0200] "GET /wp-includes/IXR/admin.php HTTP/1.1" 404 275 "-" ... show more 146.70.18.94 - - [24/Mar/2024:17:33:50 +0200] "GET /wp-includes/IXR/admin.php HTTP/1.1" 404 275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 146.70.18.94 - - [24/Mar/2024:17:33:51 +0200] "GET /wp-content/install.php HTTP/1.1" 404 275 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2024-03-24 06:46:42 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 24 02:46:35.111827 2024] [security2:error] [pid 31907] [client 146.70.18.94:39674] [client 146.70.18.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drivingthrumud.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zf_MS2Ms13JE9WGlRL04pQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-24 03:14:25 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 23 23:14:21.522076 2024] [security2:error] [pid 17051] [client 146.70.18.94:48714] [client 146.70.18.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twixmixy.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zf-ajZw0mpIZdD57IDN0ewAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-03-24 00:35:15 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇲🇾 Rizzy	2024-03-23 10:27:10 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-03-23 03:33:14 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 22 23:33:08.728895 2024] [security2:error] [pid 1028777] [client 146.70.18.94:38230] [client 146.70.18.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schuurman-aero.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zf5NdA6HqfMn9YBWIaPH1QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-23 01:20:28 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 22 21:20:21.234093 2024] [security2:error] [pid 23008] [client 146.70.18.94:51994] [client 146.70.18.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mirakdesigns.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zf4uVRRktN_pYtKf-G2z-wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-03-22 14:38:32 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 146.70.18.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 22 10:38:26.936427 2024] [security2:error] [pid 2436] [client 146.70.18.94:37324] [client 146.70.18.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pandahh.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zf2X4tOuyykW0fmAePNYywAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 syokadmin	2024-03-22 13:56:23 (2 years ago)	(mod_security) mod_security (id:77350296) triggered by 146.70.18.94 (FR/France/-): 1 in the last 360 ... show more (mod_security) mod_security (id:77350296) triggered by 146.70.18.94 (FR/France/-): 1 in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 130 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 49.0.24.107

🇺🇸 35.145.171.97

🇸🇬 2a12:f541:8f82:fd57:7b90:bbd9:cd69:15e9

🇮🇸 185.146.234.178

🇨🇳 120.82.207.242

🇧🇬 79.124.56.178

🇺🇸 66.132.195.109

🇺🇸 45.206.115.56

🇫🇷 45.80.27.169

🇨🇳 36.33.167.165

🇮🇳 4.240.100.218

🇰🇿 2.132.75.188

🇬🇧 195.140.214.26

🇧🇷 177.16.198.108

🇵🇰 175.107.216.120

🇨🇴 167.0.105.43

🇨🇦 140.238.153.39

🇵🇱 87.251.64.131

🇸🇳 41.214.10.178

🇺🇦 37.221.153.212