JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.188.199

146.70.188.199 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 100%: ?

100%

ISP	M247 LTD Sofia Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇧🇬 Bulgaria
City	Sofia, Sofia-Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.188.199

Whois 146.70.188.199

IP Abuse Reports for 146.70.188.199:

This IP address has been reported a total of 59 times from 32 distinct sources. 146.70.188.199 was first reported on January 24th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-25 20:38:13 (1 week ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇭🇺 kranem	2026-05-25 18:00:08 (1 week ago)	Triggered Cloudflare WAF from BG. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 ... show more Triggered Cloudflare WAF from BG. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config Timestamp: 2026-05-25T17:32:16Z User-Agent: Mozilla/5.0 (compatible; Scanner/1.0) show less	Bad Web Bot
🇳🇱 informedclearly.com	2026-05-25 17:09:09 (1 week ago)	WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.git/config? ua=Mozilla/5.0 (compatible; Scanner ... show more WAF_BAN reason=ENV_PROBE rule=ENV_PATH hits=1 path=/.git/config? ua=Mozilla/5.0 (compatible; Scanner/1.0) show less	Hacking
🇩🇪 london2038.com	2026-05-25 16:52:23 (1 week ago)	Probing for exploits 146.70.188.199 - - [25/May/2026:18:52:20 +0200] "GET /.git/config HTTP/1.1" 422 ... show more Probing for exploits 146.70.188.199 - - [25/May/2026:18:52:20 +0200] "GET /.git/config HTTP/1.1" 422 0 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" 146.70.188.199 - - [25/May/2026:18:52:19 +0200] "GET /.git/config HTTP/1.1" 422 0 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" show less	Hacking Web App Attack
🇩🇪 Oakley	2026-05-25 15:18:27 (1 week ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇬🇧 SilverZippo	2026-05-25 15:05:50 (1 week ago)	Web App Attack	Web App Attack
🇮🇪 AutosOnShow	2026-05-25 14:45:06 (1 week ago)	blocked for webapp attack \| path requested: /.git/config \| seen at 2026-05-25 14:44:27.289 \|	Web App Attack
🇦🇺 2000cn.com.au	2026-05-25 14:43:04 (1 week ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇫🇮 as211431.net	2026-05-25 14:31:38 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from BG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from BG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/5.0 (compatible; Scanner/1.0) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-05-25 14:20:11 (1 week ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-05-24 15:24:15 (1 week ago)	[SunMay2417:24:12.0192502026][security2:error][pid2729675:tid2729794][client146.70.188.199:0]ModSecu ... show more [SunMay2417:24:12.0192502026][security2:error][pid2729675:tid2729794][client146.70.188.199:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.restaurantgandria.ch\"][uri\"/.git/config\"][unique_id\"ahMYHCGE14MfZOhhw-kJrwAAANU\"] show less	Port Scan Brute-Force Web App Attack
🇮🇩 Burayot	2026-05-24 13:09:49 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 146.70.188.199 (BG/Bulgaria/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 146.70.188.199 (BG/Bulgaria/-): 2 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-24 08:59:18 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 146.70.188.199 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 146.70.188.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 04:59:14.996375 2026] [security2:error] [pid 27480:tid 27480] [client 146.70.188.199:62593] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nancyscafeandcatering.com"] [uri "/.git/config"] [unique_id "ahK94mQCzUnoJaI7G6sNUwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-24 08:54:03 (1 week ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇬🇧 myintarweb	2026-05-24 08:44:14 (1 week ago)	146.70.188.199 - - [24/May/2026:09:44:13 +0100] 80 "GET /.git/config HTTP/1.1" 410 1527 "-" "Mozilla ... show more 146.70.188.199 - - [24/May/2026:09:44:13 +0100] 80 "GET /.git/config HTTP/1.1" 410 1527 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" ... show less	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.194.172.68

🇺🇸 162.216.150.36

🇫🇮 147.185.133.95

🇧🇷 104.28.163.4

🇧🇬 78.128.112.6

🇵🇭 49.148.242.75

🇺🇸 34.227.58.132

🇺🇸 205.210.31.24

🇩🇪 194.88.98.84

🇳🇱 188.166.19.157

🇺🇸 166.62.41.190

🇨🇦 143.110.217.227

🇮🇳 117.247.23.131

🇺🇸 109.204.52.72

🇩🇪 69.5.169.84

🇩🇪 69.5.169.47

🇩🇪 69.5.169.3

🇺🇸 64.62.156.108

🇸🇬 47.237.201.74

🇳🇱 45.148.10.152