JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

146.70.194.40

Activity Trending Down

Abuse confidence score ?

20% Elevated

49 reports

25 reporters · latest 3 weeks ago

ISP	M247 LTD Paris Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇫🇷 France
City	Saint-Denis, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 146.70.194.40

Export CSV

This IP address has been reported a total of 49 times from 25 distinct sources. 146.70.194.40 was first reported on April 19th 2023, and the most recent report was 3 weeks ago. In the last 60 days, the top reporter locations were: Italy with 1 report; Netherlands with 1 report; Poland with 1 report. The most common categories in these recent reports were: Web App Attack 4 times; Brute-Force 2 times; Bad Web Bot 2 times; Hacking 2 times; SSH 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-30 22:01:08 (3 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-29. show less	Web App Attack SSH Hacking
🇵🇱 Budyn	2026-09-29 15:34:47 (3 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.site \| URI: /.env.example \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0. \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 15:11:24 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 146.70.194.40 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 146.70.194.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 11:11:19.268866 2026] [security2:error] [pid 23950:tid 23950] [client 146.70.194.40:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruralcommunitycare.org"] [uri "/.env.example"] [unique_id "arvVF7-lPtolwNUCqo8QEwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-09-29 13:47:30 (3 weeks ago)	146.70.194.40 - - [29/Sep/2026:15:47:29 +0200] "GET /.env HTTP/2.0" 302 319 "-" "Mozilla/5.0 (Linux; ... show more 146.70.194.40 - - [29/Sep/2026:15:47:29 +0200] "GET /.env HTTP/2.0" 302 319 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-03-23 20:17:37 (7 months ago)	Blocked by UFW (TCP on 51413) Source port: 19174 TTL: 51 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 19174 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 146.70.194.40) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 marzzzello	2025-11-18 21:59:55 (11 months ago)	Ports: 105x 36100	Port Scan
🇺🇸 xmission.com	2025-11-05 23:37:24 (11 months ago)	Blocked by UFW (TCP on 23404) Source port: 24511 TTL: 49 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 23404) Source port: 24511 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 146.70.194.40) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-11-05 10:40:24 (11 months ago)	Blocked by UFW (TCP on 23404) Source port: 46464 TTL: 50 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 23404) Source port: 46464 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 146.70.194.40) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2025-10-18 14:28:44 (1 year ago)	Blocked by UFW (TCP on 55068) Source port: 49046 TTL: 50 Packet length: 60 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 55068) Source port: 49046 TTL: 50 Packet length: 60 TOS: 0x00 This report (for 146.70.194.40) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 marzzzello	2025-10-05 20:58:21 (1 year ago)	Ports: 56x 64068	Port Scan
🇩🇪 marzzzello	2025-10-05 20:03:18 (1 year ago)	Ports: 64x 64068	Port Scan
🇩🇪 marzzzello	2025-10-05 19:03:44 (1 year ago)	Ports: 63x 64068	Port Scan
🇩🇪 marzzzello	2025-10-05 16:01:16 (1 year ago)	Ports: 70x 64068	Port Scan
🇩🇪 marzzzello	2025-10-05 15:01:13 (1 year ago)	Ports: 75x 64068	Port Scan
🇩🇪 marzzzello	2025-10-05 13:58:57 (1 year ago)	Ports: 76x 64068	Port Scan

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 136.248.242.166

🇫🇷 85.204.70.102

🇵🇱 85.158.109.147

🇮🇹 79.3.96.178

🇺🇸 69.123.31.0

🇨🇳 60.172.1.210

🇺🇸 54.82.37.16

🇸🇪 45.148.16.195

🇨🇦 206.172.81.10

🇵🇱 194.180.49.121

🇨🇱 179.60.94.57

🇺🇸 173.252.83.25

🇭🇰 123.58.215.196

🇮🇹 95.246.119.34

🇮🇹 95.246.0.230

🇮🇹 95.232.165.182

🇷🇴 94.156.152.42

🇫🇮 80.66.83.80

🇮🇹 79.55.187.160

🇳🇱 62.164.177.27