JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.207.204

146.70.207.204

Neutral Activity

19 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

M247 LTD Stockholm Infrastructure

Usage Type

Data Center/Web Hosting/Transit

ASN

AS9009

Domain Name

m247.com

Country

🇸🇪 Sweden

City

Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

146.70.207.204 has been reported 19 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 146.70.207.204:

This IP address has been reported a total of 19 times from 11 distinct sources. 146.70.207.204 was first reported on May 25th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 FireballDWF	2024-07-22 03:25:06 (2 years ago)	404 NOT FOUND	Web App Attack
🇮🇹 Ghibli	2024-07-18 07:24:00 (2 years ago)	[Wed Jul 17 20:06:15 2024] [error] [client 146.70.207.204] ModSecurity: Warning. Matched phrase "nma ... show more [Wed Jul 17 20:06:15 2024] [error] [client 146.70.207.204] ModSecurity: Warning. Matched phrase "nmap scripting engine" at REQUEST_HEADERS:User-Agent. [file "/etc/httpd/conf/modsecurity.d/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "59"] [id "913100"] [rev "2"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: nmap scripting engine found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "OWASP_CRS/AUTOMATION/SECURITY_SCANNER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "xxxxxxxxxxxxxxx"] [uri "/evox/about"] [unique_id "ZpgIFwqfQ3UAADTKy3IAAAAE"] show less	Port Scan Hacking Web App Attack
🇺🇸 FireballDWF	2024-07-14 21:45:11 (2 years ago)	404 NOT FOUND	Web App Attack
🇩🇪 kreativstrecke	2024-07-14 12:44:45 (2 years ago)	Jul 14 14:44:38 srv02 postfix/submission/smtpd[272026]: lost connection after CONNECT from unknown[1 ... show more Jul 14 14:44:38 srv02 postfix/submission/smtpd[272026]: lost connection after CONNECT from unknown[146.70.207.204] Jul 14 14:44:44 srv02 postfix/smtps/smtpd[272025]: lost connection after CONNECT from unknown[146.70.207.204] Jul 14 14:44:45 srv02 postfix/smtps/smtpd[272025]: lost connection after CONNECT from unknown[146.70.207.204] ... show less	Brute-Force
🇷🇸 Scan	2024-07-14 01:26:14 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 kreativstrecke	2024-07-09 15:18:41 (2 years ago)	Jul 9 17:18:34 srv02 postfix/submission/smtpd[2191475]: lost connection after CONNECT from unknown[ ... show more Jul 9 17:18:34 srv02 postfix/submission/smtpd[2191475]: lost connection after CONNECT from unknown[146.70.207.204] Jul 9 17:18:40 srv02 postfix/smtps/smtpd[2191478]: lost connection after CONNECT from unknown[146.70.207.204] Jul 9 17:18:41 srv02 postfix/smtps/smtpd[2191478]: lost connection after CONNECT from unknown[146.70.207.204] ... show less	Brute-Force
🇺🇸 snappic	2024-07-04 06:01:50 (2 years ago)	Malicious Behaviour/Probing for vulnerabilities/Brute force attempts [POST /sdk] [Mozilla/5.0 (compa ... show more Malicious Behaviour/Probing for vulnerabilities/Brute force attempts [POST /sdk] [Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)] (WAF Rule Name Within Group: malicious-behavior#MaliciousUserAgentString) show less	Bad Web Bot Web App Attack
🇩🇪 ps-center	2024-06-29 07:08:45 (2 years ago)	RDM-W: TCP-Scanner. Port: 23	Port Scan
🇩🇪 kreativstrecke	2024-06-26 09:12:17 (2 years ago)	Jun 26 11:12:08 srv02 postfix/smtps/smtpd[125397]: lost connection after CONNECT from unknown[146.70 ... show more Jun 26 11:12:08 srv02 postfix/smtps/smtpd[125397]: lost connection after CONNECT from unknown[146.70.207.204] Jun 26 11:12:10 srv02 postfix/submission/smtpd[125391]: lost connection after CONNECT from unknown[146.70.207.204] Jun 26 11:12:16 srv02 postfix/smtps/smtpd[125397]: lost connection after CONNECT from unknown[146.70.207.204] ... show less	Brute-Force
🇩🇪 kreativstrecke	2024-06-23 04:03:56 (2 years ago)	Jun 23 06:03:48 srv02 postfix/submission/smtpd[2818571]: lost connection after CONNECT from unknown[ ... show more Jun 23 06:03:48 srv02 postfix/submission/smtpd[2818571]: lost connection after CONNECT from unknown[146.70.207.204] Jun 23 06:03:54 srv02 postfix/smtps/smtpd[2818583]: lost connection after CONNECT from unknown[146.70.207.204] Jun 23 06:03:55 srv02 postfix/smtps/smtpd[2818583]: lost connection after CONNECT from unknown[146.70.207.204] ... show less	Brute-Force
🇺🇸 MPL	2024-06-10 18:20:36 (2 years ago)	tcp port scan (52 or more attempts)	Port Scan
Anonymous	2024-06-07 06:18:04 (2 years ago)	Ports: *; Direction: 0; Trigger: CT_LIMIT	Brute-Force SSH
🇷🇸 Scan	2024-06-06 13:55:03 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 TPI-Abuse	2024-06-04 03:17:16 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 146.70.207.204 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 146.70.207.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 03 23:17:09.739610 2024] [security2:error] [pid 13125:tid 47556815492864] [client 146.70.207.204:34781] [client 146.70.207.204] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|featherston.ws\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "featherston.ws"] [uri "/wp-json/wp/v2/users/"] [unique_id "Zl6HNcYuCVJEty18ocwR5AAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2024-06-03 01:11:15 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 18.217.208.51

🇨🇦 209.127.15.47

🇺🇬 196.0.242.54

🇸🇪 193.189.100.204

🇮🇳 182.72.102.106

🇺🇸 172.180.64.85

🇺🇸 147.185.132.225

🇺🇸 146.70.127.252

🇺🇸 66.132.195.99

🇨🇳 218.74.227.66

🇨🇦 209.127.78.190

🇨🇦 209.127.15.45

🇺🇸 192.198.115.238

🇺🇸 192.186.150.68

🇺🇸 162.216.150.247

🇺🇸 162.216.149.25

🇺🇸 147.185.132.25

🇸🇪 85.24.246.216

🇺🇸 76.19.230.28

🇺🇸 66.212.23.191