JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.221.140

146.70.221.140 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 50%: ?

50%

ISP	M247 Ltd Belgrade
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇷🇸 Serbia
City	Belgrade, Central Serbia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.221.140

Whois 146.70.221.140

IP Abuse Reports for 146.70.221.140:

This IP address has been reported a total of 41 times from 28 distinct sources. 146.70.221.140 was first reported on October 22nd 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-29 11:42:57 (1 hour ago)	[WedJul2913:42:55.7446762026][security2:error][pid1508544:tid1508560][client146.70.221.140:0]ModSecu ... show more [WedJul2913:42:55.7446762026][security2:error][pid1508544:tid1508560][client146.70.221.140:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"chesasilva.ch\"][uri\"/xmlrpc.php\"][unique_id\"amnnP2PUh0AZQJ4--4CJKwAAAAU\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-07-29 11:11:39 (2 hours ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-28 10:49:12 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 146.70.221.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 146.70.221.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 06:49:05.922913 2026] [security2:error] [pid 404415:tid 404502] [client 146.70.221.140:38224] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|teritemme.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "teritemme.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amiJIQ4D9xCQppa9GGlr4wAAAg8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-07-16 15:48:18 (1 week ago)	Blocked by UFW (TCP on 56574) Source port: 52600 TTL: 41 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 56574) Source port: 52600 TTL: 41 Packet length: 60 TOS: 0x08 This report (for 146.70.221.140) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 maxpower	2026-07-12 19:26:40 (2 weeks ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 146.70.221.140 (RS/Serbia/-): 1 in the last 36 ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 146.70.221.140 (RS/Serbia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 146.70.221.140 - - [12/Jul/2026:21:26:39 +0200] "POST /xmlrpc.php HTTP/1.1" 404 144961 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/92.0.0.0 Safari/537.36" "-" host=analisibioenergetica.com show less	Port Scan
🇺🇸 ambor	2026-07-07 19:32:31 (3 weeks ago)	Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: ... show more Honeypot triggered on tcpdata.com - Attempted to access /xmlrpc.php (wordpress_xmlrpc). User-Agent: Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/93.0.0.0 Safari/537.36 show less	Web App Attack
🇺🇸 interbiznw.com	2026-07-01 20:30:39 (3 weeks ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 14:01:28 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 146.70.221.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 146.70.221.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 10:01:24.078877 2026] [security2:error] [pid 17460:tid 17460] [client 146.70.221.140:20067] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|persnicketyinc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "persnicketyinc.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akUdtGbhNiEq97fH-HbjLwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 pengpeng	2026-07-01 08:14:00 (4 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 12360 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 12360 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-06-29 22:27:03 (4 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 12360 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 12360 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Site.eu	2026-06-08 23:21:33 (1 month ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-08 12:58:24 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 146.70.221.140 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 146.70.221.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 08:58:21.026377 2026] [security2:error] [pid 13698:tid 13698] [client 146.70.221.140:54311] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|georgegourmet.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "georgegourmet.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aia8bWsaWlzKWf6axZ4wUQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-08 10:54:07 (1 month ago)	[MonJun0812:54:04.3359582026][security2:error][pid1094629:tid1094719][client146.70.221.140:0]ModSecu ... show more [MonJun0812:54:04.3359582026][security2:error][pid1094629:tid1094719][client146.70.221.140:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"domoticaswiss.ch\"][uri\"/xmlrpc.php\"][unique_id\"aiafTGehTnKg27688uWYggAAAEY\"] show less	Port Scan Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-06-07 04:15:30 (1 month ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇮🇹 Inartis	2026-06-04 19:52:47 (1 month ago)	146.70.221.140 - - [04/Jun/2026:21:52:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5229 "-" "Mozilla/5. ... show more 146.70.221.140 - - [04/Jun/2026:21:52:46 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5229 "-" "Mozilla/5.0 (Windows NT 10.0; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/13.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 151.252.24.130

🇩🇪 213.209.159.108

🇹🇭 203.154.158.195

🇸🇪 192.71.30.8

🇳🇱 185.136.15.12

🇺🇸 167.99.227.136

🇮🇩 163.7.6.41

🇰🇷 128.134.139.49

🇫🇮 104.28.157.61

🇮🇳 103.224.34.105

🇧🇩 103.163.116.219

🇵🇱 57.128.225.99

🇳🇱 45.198.224.26

🇬🇧 31.14.254.10

🇨🇳 14.103.127.80

🇧🇪 207.175.157.14

🇭🇰 168.76.20.229

🇺🇸 146.88.241.79

🇺🇸 136.144.43.112

🇭🇰 112.120.171.95