This IP address has been reported a total of
61
times from
46 distinct
sources.
146.70.224.22 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW on ns02 [3389/tcp]
Source port: 37969
TTL: 35
Packet length: 44
TOS: 0x00
This repor ...
show moreBlocked by UFW on ns02 [3389/tcp]
Source port: 37969
TTL: 35
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
3 incidents: malicious activity. First: 2026-05-29 10:14, Last: 2026-06-09 06:17 UTC. Triggers: ufw- ...
show more3 incidents: malicious activity. First: 2026-05-29 10:14, Last: 2026-06-09 06:17 UTC. Triggers: ufw-repeater.
show less
Port Scan
Anonymous
2026-06-08T13:57:36.787480+02:00 mx1 postfix/submission/smtpd[3960460]: improper command pipelining ...
show more2026-06-08T13:57:36.787480+02:00 mx1 postfix/submission/smtpd[3960460]: improper command pipelining after CONNECT from unknown[146.70.224.22]: \026\003\000\000i\001\000\000e\003\003U\034\247\344random1random2random3random4\000\000\f\000/\000\n\000\023\0009\000\004\000\377\001\000\0000\000\r\000,\000*\000\001\000\003\000\002\006\001\006\003\006\002\002\001\002\003\002\002\003\001\003\003\003\002\004\001\004\003\004\002\001\001
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=146.70.224.22; proto=TCP; source_port=52006; target_port=8443; flags=SYN
show less
Port Scan
Anonymous
2026-06-08T03:17:43.751787+00:00 nbg01-02-mail postfix/submission/smtpd[390579]: lost connection aft ...
show more2026-06-08T03:17:43.751787+00:00 nbg01-02-mail postfix/submission/smtpd[390579]: lost connection after CONNECT from unknown[146.70.224.22]
2026-06-08T03:17:52.925258+00:00 nbg01-02-mail postfix/smtps/smtpd[390571]: lost connection after CONNECT from unknown[146.70.224.22]
2026-06-08T03:18:13.816460+00:00 nbg01-02-mail postfix/submission/smtpd[390579]: lost connection after CONNECT from unknown[146.70.224.22]
...
show less
Brute-Force
Anonymous
2026-06-08T03:30:01.283922+01:00 vps kernel: [42625964.090952] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ...
show more2026-06-08T03:30:01.283922+01:00 vps kernel: [42625964.090952] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=146.70.224.22 DST=54.37.14.118 LEN=44 TOS=0x08 PREC=0x20 TTL=28 ID=4009 PROTO=TCP SPT=37420 DPT=8443 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
2026-06-07T20:43:13.640339+02:00 srv03 postfix/smtps/smtpd[2044652]: lost connection after CONNECT f ...
show more2026-06-07T20:43:13.640339+02:00 srv03 postfix/smtps/smtpd[2044652]: lost connection after CONNECT from unknown[146.70.224.22]
2026-06-07T20:43:14.385540+02:00 srv03 postfix/smtps/smtpd[2044652]: lost connection after CONNECT from unknown[146.70.224.22]
2026-06-07T20:43:15.142848+02:00 srv03 postfix/smtps/smtpd[2044652]: lost connection after CONNECT from unknown[146.70.224.22]
...
show less
Jun 7 01:58:13 franssen postfix/submission/smtpd[3430910]: improper command pipelining after CONNEC ...
show moreJun 7 01:58:13 franssen postfix/submission/smtpd[3430910]: improper command pipelining after CONNECT from unknown[146.70.224.22]: \026\003\002\001\234\001\000\001\230\003\002\373\372\355\033\332\251\362\036\2645\005\376,H\003~\265#}\370\243I\266\246#\272\016\023@\346\235\225 G\245~\252|\000\273\245\326\017\355\231\341\344M\341\250\3258q\252\261\225 \310\266/\240\365\335\031\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
Jun 7 01:58:13 franssen postfix/submission/smtpd[3430910]: improper command pipelining after CONNECT from unknown[146.70.224.22]: \026\003\001\001\251\001\000\001\245\003\0034\243\003\272\200\332H\351\354\346\333S\222`#\274\210\356\335\271A;\306\363\020\314Gh\032\222g\371 \003l\177J\270\345\024\227\220\204\201\024\343f\031lCJ\313E\323\342\001\274\201\306)5\2102/\262\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
Jun 7 01:58:14 franssen postfix/submission/smtpd[3430910]: improper command pipeli
...
show less
Brute-Force
Showing 1 to
15
of 61 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ