JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.230.148

146.70.230.148 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 15%: ?

15%

ISP	M247 LTD Los Angeles Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.230.148

Whois 146.70.230.148

IP Abuse Reports for 146.70.230.148:

This IP address has been reported a total of 33 times from 30 distinct sources. 146.70.230.148 was first reported on August 26th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 basing	2026-09-15 22:07:01 (1 day ago)	2026-09-15 23:07:01 idz SASL PLAIN auth failed: rhost=146.70.230.148...	Brute-Force
🇮🇩 sockominfo	2026-09-15 12:01:01 (1 day ago)	Email: Login failures from Bad Reputation IP: 146.70.230.148. Threat Score: 6.2/10 (MEDIUM). Confide ... show more Email: Login failures from Bad Reputation IP: 146.70.230.148. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-09-15 11:00:09 (1 day ago)	Email: Login failures from Bad Reputation IP: 146.70.230.148. Threat Score: 5.5/10 (MEDIUM). Reporte ... show more Email: Login failures from Bad Reputation IP: 146.70.230.148. Threat Score: 5.5/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇺🇸 ersei.net	2026-06-21 09:58:37 (2 months ago)	Web app exploiting	Web App Attack
🇨🇦 1gz	2026-06-08 06:14:53 (3 months ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 LARL-Stompro-2024	2026-06-02 04:42:36 (3 months ago)	Evergreen ILS - Mylist Bot Abuse - HTTP Port 443 - Fake UserAgent. Requests:1	Bad Web Bot
🇨🇭 4server	2026-05-03 20:45:25 (4 months ago)	[SunMay0322:45:22.2046942026][security2:error][pid2147862:tid2148186][client146.70.230.148:0]ModSecu ... show more [SunMay0322:45:22.2046942026][security2:error][pid2147862:tid2148186][client146.70.230.148:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"comarcosa.com\"][uri\"/xmlrpc.php\"][unique_id\"afez4pbH-T1njPQRHEztVgAAAFQ\"] show less	Hacking Web App Attack
🇮🇩 xveil	2026-04-13 18:09:52 (5 months ago)	2026-04-14T01:09:49.482425 mail-honeypot postfix/submission/smtpd[4237]: warning: unknown[146.70.230 ... show more 2026-04-14T01:09:49.482425 mail-honeypot postfix/submission/smtpd[4237]: warning: unknown[146.70.230.148]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 xveil	2026-04-09 08:46:29 (5 months ago)	2026-04-09T15:46:27.456067 mail-honeypot postfix/submission/smtpd[10984]: warning: unknown[146.70.23 ... show more 2026-04-09T15:46:27.456067 mail-honeypot postfix/submission/smtpd[10984]: warning: unknown[146.70.230.148]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 ValtonTahiri	2026-03-30 04:02:24 (5 months ago)	Honeypot hit: Android ADB honeypot connection on port 5555 Event: adbhoney.session.connect Session: ... show more Honeypot hit: Android ADB honeypot connection on port 5555 Event: adbhoney.session.connect Session: f1cf090ce849 Port: 5555 show less	Exploited Host
🇳🇱 wlt-blocker	2026-03-30 02:37:07 (5 months ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-03-29 23:20:39 (5 months ago)	(xmlrpc) Failed wordpress XMLRPC 146.70.230.148 (US/United States/-)	Brute-Force
🇺🇸 myagent.site	2026-03-29 21:16:07 (5 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇩🇪 grassau.com	2026-03-29 19:40:09 (5 months ago)	(wordpress) Failed wordpress login from 146.70.230.148 (US/United States/California/Los Angeles/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-03-29 19:17:12 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 146.70.230.148 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 146.70.230.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 15:17:04.691132 2026] [security2:error] [pid 20721:tid 20721] [client 146.70.230.148:26884] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lacycustombuilt.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lacycustombuilt.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acl6sGj3KapoaXcTHeagoQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.230

🇸🇬 184.168.121.4

🇨🇳 101.96.225.252

🇨🇳 101.96.212.81

🇨🇳 101.96.203.55

🇭🇰 34.96.137.9

🇺🇸 34.55.138.237

🇺🇸 20.65.171.69

🇺🇸 205.210.31.16

🇺🇸 162.216.149.217

🇺🇸 140.235.3.159

🇰🇷 118.220.149.121

🇺🇸 104.232.79.58

🇧🇩 103.4.145.50

🇨🇳 101.96.203.31

🇨🇳 101.96.202.144

🇨🇳 101.96.197.182

🇨🇳 101.96.195.62

🇹🇷 78.182.156.118

🇳🇱 45.148.10.151