JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.65.25

146.70.65.25 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 67%: ?

67%

ISP	M247 LTD Nigeria Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.65.25

Whois 146.70.65.25

IP Abuse Reports for 146.70.65.25:

This IP address has been reported a total of 44 times from 32 distinct sources. 146.70.65.25 was first reported on January 18th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-21 02:56:59 (5 days ago)	Drop from IP address 146.70.65.25 to tcp-port 5001	Port Scan
🇩🇪 iNetWorker	2026-06-21 02:37:54 (5 days ago)	trying to access non-authorized port	Port Scan
🇩🇪 iNetWorker	2026-06-11 03:42:41 (2 weeks ago)	trying to access non-authorized port	Port Scan
🇩🇪 ITSNF	2026-06-10 22:45:21 (2 weeks ago)	Blocked by os-abuseipdb; 22 hits, proto=tcp, ports=110,18081,3050,3389,5001,6080,6082,7002,8822,9201 ... show more Blocked by os-abuseipdb; 22 hits, proto=tcp, ports=110,18081,3050,3389,5001,6080,6082,7002,8822,9201,9876 show less	Port Scan Hacking
Anonymous	2026-06-10 04:20:26 (2 weeks ago)	Jun 10 00:20:23 localhost kernel: [109410525.489892] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 10 00:20:23 localhost kernel: [109410525.489892] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=146.70.65.25 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=39 ID=0 DF PROTO=TCP SPT=33531 DPT=15672 SEQ=114483220 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A02A226820000000001030307) Jun 10 00:20:24 localhost kernel: [109410525.709729] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=146.70.65.25 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=37 ID=0 DF PROTO=TCP SPT=59919 DPT=5900 SEQ=526908976 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A02A226820000000001030307) Jun 10 00:20:24 localhost kernel: [109410525.720383] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=146.70.65.25 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=32 ID=0 DF PROTO=TCP SPT=41966 DPT=2380 SEQ=535136542 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A02A226820000000001030307) show less	Port Scan
🇬🇧 ISPLtd	2026-06-09 19:02:11 (2 weeks ago)	Jun 9 16:02:09 146.70.65.25 TCP SPT=43838 DPT=10255 SYN Jun 9 16:02:09 146.70.65.25 TCP SPT=42756 ... show more Jun 9 16:02:09 146.70.65.25 TCP SPT=43838 DPT=10255 SYN Jun 9 16:02:09 146.70.65.25 TCP SPT=42756 DPT=8042 SYN Jun 9 16:02:09 146.70.65.25 TCP SPT=56262 DPT=8880 SYN ... show less	Port Scan
🇦🇩 bakunin1848	2026-06-07 06:54:04 (2 weeks ago)	Firewall IPS Detection on 07-06-2026 at 08:54:04	Port Scan Exploited Host
🇺🇸 wteiken	2026-06-06 18:51:51 (2 weeks ago)	2026-06-06T14:51:46.873836-04:00 nostromo.teiken.net kernel: [ 3930.785582] syn_limit:IN=en-wan OUT= ... show more 2026-06-06T14:51:46.873836-04:00 nostromo.teiken.net kernel: [ 3930.785582] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.70.65.25 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=32890 DPT=5173 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-06T14:51:47.332838-04:00 nostromo.teiken.net kernel: [ 3931.243383] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.70.65.25 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=26104 DF PROTO=TCP SPT=54654 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-06T14:51:47.352836-04:00 nostromo.teiken.net kernel: [ 3931.258061] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.70.65.25 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=0 DF PROTO=TCP SPT=41854 DPT=5080 WINDOW=65535 RES=0x00 SYN URGP=0 2026-06-06T14:51:47.353152-04:00 nostromo.teiken.net kernel: [ 3931.258349] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:9 ... show less	Port Scan
🇩🇪 BlueWire Hosting	2026-06-06 16:01:52 (2 weeks ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 Charlesiv	2026-06-06 16:00:07 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from ES. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) P ... show more Triggered Cloudflare WAF (firewallCustom) from ES. Action taken: BLOCK ASN: 9009 (M247 Europe SRL) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-06-06T15:35:26Z Ray ID: a0787ca56fabe457 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 itsnixk	2026-06-05 20:37:23 (2 weeks ago)	(mod_security) mod_security (id:920280) triggered by 146.70.65.25 (ES/Spain/-): 1 in the last 3600 s ... show more (mod_security) mod_security (id:920280) triggered by 146.70.65.25 (ES/Spain/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 05 16:37:17.512648 2026] [security2:error] [pid 1480170:tid 1480284] [client 146.70.65.25:57524] ModSecurity: Access denied with code 406 (phase 1). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "567"] [id "920280"] [msg "Request Missing a Host Header"] [severity "CRITICAL"] [ver "OWASP_CRS/4.25.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "aiMzfXN9X0Gw--wsE6byLAAAAF8"] show less	Port Scan
Anonymous	2026-06-05 20:06:31 (2 weeks ago)	Portscan: TCP/8009, TCP/10250, TCP/2380, TCP/2083, TCP/8000, TCP/3306, TCP/10080, TCP/9100, TCP/873, ... show more Portscan: TCP/8009, TCP/10250, TCP/2380, TCP/2083, TCP/8000, TCP/3306, TCP/10080, TCP/9100, TCP/873, TCP/4444, TCP/8181 show less	Port Scan
Anonymous	2026-06-05 11:17:09 (3 weeks ago)	146.70.65.25 detected on srv01	Port Scan
🇺🇸 Xarcotic	2026-06-05 00:19:23 (3 weeks ago)	SSH login on honeypot.	Brute-Force SSH
🇺🇸 OceanTreasure	2026-06-05 00:00:19 (3 weeks ago)	tcp/3306; SCAN Suspicious inbound to mySQL port 3306 @ 2026-06-04T23:53:43Z	Brute-Force

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.203.224.88

🇮🇳 106.219.150.14

🇦🇿 94.20.124.54

🇫🇷 82.64.126.187

🇹🇼 61.223.116.74

🇰🇷 61.76.112.4

🇰🇷 58.229.180.107

🇺🇸 2620:18c:0:192::e0:225

🇮🇳 182.95.181.50

🇯🇵 150.66.31.130

🇫🇮 147.185.133.91

🇺🇸 104.206.238.151

🇪🇸 93.176.158.161

🇪🇸 84.126.98.135

🇧🇬 79.124.62.134

🇪🇬 197.36.196.239

🇬🇷 195.167.114.67

🇧🇷 186.65.93.230

🇵🇾 181.91.84.177

🇸🇾 178.52.213.94