JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.92.4

146.70.92.4 was found in our database!

This IP was reported 238 times. Confidence of Abuse is 28%: ?

28%

ISP	M247 LTD Copenhagen Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247.com
Country	🇩🇰 Denmark
City	Copenhagen, Capital Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.92.4

Whois 146.70.92.4

IP Abuse Reports for 146.70.92.4:

This IP address has been reported a total of 238 times from 102 distinct sources. 146.70.92.4 was first reported on June 17th 2022, and the most recent report was 39 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sargetun	2026-09-20 03:20:06 (39 minutes ago)	Honeypot: VNC probe on port 5900 at 2026-09-20 03:17:39.917142. Automated report from VPS honeypot.	Port Scan
🇺🇸 wristhulk	2026-09-20 03:16:01 (43 minutes ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇺🇸 drewf.ink	2026-09-20 03:15:36 (44 minutes ago)	[03:15] Attempted VNC authentication via legacy RFB 003.003 - challenge=cebd5b00690629c565eb23464cb7 ... show more [03:15] Attempted VNC authentication via legacy RFB 003.003 - challenge=cebd5b00690629c565eb23464cb7fe55 response=34160b3d7c356c0ad76da0acccc5d5e5 show less	Hacking Brute-Force
🇺🇸 wristhulk	2026-09-14 03:55:18 (6 days ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇺🇸 drewf.ink	2026-09-14 03:52:35 (6 days ago)	[03:52] Attempted VNC authentication (DES challenge-response)	Hacking Brute-Force
🇺🇸 wristhulk	2026-09-12 06:34:13 (1 week ago)	Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wo ... show more Honeypot: VNC brute-force on OpenCanary honeypot (port 5900). Password not in common list (custom wordlist). show less	Brute-Force
🇺🇸 drewf.ink	2026-09-12 06:28:17 (1 week ago)	[06:28] Attempted VNC authentication (DES challenge-response)	Hacking Brute-Force
🇬🇧 WebNiraj	2026-09-09 10:25:25 (1 week ago)	(mod_security) mod_security (id:949110) triggered by 146.70.92.4 (DK/Denmark/-): 5 in the last 3600 ... show more (mod_security) mod_security (id:949110) triggered by 146.70.92.4 (DK/Denmark/-): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇷🇴 INTEQ	2026-05-30 12:04:42 (3 months ago)	Web attack from 146.70.92.4	Web App Attack
🇩🇪 NxtGenIT	2026-05-17 10:18:00 (4 months ago)	Tanner Honeypot hit, Event Type: , HTTP Method: GET, User Agent: , URI: /json/?fields=status,query,i ... show more Tanner Honeypot hit, Event Type: , HTTP Method: GET, User Agent: , URI: /json/?fields=status,query,isp,hosting,country,countryCode show less	SSH
🇩🇪 LRob	2026-05-09 08:45:03 (4 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇩🇪 filstal.org	2026-05-01 03:08:23 (4 months ago)	Bad web bot: Spoofed/obsolete UA (Opera/8.62.(X11; Linux i686; dz-BT) Presto/2.9.168 Version/10.00). ... show more Bad web bot: Spoofed/obsolete UA (Opera/8.62.(X11; Linux i686; dz-BT) Presto/2.9.168 Version/10.00). Mass-scanning WordPress plugin. Coordinated large-scale bot attack. show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 17:22:32 (5 months ago)	(mod_security) mod_security (id:240000) triggered by 146.70.92.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 146.70.92.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 13:22:24.383855 2026] [security2:error] [pid 1939432:tid 1939432] [client 146.70.92.4:58882] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|killarneypool.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "killarneypool.org"] [uri "/images/stories/themes.php"] [unique_id "adU9UBmvHqumUaiWGAM_7AAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-07 13:03:32 (5 months ago)	(mod_security) mod_security (id:240000) triggered by 146.70.92.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 146.70.92.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 07 09:03:26.682021 2026] [security2:error] [pid 1349715:tid 1349715] [client 146.70.92.4:58712] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|nexthop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "nexthop.com"] [uri "/images/stories/themes.php"] [unique_id "adUAnhqo3gKGz07Rs-8WOAAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-04-07 09:11:30 (5 months ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 238 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2400:9800:9b1:88f5:c120:3564:315c:40b2

🇺🇸 207.46.13.150

🇫🇷 147.79.21.59

🇨🇳 112.26.101.76

🇺🇸 72.18.81.12

🇰🇷 220.80.221.188

🇺🇸 162.216.150.227

🇨🇳 117.74.67.12

🇫🇷 91.231.89.252

🇧🇬 91.92.199.36

🇺🇸 67.197.72.54

🇳🇱 45.148.10.152

🇬🇧 217.146.80.106

🇧🇪 207.175.142.16

🇺🇸 162.216.149.157

🇫🇮 147.185.133.187

🇭🇰 118.193.40.108

🇱🇹 77.90.185.20

🇷🇺 45.9.75.8

🇧🇪 34.14.58.11