JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 146.70.99.134

146.70.99.134 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 15%: ?

15%

ISP	M247 Europe - Zurich Infrastructure
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Domain Name	m247global.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 146.70.99.134

Whois 146.70.99.134

IP Abuse Reports for 146.70.99.134:

This IP address has been reported a total of 49 times from 28 distinct sources. 146.70.99.134 was first reported on August 25th 2024, and the most recent report was 55 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 zXero	2026-08-27 12:32:14 (55 minutes ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-08-11 12:44:43 (2 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇨🇦 zXero	2026-08-02 19:51:16 (3 weeks ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇪🇸 librebit	2026-07-15 13:01:46 (1 month ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-07-13 20:34:41 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 16:34:35.102712 2026] [security2:error] [pid 32617:tid 32617] [client 146.70.99.134:53048] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.70.99.134 (+1 hits since last alert)\|thesalonx.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thesalonx.com"] [uri "/xmlrpc.php"] [unique_id "alVL20LTxrs0mE_5DoickQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 librebit	2026-06-22 08:41:44 (2 months ago)	Brute force	Brute-Force
🇺🇸 TPI-Abuse	2026-06-18 22:14:37 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 18:14:32.515128 2026] [security2:error] [pid 10230:tid 10230] [client 146.70.99.134:58637] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 146.70.99.134 (+1 hits since last alert)\|odysseydogasporlari.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "odysseydogasporlari.com"] [uri "/xmlrpc.php"] [unique_id "ajRtyAHZS5Ptwpy3Cgiv0wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-04-03 22:51:15 (4 months ago)	WP Author Enumeration	Web App Attack
🇨🇿 unhfree.net	2025-11-07 00:31:42 (9 months ago)	Nov 7 01:30:48 canopus postfix/smtpd[1863751]: NOQUEUE: reject: RCPT from unknown[146.70.99.134]: 5 ... show more Nov 7 01:30:48 canopus postfix/smtpd[1863751]: NOQUEUE: reject: RCPT from unknown[146.70.99.134]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<fZksmxcRs> Nov 7 01:30:51 canopus postfix/smtpd[1863751]: NOQUEUE: reject: RCPT from unknown[146.70.99.134]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<4GNrm9Ey> Nov 7 01:31:14 canopus postfix/smtpd[1863751]: NOQUEUE: reject: RCPT from unknown[146.70.99.134]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<p1WupMgC> Nov 7 01:31:17 canopus postfix/smtpd[1863751]: NOQUEUE: reject: RCPT from unknown[146.70.99.134]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> pro ... show less	Brute-Force Exploited Host
🇺🇸 octageeks.com	2025-09-05 04:06:39 (11 months ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 TPI-Abuse	2025-09-04 21:18:57 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 17:18:52.126649 2025] [security2:error] [pid 31996:tid 31996] [client 146.70.99.134:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaitanyaconsult.in"] [uri "/.env"] [unique_id "aLoCPP73SzKdRxo2o9GwcAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-04 18:31:12 (11 months ago)	(mod_security) mod_security (id:210492) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 146.70.99.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 04 14:31:05.552258 2025] [security2:error] [pid 15425:tid 15425] [client 146.70.99.134:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.redish.org"] [uri "/.env"] [unique_id "aLna6cQVuySMdIqbj8gOywAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CBJ	2025-09-04 18:28:14 (11 months ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇦🇺 advena	2025-09-04 18:16:07 (11 months ago)	146.70.99.134 (AS9009 M247) was intercepted at 2025-09-04T18:08:36Z after violating WAF directive: 8 ... show more 146.70.99.134 (AS9009 M247) was intercepted at 2025-09-04T18:08:36Z after violating WAF directive: 874a3e315c344b1281ad4f00046aab6f. Pre-cautionary/corrective action applied: managed_challenge. show less	Web Spam Hacking Brute-Force Web App Attack
🇺🇸 nationaleventpros.com	2025-09-04 17:17:01 (11 months ago)	vulnerability scan	Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880:6000::71

🇳🇱 195.178.110.227

🇺🇸 184.94.213.236

🇸🇬 175.156.75.126

🇩🇪 167.94.146.37

🇲🇦 105.156.195.166

🇸🇪 94.255.255.26

🇩🇪 93.181.62.89

🇫🇷 82.228.208.101

🇺🇸 192.178.119.215

🇦🇷 190.227.179.253

🇺🇸 162.216.150.233

🇨🇩 143.105.215.107

🇩🇪 134.122.86.156

🇺🇸 100.21.140.255

🇩🇪 94.130.187.251

🇨🇳 60.25.68.103

🇸🇬 47.128.125.30

🇺🇸 35.194.24.190

🇺🇸 34.222.49.108