JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.110.246.170

152.110.246.170 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 27%: ?

27%

ISP	Dimension Data
Usage Type	Fixed Line ISP
ASN	AS20011
Hostname(s)	152-110-246-170.ftth.web.africa
Domain Name	global.ntt
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.110.246.170

Whois 152.110.246.170

IP Abuse Reports for 152.110.246.170:

This IP address has been reported a total of 40 times from 25 distinct sources. 152.110.246.170 was first reported on June 6th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 windowsforum	2026-05-29 17:32:08 (3 weeks ago)	Spam bot SSO registration: triggers=sso_service_check, username=MICHAEL	Web Spam Bad Web Bot
🇺🇸 cybsecaoccol	2026-05-24 02:30:13 (4 weeks ago)	unauthorized connection or malicious port scan attempted on tcp port 23 - dr	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-05-23 12:31:55 (4 weeks ago)	(mod_security) mod_security (id:217210) triggered by 152.110.246.170 (152-110-246-170.ftth.web.afric ... show more (mod_security) mod_security (id:217210) triggered by 152.110.246.170 (152-110-246-170.ftth.web.africa): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 08:31:48.106842 2026] [security2:error] [pid 29963:tid 29963] [client 152.110.246.170:39104] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|xxxvideo.giving\|F\|4"] [data "GET http://xxxvideo.giving HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "xxxvideo.giving"] [uri "/"] [unique_id "ahGeNJDw9eeGOURBmEheYAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-05-22 05:57:46 (1 month ago)	tcp/23	Port Scan
🇫🇷 security.rdmc.fr	2026-05-22 05:18:05 (1 month ago)	Port Scan Attack proto:TCP src:23978 dst:23	Port Scan
🇫🇷 security.rdmc.fr	2026-05-12 06:13:41 (1 month ago)	Port Scan Attack proto:TCP src:56852 dst:23	Port Scan
🇺🇸 MPL	2026-05-10 11:16:11 (1 month ago)	tcp/2323 (2 or more attempts)	Port Scan
🇺🇸 LSPCCU	2026-05-10 11:12:35 (1 month ago)	TSEC Honeypot Network report. Threat score: 71/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 71/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 152. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇦🇹 centurion	2026-05-10 00:39:00 (1 month ago)	Blocked by UFW on ns03 [23/tcp] Source port: 48242 TTL: 42 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW on ns03 [23/tcp] Source port: 48242 TTL: 42 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇵🇱 mkey	2026-05-06 18:20:02 (1 month ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-05-06 20:15:45 \| LAST=2026-05-06 20:15:46. Last seen 2026-05-06 20:15:46. show less	Port Scan
🇺🇸 MPL	2026-04-07 15:36:46 (2 months ago)	tcp/80 (2 or more attempts)	Port Scan
Anonymous	2026-04-07 04:00:43 (2 months ago)	\| [Dangerous/South Africa] Aggressive IP 152.110.246.170 (~30 hits). Type: DoS Defender- Web server ... show more \| [Dangerous/South Africa] Aggressive IP 152.110.246.170 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇫🇷 Mölkky	2026-04-06 12:42:03 (2 months ago)	DDOS Attack (by infected device ?)	Web App Attack
🇺🇸 tropicalidad.be	2026-03-04 15:51:42 (3 months ago)	blog comment/referrer spam	Web Spam
🇪🇸 el-brujo	2026-03-01 02:33:28 (3 months ago)	Cloudflare WAF: Request Path: /css.html Request Query: ?thisclassname=1%27%29%29%2CGTID_SUBSET%28CON ... show more Cloudflare WAF: Request Path: /css.html Request Query: ?thisclassname=1%27%29%29%2CGTID_SUBSET%28CONCAT%28%27~%27%2C%28SELECT%2F%2A%2A%2F%28ELT%281707%3D1707%2C1%29%29%29%2C%27~%27%29%2C1707%29+AND+%28%28%27wTkwJt7j%27%3D%27wTkwJt7j&backgroundcolor=1&bordercolor=1&textcolor=1&elemtype=button&bordertype=solid&borderwidth=1&textsize=1&textfont=1&textweight=N Host: www.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Action: log Source: firewallManaged ASN Description: NTT-DATA-Inc Country: ZA Method: GET Timestamp: 2026-03-01T02:33:28Z ruleId: 3b0c61407d0b4f7d87e516472116d2fe. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 176.31.7.95

🇺🇸 162.243.47.145

🇺🇸 159.223.115.224

🇸🇬 159.223.73.80

🇭🇰 152.32.128.85

🇮🇳 150.241.245.69

🇸🇪 83.233.149.204

🇬🇧 82.8.13.211

🇺🇸 2001:470:1:fb5::2c0

🇬🇧 193.163.125.254

🇳🇱 192.87.30.118

🇮🇳 172.253.244.24

🇰🇷 119.209.12.20

🇬🇧 80.1.51.168

🇺🇸 73.168.79.36

🇸🇳 41.214.113.42

🇺🇸 3.145.149.166

🇷🇴 2.57.122.177

🇬🇧 193.163.125.239

🇳🇱 176.65.139.44