135.148.138.152

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
34 reports
21 reporters · latest 13 minutes ago
ISP
OVH US LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16276
Hostname(s)
vps-1929fcff.vps.ovh.us
Domain Name
ovhcloud.com
Country
🇺🇸 United States of America
City
Warrenton, Virginia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 21 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 18 🇩🇪 Germany 8 🇫🇮 Finland 3
Most common categories Port Scan 27 Hacking 7 Web App Attack 7 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇫🇷 vtchost.com
scanning closed ports ...
Port Scan
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 285 in 24h | Target port: 3000
Web App Attack
Anonymous
Blocked by firewall on hugin [3000/tcp] | Rule: UFW | SPT: 48964 | TTL: 49 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇮 dnsbd.tech
nftables: Port scan (TCP:3000) [srv2]
Port Scan Hacking
🇺🇸 sandra361
Port scan detected: 7 packets across 1 port (3000). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=135.148.138.152 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=1522 DF PROTO=TCP SPT=44616 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0
Port Scan
🇫🇮 anycast_ac
Blocked by UFW on legacypanel [3000/tcp] | SPT: 53840 | TTL: 43 | LEN: 60 | TOS: 0x00 • Reported by: FemboyHolding LTD
Port Scan
🇫🇷 uthul
T-Pot honeypot: 932 hits on ports [3000] (automated)
Port Scan
Anonymous
Port Scan Brute-Force
🇫🇷 cityhunter_rhone
Connection attempts on sensitive port(s) 3000 (1) of a private server (ports closed to the public, firewall log). Mercurius-Guide automated detection.
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml.
Port Scan
🇫🇷 AmStaff
Honeypot: web exploitation attempts. Targeted ports: 3000.
Web App Attack
🇫🇷 uthul
T-Pot honeypot: 1830 hits on ports [3000] (automated)
Port Scan
🇫🇷 uthul
T-Pot honeypot: 892 hits on ports [3000] (automated)
Port Scan
🇬🇧 sandra361
Port scan detected: 7 packets across 1 port (3000). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=135.148.138.152 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=27637 DF PROTO=TCP SPT=57558 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.202.245
🇺🇸 207.97.152.5
🇳🇱 200.138.46.197
🇺🇸 199.165.159.129
🇨🇦 70.48.94.186
🇺🇸 69.249.201.1
🇦🇷 45.175.151.70
🇧🇪 34.62.25.39
🇺🇸 23.22.183.111
🇹🇭 203.156.108.110
🇧🇷 200.152.94.40
🇸🇬 198.64.89.171
🇳🇱 193.176.31.207
🇺🇸 172.66.47.159
🇳🇱 77.67.26.243
🇰🇷 59.23.202.227
🇧🇩 43.246.201.122
🇷🇺 87.255.2.16
🇷🇴 81.181.129.218
🇸🇬 61.29.254.143
feedback