AbuseIPDB » 148.135.207.158
148.135.207.158
This IP was reported 7 times. Confidence of
Abuse
is 39% : ?
ISP
Matteo Martelloni trading as DELUXHOST
Usage Type
Data Center/Web Hosting/Transit
ASN
AS214677
Hostname(s)
static.148.135.207.158.deluxhost.net
Domain Name
deluxhost.net
Country
🇳🇱
Netherlands
City
Amsterdam, North Holland
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 148.135.207.158 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
148.135.207.158 was first reported on
June 3rd 2026 , and the most recent report was
5 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇳🇱
BIV
2026-06-13 21:51:38
(5 days ago)
Honeypot multi-source hit. Sources: tpot:Suricata. Ports: 12988,26915,33487. Automated tiered (T-Pot ...
show more
Honeypot multi-source hit. Sources: tpot:Suricata. Ports: 12988,26915,33487. Automated tiered (T-Pot+DShield).
show less
Port Scan
Hacking
🇺🇸
mnsf
2026-06-04 23:05:37
(2 weeks ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-04 21:59:36
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-06-04
Web App Attack
SSH
Hacking
🇫🇮
inlink.ltd
2026-06-04 21:44:49
(2 weeks ago)
dot file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 20:20:39
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 148.135.207.158 (static.148.135.207.158.deluxho ...
show more
(mod_security) mod_security (id:210492) triggered by 148.135.207.158 (static.148.135.207.158.deluxhost.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 16:20:34.329996 2026] [security2:error] [pid 501:tid 501] [client 148.135.207.158:53430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigbandrockparty.com.jazzclubla.com"] [uri "/.env"] [unique_id "aiHeEnMdp1ojwRdA02TFyAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MPL
2026-06-04 13:26:36
(2 weeks ago)
tcp/443 (2 or more attempts)
Port Scan
2026-06-03 01:41:24
(2 weeks ago)
(caddyscan) Scanner path probe from 148.135.207.158 (NL/The Netherlands/static.148.135.207.158.delux ...
show more
(caddyscan) Scanner path probe from 148.135.207.158 (NL/The Netherlands/static.148.135.207.158.deluxhost.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 207.148.6.135 200 2627 148.135.207.158 - - [03/Jun/2026:01:15:48 +0000] "GET /phpmyadmin/ HTTP/1.1"
207.148.6.135 200 2627 148.135.207.158 - - [03/Jun/2026:01:28:48 +0000] "GET /phpmyadmin/ HTTP/1.1"
207.148.6.135 200 2627 148.135.207.158 - - [03/Jun/2026:01:28:51 +0000] "GET /phpmyadmin/ HTTP/1.1"
207.148.6.135 200 2627 148.135.207.158 - - [03/Jun/2026:01:41:20 +0000] "GET /phpmyadmin/ HTTP/1.1"
207.148.6.135 200 2627 148.135.207.158 - - [03/Jun/2026:01:41:22 +0000] "GET /phpmyadmin/ HTTP/1.1"
show less
Port Scan
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: