This IP address has been reported a total of
10
times from
9 distinct
sources.
148.222.130.157 was first reported on
March 10th 2026 , and the most recent report was
10 hours ago Switzerland
with 1
report;
Germany
with 1
report;
France
with 1
report.
The most common categories in these recent reports were:
DDoS Attack
2
times;
Hacking
2
times;
Port Scan
2
times;
Web App Attack
2
times;
Web Spam
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
ALPHANET
2026-10-09 02:15:07
(10 hours ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇩🇪
paissangroup
2026-10-08 20:18:08
(16 hours ago)
Multiple WAF Violations
Web App Attack
🇻🇳
trung.fun
2026-08-18 12:24:11
(1 month ago)
DDoS, Hack, Brute Force, Web Attack
...
DDoS Attack
Web Spam
Hacking
Brute-Force
Web App Attack
🇫🇷
Petre 21_ip
2026-08-12 02:41:34
(1 month ago)
2026-08-12T04:41:33.694507+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ...
show more
2026-08-12T04:41:33.694507+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=148.222.130.157 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=934 DF PROTO=TCP SPT=55400 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇷🇸
Scan
2026-08-12 02:02:45
(1 month ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-07-24 01:48:01
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 148.222.130.157 (customer.sntochl1.isp.starlink ...
show more
(mod_security) mod_security (id:210730) triggered by 148.222.130.157 (customer.sntochl1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 21:47:56.050518 2026] [security2:error] [pid 3570230:tid 3570230] [client 148.222.130.157:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.swarnar.com|F|2"] [data ".dawn.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/www.dawn.com"] [unique_id "amLETJtCNd3e8x2y8_Lm-gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 08:58:16
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 148.222.130.157 (customer.sntochl1.isp.starlink ...
show more
(mod_security) mod_security (id:210730) triggered by 148.222.130.157 (customer.sntochl1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 04:58:09.808155 2026] [security2:error] [pid 30618:tid 30618] [client 148.222.130.157:20018] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.baliaccommodationpadangpadang.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.baliaccommodationpadangpadang.com"] [uri "/what-we-offer/transport-and-daytrips/[email protected] "] [unique_id "ajEQITKRJ_C5p9emZPsHLwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Progetto1
2026-04-09 21:04:02
(5 months ago)
Mail - Multiple failed login attempts
Brute-Force
Exploited Host
2026-04-03 05:00:19
(6 months ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
🇺🇸
kosada.com
2026-03-10 16:20:44
(6 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
Showing 1 to
10
of 10 reports
