JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.148.234.192

159.148.234.192 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 14%: ?

14%

ISP	SIA BITE Latvija
Usage Type	Fixed Line ISP
ASN	AS210906
Domain Name	bi.lt
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.148.234.192

Whois 159.148.234.192

IP Abuse Reports for 159.148.234.192:

This IP address has been reported a total of 9 times from 8 distinct sources. 159.148.234.192 was first reported on July 17th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-21 14:25:28 (3 hours ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+Cavaillon-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Famille-Addict-Crosshill-Metrix-Pulsium-Xel show less	DDoS Attack Web App Attack
Anonymous	2026-08-06 19:56:00 (2 weeks ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇩🇪 HandyTreff.de	2026-05-21 23:42:17 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -29.718 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -29.718 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. show less	Web App Attack Bad Web Bot
🇺🇸 kosada.com	2026-04-16 22:54:37 (4 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-01-13 00:02:02 (7 months ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 MAGIC	2025-12-20 00:13:50 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-13 10:02:09 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 159.148.234.192 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 159.148.234.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 13 05:02:01.221349 2025] [security2:error] [pid 11847:tid 11847] [client 159.148.234.192:13570] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/96180"] [unique_id "aT05mc0kTbJ-vzho5C_d1gAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-10-25 06:20:40 (9 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2024-07-17 08:50:20 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 159.148.234.192 (159-148-234-192.bestvpsone.com ... show more (mod_security) mod_security (id:225170) triggered by 159.148.234.192 (159-148-234-192.bestvpsone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 17 04:50:17.284225 2024] [security2:error] [pid 8395:tid 8395] [client 159.148.234.192:62312] [client 159.148.234.192] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/236132"] [unique_id "ZpeFySpugZuj3FcnDrioEgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.39.63.14

🇹🇼 111.70.23.236

🇫🇷 91.231.89.230

🇻🇳 45.119.81.245

🇺🇸 24.8.106.75

🇨🇳 14.103.9.211

🇧🇷 205.210.31.250

🇺🇦 194.146.191.101

🇦🇷 186.158.26.245

🇷🇺 95.190.58.71

🇳🇱 94.154.43.66

🇬🇧 51.68.214.191

🇫🇷 51.75.255.200

🇨🇳 223.70.251.62

🇨🇳 222.176.200.54

🇳🇱 193.29.139.167

🇲🇽 189.143.118.249

🇸🇬 139.180.133.90

🇨🇳 110.249.202.8

🇨🇦 70.49.114.160