JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.148.54.75

159.148.54.75 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 23%: ?

23%

ISP	SIA BITE Latvija
Usage Type	Fixed Line ISP
ASN	AS210906
Domain Name	bi.lt
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.148.54.75

Whois 159.148.54.75

IP Abuse Reports for 159.148.54.75:

This IP address has been reported a total of 11 times from 7 distinct sources. 159.148.54.75 was first reported on July 20th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-07-07 11:27:59 (7 hours ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
Anonymous	2026-06-26 23:26:17 (1 week ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 prologic	2026-06-12 20:56:24 (3 weeks ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
Anonymous	2026-06-12 11:48:01 (3 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇩🇪 HandyTreff.de	2026-05-21 16:01:21 (1 month ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.163 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.163 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. show less	Web App Attack Bad Web Bot
🇮🇹 A000Z	2026-03-28 14:03:39 (3 months ago)	Fail2Ban: 159.148.54.75 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 159.148.54.75 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 HandyTreff.de	2026-03-01 19:35:00 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -20.92 (Bad < -10 / Very Bad < -20 / ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -20.92 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Vers show less	Web App Attack Bad Web Bot
🇺🇸 ipblock.com	2025-11-12 22:36:00 (7 months ago)	IPBlock protected site ID [1365-l]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-21 21:53:14 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 159.148.54.75 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 159.148.54.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 21 17:53:04.421687 2025] [security2:error] [pid 15192:tid 15192] [client 159.148.54.75:53818] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.scoutinsignia.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.scoutinsignia.com"] [uri "/WS_FTP.LOG"] [unique_id "aH62wDDMZ0WVFzxVkIEbKgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2025-06-14 22:09:00 (1 year ago)	IPBlock protected site ID [955-wdo][s=11]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-07-20 21:02:15 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 159.148.54.75 (159-148-54-75.bestvpsone.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 159.148.54.75 (159-148-54-75.bestvpsone.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 20 17:02:11.862006 2024] [security2:error] [pid 11211:tid 11211] [client 159.148.54.75:47908] [client 159.148.54.75] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/8903"] [unique_id "Zpwl0xU3UyzQZqe_876FsQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.51.153.37

🇧🇷 177.75.204.138

🇺🇸 172.190.216.105

🇨🇳 150.255.94.250

🇺🇸 23.105.150.162

🇺🇸 23.94.243.208

🇦🇺 203.185.198.246

🇹🇼 198.235.24.72

🇩🇪 194.88.98.110

🇲🇽 189.194.140.170

🇮🇳 172.253.220.21

🇨🇳 150.255.248.165

🇨🇳 150.255.180.111

🇩🇪 141.11.107.4

🇺🇸 135.237.126.245

🇰🇷 125.130.94.160

🇻🇳 123.25.115.189

🇺🇸 104.207.37.141

🇺🇸 74.7.227.146

🇨🇦 47.54.180.247