JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 67.159.48.146

67.159.48.146

Recent Activity

16 reports found in our database

43% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

FDCservers.net

Usage Type

Data Center/Web Hosting/Transit

ASN

AS30058

Domain Name

fdcservers.net

Country

🇸🇬 Singapore

City

Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 67.159.48.146:

This IP address has been reported a total of 16 times from 14 distinct sources. 67.159.48.146 was first reported on June 16th 2026, and the most recent report was 2 hours ago. In the last 60 days, the top reporter locations were: United States of America with 4 reports; Indonesia with 3 reports; Netherlands with 2 reports. The most common categories in these recent reports were: Web App Attack 7 times; Hacking 6 times; Brute-Force 4 times; Bad Web Bot 3 times; Fraud VoIP 1 time; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-08-30 04:20:40 (2 hours ago)	67.159.48.146 - - [30/Aug/2026:06:20:37 +0200] "GET /.hermes/auth.json HTTP/2.0" 404 15967 "-" "Mozi ... show more 67.159.48.146 - - [30/Aug/2026:06:20:37 +0200] "GET /.hermes/auth.json HTTP/2.0" 404 15967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-auth-scan/1.0" 67.159.48.146 - - [30/Aug/2026:06:20:37 +0200] "GET /.hermes/auth.json HTTP/2.0" 404 15967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-auth-scan/1.0" 67.159.48.146 - - [30/Aug/2026:06:20:39 +0200] "GET /.codex/auth.json HTTP/2.0" 404 15967 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-auth-scan/1.0" ... show less	DDoS Attack Hacking
🇦🇺 aranguren.org	2026-08-28 18:55:20 (1 day ago)	67.159.48.146 - - [29/Aug/2026:04:55:18 +1000] "GET /.env HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Window ... show more 67.159.48.146 - - [29/Aug/2026:04:55:18 +1000] "GET /.env HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-or-scan/1.0" 67.159.48.146 - - [29/Aug/2026:04:55:18 +1000] "GET /.env.local HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-or-scan/1.0" 67.159.48.146 - - [29/Aug/2026:04:55:18 +1000] "GET /.env.production HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-or-scan/1.0" 67.159.48.146 - - [29/Aug/2026:04:55:19 +1000] "GET /.env.example HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-or-scan/1.0" 67.159.48.146 - - [29/Aug/2026:04:55:19 +1000] "GET /config.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-or-scan/1.0" 67.159.48.146 - - [29/Aug/2026:04:55:20 +1000] "GET /config.yaml HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) fofa-or-scan/1.0" ... show less	Bad Web Bot
🇳🇱 ConsulHosting	2026-08-18 17:19:55 (1 week ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇺🇸 mnsf	2026-08-18 03:05:11 (1 week ago)	Abuse Detected (17)	Brute-Force Web App Attack
🇺🇸 1gz	2026-08-15 09:08:35 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 slay3r9903	2026-08-09 08:27:42 (2 weeks ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇺🇸 Jason Howell	2026-07-24 04:36:22 (1 month ago)	67.159.48.146 - - [23/Jul/2026:23:36:20 -0500] "GET //wp-login.php HTTP/1.1" 200 5936 "-" "Mozilla/5 ... show more 67.159.48.146 - - [23/Jul/2026:23:36:20 -0500] "GET //wp-login.php HTTP/1.1" 200 5936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36" 67.159.48.146 - - [23/Jul/2026:23:36:21 -0500] "GET /wp-content/themes/handmade-two/ocmx/includes/upgrade.js?ver=4.9.29 HTTP/1.1" 200 5076 "https://www.barbsgardenandpantry.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36" 67.159.48.146 - - [23/Jul/2026:23:36:21 -0500] "GET /wp-admin/load-scripts.php?c=0&load%5B%5D=jquery-core,jquery-migrate&ver=4.9.29 HTTP/1.1" 200 37740 "https://www.barbsgardenandpantry.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/149.0.0.0 Safari/537.36" 67.159.48.146 - - [23/Jul/2026:23:36:21 -0500] "GET /wp-admin/load-styles.php?c=0&dir=ltr&load%5B%5D=dashicons,buttons,forms,l10n,login&ver=4.9.29 ... show less	Web App Attack
🇮🇩 sockominfo	2026-07-14 19:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 67.159.48.146. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 67.159.48.146. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-14 18:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 67.159.48.146. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 67.159.48.146. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇳🇱 wlt-blocker	2026-07-14 17:25:10 (1 month ago)	Attempts to login to mail server with wrong username and/or password	Brute-Force
🇮🇩 sockominfo	2026-07-14 17:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 67.159.48.146. Threat Score: 6/10 (MEDIUM). Reported by Ta ... show more Zimbra: Login failures from malicious IP: 67.159.48.146. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇨🇦 Aleigo Abuse	2026-07-06 10:17:21 (1 month ago)	SIP auth challenge (INVITE) fraud attempt detected.	Web App Attack Brute-Force Fraud VoIP Hacking
🇮🇹 Progetto1	2026-07-02 20:26:02 (1 month ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇩🇪 Ba-Yu	2026-06-30 17:03:21 (1 month ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇳🇱 enpepet	2026-06-22 04:33:01 (2 months ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:python-requests/2.34.2 URL:/index.php?option=com_spp ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:python-requests/2.34.2 URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 200.59.88.177

🇩🇪 167.94.146.72

🇺🇸 147.185.132.147

🇺🇸 137.184.235.211

🇩🇪 69.5.169.60

🇺🇸 65.60.54.138

🇨🇳 49.72.94.94

🇬🇧 35.203.210.71

🇱🇰 220.247.224.226

🇺🇿 84.54.70.95

🇬🇧 35.203.211.100

🇩🇪 166.1.144.78

🇺🇸 162.240.218.183

🇺🇸 137.131.40.4

🇺🇸 103.168.66.101

🇵🇰 103.73.102.235

🇸🇦 79.170.53.30

🇨🇳 49.75.185.71

🇺🇸 47.254.69.253

🇵🇱 46.170.131.9