This IP address has been reported a total of
33
times from
26 distinct
sources.
67.159.48.146 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Spain
with 3
reports;
Germany
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
8
times;
DDoS Attack
5
times;
Brute-Force
5
times;
Bad Web Bot
5
times;
Port Scan
4
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.cloudflare.com:443
show less
Blocked by UFW (TCP on 8891)
Source port: 17206
TTL: 53
Packet length: 60
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 8891)
Source port: 17206
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 67.159.48.146) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2026-10-10T17:12:03.349388+02:00 soli-gate cyrus/imaps[4033095]: badlogin: [67.159.48.146] plaintext ...
show more2026-10-10T17:12:03.349388+02:00 soli-gate cyrus/imaps[4033095]: badlogin: [67.159.48.146] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed]
...
show less
Automated L7 DDoS against HTTPS port 443; 30 HTTP 429 responses observed within 10 seconds; source b ...
show moreAutomated L7 DDoS against HTTPS port 443; 30 HTTP 429 responses observed within 10 seconds; source blocked at ingress. Incident 20260913T123620Z.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 67.159.48.146: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 67.159.48.146: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
