JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.78.153.18

149.78.153.18 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 57%: ?

57%

ISP	FiberAR
Usage Type	Fixed Line ISP
ASN	AS274181
Hostname(s)	18.153.78.149.in-addr.arpa
Domain Name	fiberar.ar
Country	🇦🇷 Argentina
City	Banfield, Buenos Aires

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.78.153.18

Whois 149.78.153.18

IP Abuse Reports for 149.78.153.18:

This IP address has been reported a total of 34 times from 23 distinct sources. 149.78.153.18 was first reported on December 3rd 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 20:16:29 (4 hours ago)	(mod_security) mod_security (id:210350) triggered by 149.78.153.18 (18.153.78.149.in-addr.arpa): 1 i ... show more (mod_security) mod_security (id:210350) triggered by 149.78.153.18 (18.153.78.149.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 16:16:25.784639 2026] [security2:error] [pid 10686:tid 10686] [client 149.78.153.18:47749] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|providencesilverco.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "providencesilverco.com"] [uri "/"] [unique_id "aq2cGZv1-uSD14vXfvR0rQAAAAk"], referer: https://seobacklinkchecker.website/dir/organic-link-building-168164 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 gui-ying233	2026-09-10 00:46:00 (1 week ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 bart@	2026-09-04 23:06:15 (2 weeks ago)	Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ ... show more Automated scan detection against redacted protected targets. Hits=1; port 22 proto 6 detection dark_ip show less	Port Scan
Anonymous	2026-09-04 18:32:13 (2 weeks ago)	suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan	Port Scan
🇹🇷 SeczarSecureOps	2026-09-04 12:52:49 (2 weeks ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-09-04 12:52 show less	Web App Attack
🇧🇷 noconex	2026-09-04 12:48:12 (2 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 149.78.153 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 149.78.153.18 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-09-02 07:41:04 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 gui-ying233	2026-08-31 02:14:31 (2 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 ipblock.com	2026-08-26 00:20:00 (3 weeks ago)	IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-25 11:21:28 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 MPL	2026-08-20 16:17:58 (4 weeks ago)	tcp ports: 22,23 (14 or more attempts)	Port Scan
🇫🇷 Zkillu	2026-08-20 16:04:40 (4 weeks ago)	DDoS flood attack against 46.232.235.0 (2026-08-20 15:59:40 -> 2026-08-20 16:14:40 UTC) targeting AS ... show more DDoS flood attack against 46.232.235.0 (2026-08-20 15:59:40 -> 2026-08-20 16:14:40 UTC) targeting AS215599. This IP (AS274181) sent ~1985 packets (2.82 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇧🇷 noconex	2026-08-20 11:47:03 (4 weeks ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 149.78.153 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 149.78.153.18 show less	Port Scan Brute-Force SSH
Anonymous	2026-08-20 06:13:55 (4 weeks ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇩🇪 LRob	2026-08-19 00:35:49 (4 weeks ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /17-vtt \| query: q=Famille-Aspect-Rallon-Contrail&resultsPerPage=12 show less	DDoS Attack Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.176.29.10

🇺🇸 184.186.73.85

🇺🇸 158.51.96.38

🇲🇽 153.67.123.136

🇧🇷 131.161.249.165

🇸🇬 101.47.24.239

🇷🇺 92.241.230.127

🇬🇧 87.236.176.77

🇬🇧 87.236.176.17

🇷🇺 85.30.248.213

🇩🇪 69.5.169.186

🇺🇸 66.132.186.186

🇺🇸 64.62.197.28

🇭🇰 45.138.12.16

🇮🇩 36.93.144.74

🇺🇸 20.55.101.35

🇧🇪 198.235.24.170

🇹🇼 198.235.24.54

🇩🇪 195.230.103.242

🇬🇧 195.96.139.92