JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 151.115.166.18

151.115.166.18 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 75%: ?

75%

ISP	Milan, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12876
Hostname(s)	18-166-115-151.rev.scw.cloud
Domain Name	collegiotecniciacciaio.it
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 151.115.166.18

Whois 151.115.166.18

IP Abuse Reports for 151.115.166.18:

This IP address has been reported a total of 34 times from 13 distinct sources. 151.115.166.18 was first reported on July 20th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-22 20:31:05 (7 hours ago)	(mod_security) mod_security (id:210730) triggered by 151.115.166.18 (18-166-115-151.rev.scw.cloud): ... show more (mod_security) mod_security (id:210730) triggered by 151.115.166.18 (18-166-115-151.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 16:31:00.592816 2026] [security2:error] [pid 1929305:tid 1929312] [client 151.115.166.18:51706] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ecothermtech.com\|F\|2"] [data ".astroid.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ecothermtech.com"] [uri "/language/en-GB/en-GB.astroid.ini"] [unique_id "amEohFTCaWJkL8RD2dKVXQAAAEU"], referer: http://ecothermtech.com/media/astroid/css/debug.css show less	Brute-Force Bad Web Bot Web App Attack
🇸🇮 administrator	2026-07-22 20:13:31 (8 hours ago)	2026-07-22 22:13:30,328 fail2ban.actions [1132]: NOTICE [error-bots] Ban 151.115.166.18 2026 ... show more 2026-07-22 22:13:30,328 fail2ban.actions [1132]: NOTICE [error-bots] Ban 151.115.166.18 2026-07-22 22:13:30,329 fail2ban.actions [1132]: NOTICE [apache-badbots] Ban 151.115.166.18 2026-07-22 22:13:30,329 fail2ban.actions [1132]: NOTICE [apache-botsearch] Ban 151.115.166.18 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇳🇱 Savvii	2026-07-22 20:13:28 (8 hours ago)	20 attempts against mh-misbehave-ban on yeti	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-22 18:32:58 (9 hours ago)	20 attempts against mh-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sverson	2026-07-22 17:01:07 (11 hours ago)	Abusive use detected / Unauthorized login attempts	Hacking Brute-Force
🇮🇩 Burayot	2026-07-22 12:45:37 (15 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 151.115.166.18 (IT/Italy/18-166-115- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 151.115.166.18 (IT/Italy/18-166-115-151.rev.scw.cloud): 2 in the last 3600 secs show less	Web App Attack
🇿🇦 conure	2026-07-22 12:11:17 (16 hours ago)	csagent: score 20.1: php 404 x3, 404 noise floor x3, php in uploads x1; 5 domain(s) in 18s	Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 11:04:14 (17 hours ago)	(mod_security) mod_security (id:210730) triggered by 151.115.166.18 (18-166-115-151.rev.scw.cloud): ... show more (mod_security) mod_security (id:210730) triggered by 151.115.166.18 (18-166-115-151.rev.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 07:04:09.107212 2026] [security2:error] [pid 1320968:tid 1320968] [client 151.115.166.18:42998] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|deserttrails.net\|F\|2"] [data ".astroid.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deserttrails.net"] [uri "/language/en-GB/en-GB.astroid.ini"] [unique_id "amCjqbJuGCBUgcwLyKUDlAAAAA0"], referer: http://deserttrails.net/media/astroid/css/debug.css show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-22 06:06:21 (22 hours ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 151.115.166.18 (IT/Italy/18-166-115- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 151.115.166.18 (IT/Italy/18-166-115-151.rev.scw.cloud): 1 in the last 3600 secs show less	Web App Attack
🇿🇦 conure	2026-07-22 04:30:00 (1 day ago)	csagent: score 15.2: php 404 x3, 404 noise floor x3, php in uploads x1; 1 domain(s) in 0s	Web App Attack
🇩🇪 4server	2026-07-22 03:47:13 (1 day ago)	[WedJul2205:47:11.3627102026][security2:error][pid3720024:tid3720129][client151.115.166.18:0]ModSecu ... show more [WedJul2205:47:11.3627102026][security2:error][pid3720024:tid3720129][client151.115.166.18:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"cxservices.ch\"][uri\"/\"][unique_id\"amA9P0ecY6Hqzzv1xNoX7gAAAAs\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 Savvii	2026-07-22 03:21:46 (1 day ago)	15 attempts against mh-modsecurity-ban on yeti	Brute-Force Web App Attack
🇳🇱 Savvii	2026-07-22 00:27:11 (1 day ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-07-21 23:45:42 (1 day ago)	ave-Joomla Admin : try to force the door...	Hacking
🇩🇪 conseilgouz	2026-07-21 22:29:31 (1 day ago)	coe-Joomla Admin : try to force the door...	Hacking

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 213.225.14.121

🇺🇸 159.65.45.172

🇺🇸 147.185.132.94

🇺🇸 134.122.13.252

🇻🇳 14.252.120.89

🇺🇸 205.210.31.31

🇺🇸 192.210.192.220

🇺🇸 162.216.150.68

🇵🇰 153.117.5.33

🇦🇹 152.53.0.56

🇫🇮 147.185.133.217

🇨🇳 117.175.140.121

🇺🇸 65.49.1.119

🇰🇷 61.76.112.4

🇩🇪 57.129.48.19

🇮🇶 37.238.103.176

🇨🇳 36.154.15.210

🇻🇳 203.210.240.63

🇺🇸 186.179.14.249

🇮🇶 185.158.22.150