JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 151.115.52.19

151.115.52.19 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 48%: ?

48%

ISP	Warsaw, Poland
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12876
Hostname(s)	19-52-115-151.rev.scw.cloud
Domain Name	scaleway.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 151.115.52.19

Whois 151.115.52.19

IP Abuse Reports for 151.115.52.19:

This IP address has been reported a total of 62 times from 20 distinct sources. 151.115.52.19 was first reported on April 21st 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 _ArminS_	2026-09-26 10:41:47 (4 days ago)	WEB-Scan 52714:80 detected 2026.09.26 12:41:47 blocked until 2026.11.15 04:44:34	Port Scan
🇩🇪 4server	2026-09-25 05:34:38 (5 days ago)	[FriSep2507:34:35.6252652026][security2:error][pid460550:tid460650][client151.115.52.19:0]ModSecurit ... show more [FriSep2507:34:35.6252652026][security2:error][pid460550:tid460650][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"traslocaresubito.ch\"][uri\"/\"][unique_id\"arYH642ttr5YnayPcQcdLAAAAM0\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-09-23 19:05:13 (1 week ago)	[Thu Sep 24 05:05:12.930470 2026] [security2:error] [pid 415544] [client 151.115.52.19:41740] [clien ... show more [Thu Sep 24 05:05:12.930470 2026] [security2:error] [pid 415544] [client 151.115.52.19:41740] [client 151.115.52.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "winesbydesign.com.au"] [uri "/"] [unique_id "arQi6DdfUiUzftWN9Rj4NQAAAA8"] ... show less	Web App Attack
🇩🇪 4server	2026-09-23 12:25:17 (1 week ago)	[WedSep2314:25:14.6460872026][security2:error][pid2189776:tid2189811][client151.115.52.19:0]ModSecur ... show more [WedSep2314:25:14.6460872026][security2:error][pid2189776:tid2189811][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rebirthing-lugano.ch\"][uri\"/\"][unique_id\"arPFKhIjpyNVzPfLq9UcywAAABg\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 12:55:52 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 151.115.52.19 (19-52-115-151.instances.scw.clou ... show more (mod_security) mod_security (id:210730) triggered by 151.115.52.19 (19-52-115-151.instances.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:55:48.112570 2026] [security2:error] [pid 7898:tid 7898] [client 151.115.52.19:35884] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.azcrittergetter.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.azcrittergetter.com"] [uri "/csfitz.com"] [unique_id "arJ61IkWBRuTIxdAIDFNnAAAAAM"], referer: http://csfitz.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-22 03:55:24 (1 week ago)	[TueSep2205:55:20.8070382026][security2:error][pid203469:tid203581][client151.115.52.19:0]ModSecurit ... show more [TueSep2205:55:20.8070382026][security2:error][pid203469:tid203581][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"formet.ch\"][uri\"/\"][unique_id\"arH8KGIkXcMuk1afexkB3wAAAMk\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-09-21 08:14:23 (1 week ago)	[MonSep2110:14:16.6110452026][security2:error][pid1636875:tid1637002][client151.115.52.19:0]ModSecur ... show more [MonSep2110:14:16.6110452026][security2:error][pid1636875:tid1637002][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"xn--sanierung-alter-huser-schweiz-hqc.ch\"][uri\"/\"][unique_id\"arDnWCmRsKqlZeSfCQb9oAAAAVg\"] show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-09-20 19:47:23 (1 week ago)	[Mon Sep 21 05:47:22.481041 2026] [security2:error] [pid 18826] [client 151.115.52.19:44078] [client ... show more [Mon Sep 21 05:47:22.481041 2026] [security2:error] [pid 18826] [client 151.115.52.19:44078] [client 151.115.52.19] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/"] [unique_id "arA4SpPuRifWwP7gqLDoqwAAABQ"] ... show less	Web App Attack
🇩🇪 LRob	2026-09-20 17:41:30 (1 week ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-20 17:41 UTC show less	Bad Web Bot
🇩🇪 4server	2026-09-20 10:00:30 (1 week ago)	[SunSep2012:00:29.2593732026][security2:error][pid1939580:tid1939655][client151.115.52.19:0]ModSecur ... show more [SunSep2012:00:29.2593732026][security2:error][pid1939580:tid1939655][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"viveretrentino.it\"][uri\"/\"][unique_id\"aq-uvWCJIDqAiFwICnzb_QAAAIQ\"] show less	Port Scan Brute-Force Web App Attack
🇬🇧 gigatech	2026-09-20 06:15:03 (1 week ago)	Webserver Probing	Web App Attack
🇫🇷 cityhunter_rhone	2026-09-19 10:06:07 (1 week ago)	Fail2Ban offender in jail [recidive] — 1 total attempts — tracked by mercurius-guide.com security sy ... show more Fail2Ban offender in jail [recidive] — 1 total attempts — tracked by mercurius-guide.com security system. show less	SSH Brute-Force
🇨🇭 4server	2026-09-03 23:27:41 (3 weeks ago)	[FriSep0401:27:38.2587972026][security2:error][pid2178289:tid2178422][client151.115.52.19:0]ModSecur ... show more [FriSep0401:27:38.2587972026][security2:error][pid2178289:tid2178422][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"creazione-siti-ticino.ch\"][uri\"/\"][unique_id\"apoCap1hqc5bnsywGllPEAAAABI\"] show less	Hacking Web App Attack
🇩🇪 4server	2026-09-03 17:01:48 (3 weeks ago)	[ThuSep0319:01:45.0799152026][security2:error][pid3195389:tid3195498][client151.115.52.19:0]ModSecur ... show more [ThuSep0319:01:45.0799152026][security2:error][pid3195389:tid3195498][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hopitalprovidence.org\"][uri\"/\"][unique_id\"apmn-Ro0_dEpAcaW2A53twAAAM4\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-09-02 18:10:16 (4 weeks ago)	[WedSep0220:10:11.0574882026][security2:error][pid675477:tid675623][client151.115.52.19:0]ModSecurit ... show more [WedSep0220:10:11.0574882026][security2:error][pid675477:tid675623][client151.115.52.19:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"swisservers.com\"][uri\"/\"][unique_id\"aphmgwq9dGT0ALomasiBvgAAAAc\"] show less	Hacking Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.32.182.41

🇷🇴 92.118.39.77

🇺🇸 216.180.246.215

🇺🇸 216.180.246.36

🇳🇱 185.242.226.60

🇺🇸 162.35.102.24

🇩🇪 138.201.32.143

🇱🇹 62.60.130.242

🇩🇪 47.245.139.43

🇰🇿 5.180.42.23

🇰🇷 220.121.206.61

🇩🇪 93.152.221.37

🇦🇪 92.97.92.228

🇨🇦 45.194.92.97

🇨🇳 222.88.255.115

🇹🇭 203.154.158.195

🇨🇴 201.184.50.251

🇻🇳 183.91.186.36

🇺🇸 20.14.93.159

🇩🇪 213.209.159.208