This IP address has been reported a total of
7
times from
5 distinct
sources.
151.158.52.183 was first reported on
March 14th 2026 , and the most recent report was
1 day ago Switzerland
with 1
report.
The most common categories in these recent reports were:
Exploited Host
1
time;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
ALPHANET
2026-10-05 02:38:52
(1 day ago)
Botnet or web spider not respecting robots.txt
DDoS Attack
Exploited Host
🇦🇺
screwlooseit.com.au
2026-08-06 07:54:54
(2 months ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
dynamic.nextgenbroadband.in
Web App Attack
🇺🇸
TPI-Abuse
2026-08-06 05:14:17
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 151.158.52.183 (dynamic.nextgenbroadband.in): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.52.183 (dynamic.nextgenbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 06 01:14:09.146108 2026] [security2:error] [pid 390672:tid 390672] [client 151.158.52.183:12118] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.52.183 (+1 hits since last alert)|desertalfas.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "desertalfas.org"] [uri "/xmlrpc.php"] [unique_id "anQYIQ_OjMAVJMRI_zAaNwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 02:35:33
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 151.158.52.183 (dynamic.nextgenbroadband.in): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.52.183 (dynamic.nextgenbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 22:35:25.013948 2026] [security2:error] [pid 32190:tid 32209] [client 151.158.52.183:59844] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.52.183 (+1 hits since last alert)|travelusa.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "travelusa.us"] [uri "/xmlrpc.php"] [unique_id "akcf7VOoL1oZydYhEfidfAAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 11:09:05
(3 months ago)
(mod_security) mod_security (id:240335) triggered by 151.158.52.183 (dynamic.nextgenbroadband.in): 1 ...
show more
(mod_security) mod_security (id:240335) triggered by 151.158.52.183 (dynamic.nextgenbroadband.in): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 07:08:58.081134 2026] [security2:error] [pid 19765:tid 19765] [client 151.158.52.183:38141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 151.158.52.183 (+1 hits since last alert)|fgrotary.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fgrotary.org"] [uri "/xmlrpc.php"] [unique_id "ajkXylHjmXdxAMv16AawwwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
factor1
2026-03-16 15:26:31
(6 months ago)
Fail2ban at saturn Reports Abuse.
Brute-Force
Web App Attack
2026-03-14 12:52:20
(6 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show more
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
show less
Exploited Host
Bad Web Bot
Showing 1 to
7
of 7 reports
