JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 151.245.116.230

151.245.116.230 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 27%: ?

27%

ISP	IPXO
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209854
Domain Name	diamondipbrokers.com
Country	🇭🇷 Croatia
City	Zagreb, Zagreb

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 151.245.116.230

Whois 151.245.116.230

IP Abuse Reports for 151.245.116.230:

This IP address has been reported a total of 23 times from 15 distinct sources. 151.245.116.230 was first reported on March 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Luis Fernando Camargo	2026-06-11 23:01:11 (1 week ago)	Honeytrapped	Port Scan Brute-Force
🇹🇷 Threat.live	2026-06-11 08:15:02 (1 week ago)	Suspicious Connection Attempts	Brute-Force
🇩🇪 EGP Abuse Dept	2026-06-11 03:51:29 (1 week ago)	Scanning for port/service exploits on tpc-029.mach3builders.nl	Port Scan Hacking
🇬🇧 consul.to	2026-05-09 02:32:22 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 xmission.com	2026-05-08 19:22:21 (1 month ago)	151.245.116.230 - - [08/May/2026:13:22:20 -0600] "POST /wp-login.php HTTP/1.1" 301 162 "https://dooc ... show more 151.245.116.230 - - [08/May/2026:13:22:20 -0600] "POST /wp-login.php HTTP/1.1" 301 162 "https://dooce.net/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Brute-Force
🇩🇪 LRob.fr	2026-04-23 07:30:04 (1 month ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-19 10:40:52 (2 months ago)	(mod_security) mod_security (id:240000) triggered by 151.245.116.230 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 151.245.116.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 19 06:40:47.744787 2026] [security2:error] [pid 3706724:tid 3706724] [client 151.245.116.230:33936] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|mprise.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "mprise.com"] [uri "/images/stories/themes.php"] [unique_id "aeSxL3ZLg73YiLGS_ulcuAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bitblockit	2026-04-17 17:50:10 (2 months ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 52371/tcp. Observed event time: 2026-04-17 17:50:10 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 bitblockit	2026-04-17 17:47:04 (2 months ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 52371/tcp. Observed event time: 2026-04-17 17:47:04 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 ipblock.com	2026-04-13 15:47:00 (2 months ago)	IPBlock protected site ID [4055-d][s=02]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-04-11 18:33:06 (2 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-04-11 15:42:32 (2 months ago)	(mod_security) mod_security (id:240000) triggered by 151.245.116.230 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240000) triggered by 151.245.116.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 11 11:42:27.590348 2026] [security2:error] [pid 465877:tid 465877] [client 151.245.116.230:47678] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|1healthplace.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "1healthplace.com"] [uri "/images/stories/themes.php"] [unique_id "adpr4zS_fIUDqiE_HUxFowAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-04-10 08:29:21 (2 months ago)	Scanning for web/db/file exploits on www.frelu.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 stechusa	2026-04-09 12:15:52 (2 months ago)	[Askari] \| Behavior: Holding server worker, HTTP/1.1 over TLS, Targeting specific pages, Outdated br ... show more [Askari] \| Behavior: Holding server worker, HTTP/1.1 over TLS, Targeting specific pages, Outdated browser, Concurrent page load during attack show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-04-09 12:15:52 (2 months ago)	ELEVATED_THREAT \| 9 IPs targeting /brand/access-lighting/led-lighting.html \| Facet request during el ... show more ELEVATED_THREAT \| 9 IPs targeting /brand/access-lighting/led-lighting.html \| Facet request during elevated threat (facet_ratio=0.66, unique_ips=343) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.48

🇺🇸 76.157.106.210

🇺🇸 198.98.53.114

🇦🇷 191.241.142.170

🇵🇪 190.223.60.209

🇵🇱 178.219.98.246

🇧🇷 177.155.133.175

🇯🇵 160.251.185.39

🇨🇳 123.144.25.29

🇷🇴 80.94.92.165

🇩🇪 64.226.107.125

🇮🇳 52.172.177.191

🇺🇸 44.178.24.127

🇷🇴 2.57.121.112

🇺🇸 2604:a880:400:d1:0:4:9e90:7001

🇧🇪 198.235.24.150

🇵🇰 103.66.148.82

🇿🇦 102.182.241.186

🇺🇦 91.210.251.237

🇱🇹 77.90.185.78