This IP address has been reported a total of
8
times from
7 distinct
sources.
166.0.180.59 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 2
reports;
Italy
with 1
report.
The most common categories in these recent reports were:
Bad Web Bot
2
times;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban: 166.0.180.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ...
show moreFail2Ban: 166.0.180.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
2026-10-09T07:12:59 166.0.180.59 GET /Photos/Vacation/2016-01%20Kauai/raw/IMG_2041.CR2 Mozilla/5.0 ( ...
show more2026-10-09T07:12:59 166.0.180.59 GET /Photos/Vacation/2016-01%20Kauai/raw/IMG_2041.CR2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
...
show less
Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ...
show moreCoordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool.
show less
166.0.180.59 | Port: 11919 | DNS: 166-0-180-59.ips.acedatacenter.com 2026-05-30T11:13:33+08:00 Ameri ...
show more166.0.180.59 | Port: 11919 | DNS: 166-0-180-59.ips.acedatacenter.com 2026-05-30T11:13:33+08:00 America/Denver | DATA Data Center/Web Hosting/Transit Spam list | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 HTTP/1.1 443 GET | URL: /birthday-cakes/cake-for-man/ | Ref: - | Country: US/United States/-08:00 IP City: Orem macOS a03a90407de6090a-LAX/Los Angeles, CA, United States 1 hits/0 secs Browser 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
Cloudflare WAF: Request Path: /analisis_y_diseno_de_malware/como_quitar_el_mensaje_estableciendo_una ...
show moreCloudflare WAF: Request Path: /analisis_y_diseno_de_malware/como_quitar_el_mensaje_estableciendo_una_configuracion_personalizada_para-t419055.0.html Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Action: managed_challenge Source: firewallCustom ASN Description: Ace Data Centers, Inc. Country: US Method: GET Timestamp: 2026-05-19T11:46:29Z ruleId: 0d02bf0901634311802a66d604909a6a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
166.0.180.59 - - [25/Oct/2025:08:41:37 +0200] "GET /wp-json/wp/v2/users/47 HTTP/1.1" "Mozilla/5.0 (M ...
show more166.0.180.59 - - [25/Oct/2025:08:41:37 +0200] "GET /wp-json/wp/v2/users/47 HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.10 Safari/605.1.1"
show less
VPN IP
Hacking
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
