JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.70.75.118

166.70.75.118 was found in our database!

This IP was reported 106 times. Confidence of Abuse is 98%: ?

98%

ISP	XMission, L.C.
Usage Type	Fixed Line ISP
ASN	AS6315
Hostname(s)	166-70-75-118.utopia.xmission.net
Domain Name	xmission.com
Country	🇺🇸 United States of America
City	Orem, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.70.75.118

Whois 166.70.75.118

IP Abuse Reports for 166.70.75.118:

This IP address has been reported a total of 106 times from 48 distinct sources. 166.70.75.118 was first reported on May 23rd 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Hagen Schoebel	2026-09-01 10:10:42 (4 hours ago)	Blocked by CrowdSec - anomaly score block: anomaly: 5, (US)	Port Scan Brute-Force Web App Attack SSH
🇩🇪 4server	2026-09-01 08:58:15 (5 hours ago)	[TueSep0110:58:09.5899512026][security2:error][pid3948438:tid3948472][client166.70.75.118:0]ModSecur ... show more [TueSep0110:58:09.5899512026][security2:error][pid3948438:tid3948472][client166.70.75.118:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"kvsm-blackstone.com\"][uri\"/\"][unique_id\"apaToeNJ-iExWtnL4dyp6wAAABc\"] show less	Port Scan Brute-Force Web App Attack
🇨🇭 4server	2026-09-01 04:47:38 (10 hours ago)	[TueSep0106:47:34.0944862026][security2:error][pid1796811:tid1796849][client166.70.75.118:0]ModSecur ... show more [TueSep0106:47:34.0944862026][security2:error][pid1796811:tid1796849][client166.70.75.118:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"motogiro.com\"][uri\"/\"][unique_id\"apZY5so2XC-wo6QnmY5uZwAAAEw\"] show less	Hacking Web App Attack
🇨🇦 lakered	2026-09-01 04:35:58 (10 hours ago)	Detectors: [NGINX] \| Reasons: Nginx: Repeat offender returning to default/inactive vhost after previ ... show more Detectors: [NGINX] \| Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban \| Evidence: Repeat-Offender (Past Bans: 1) \| UA: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_8; es-es) AppleWebKit/533.21.1 (KHTML, like Gecko) Version/5.0.5 Safari/533.21.1 \| TCP Fingerprint: macOS / iOS (Apple) (Link:PPPoE, Uptime:0m) show less	Port Scan Web App Attack
🇩🇪 4server	2026-08-31 08:32:01 (1 day ago)	[MonAug3110:31:59.4791022026][security2:error][pid2429057:tid2429171][client166.70.75.118:0]ModSecur ... show more [MonAug3110:31:59.4791022026][security2:error][pid2429057:tid2429171][client166.70.75.118:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ecosuber.com\"][uri\"/\"][unique_id\"apU7_9IhtVkO0prYLlKo4AAAAQI\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-08-31 08:12:17 (1 day ago)	Unauthorized access (443/tcp/https)	Port Scan Web App Attack
🇺🇸 Victor López	2026-08-31 03:45:58 (1 day ago)	empresarioexpress.com 166.70.75.118 - - [30/Aug/2026:22:45:56 -0500] "GET / HTTP/1.1" 444 0 "-" "Moz ... show more empresarioexpress.com 166.70.75.118 - - [30/Aug/2026:22:45:56 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15" - empresarioexpress.com 166.70.75.118 - - [30/Aug/2026:22:45:58 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Safari/605.1.15" - empresarioexpress.com 166.70.75.118 - - [30/Aug/2026:22:45:58 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11) AppleWebKit/617.29 (KHTML, like Gecko) Version/17.7 Safari/617.29" - ... show less	Hacking Web App Attack
🇪🇸 librebit	2026-08-31 02:54:49 (1 day ago)	Brute force	Brute-Force
🇨🇭 4server	2026-08-30 23:11:29 (1 day ago)	[MonAug3101:11:21.6868122026][security2:error][pid148320:tid148575][client166.70.75.118:0]ModSecurit ... show more [MonAug3101:11:21.6868122026][security2:error][pid148320:tid148575][client166.70.75.118:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"executivekotech.com\"][uri\"/\"][unique_id\"apS4mSCOukus4ZR1slNI6gAAAEA\"] show less	Hacking Web App Attack
Anonymous	2026-08-30 20:05:22 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇮🇩 Burayot	2026-08-29 22:33:15 (2 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 166.70.75.118 (US/United States/166- ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 166.70.75.118 (US/United States/166-70-75-118.utopia.xmission.net): 1 in the last 3600 secs show less	Web App Attack
🇨🇭 4server	2026-08-29 09:22:09 (3 days ago)	[SatAug2911:22:02.1487792026][security2:error][pid1265797:tid1266338][client166.70.75.118:0]ModSecur ... show more [SatAug2911:22:02.1487792026][security2:error][pid1265797:tid1266338][client166.70.75.118:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"4-server.com\"][uri\"/\"][unique_id\"apKkuki1Q4qszs8ZnUr5-QAAARY\"] show less	Hacking Web App Attack
🇨🇭 4server	2026-08-28 11:39:44 (4 days ago)	[FriAug2813:39:41.3129802026][security2:error][pid1195203:tid1195546][client166.70.75.118:0]ModSecur ... show more [FriAug2813:39:41.3129802026][security2:error][pid1195203:tid1195546][client166.70.75.118:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hosting-ticino-svizzera.com\"][uri\"/\"][unique_id\"apFzffUSLwwBV3aNlameFQAAARI\"] show less	Hacking Web App Attack
🇪🇸 librebit	2026-08-28 09:40:47 (4 days ago)	Brute force	Brute-Force
🇩🇪 4server	2026-08-28 05:07:35 (4 days ago)	[FriAug2807:07:29.9429282026][security2:error][pid2179609:tid2179689][client166.70.75.118:0]ModSecur ... show more [FriAug2807:07:29.9429282026][security2:error][pid2179609:tid2179689][client166.70.75.118:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"worldgoldfundltd.com\"][uri\"/\"][unique_id\"apEXkTD-Zu5N1EWZJS4InQAAAdM\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 106 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2a00:1d20:49:1:9999::197

🇰🇷 211.240.117.75

🇬🇧 178.128.168.137

🇺🇸 167.172.119.80

🇵🇰 139.135.60.177

🇲🇲 103.59.163.132

🇫🇷 94.23.66.112

🇨🇳 27.25.75.177

🇺🇸 4.148.240.188

🇳🇱 2a00:1450:4013:c06::12a

🇸🇬 2400:8901::2000:1cff:fe98:2fbe

🇰🇷 223.194.21.240

🇺🇸 162.216.149.124

🇵🇱 109.205.211.123

🇺🇸 89.19.35.251

🇧🇬 78.128.112.30

🇳🇱 45.148.10.157

🇨🇳 8.129.229.164

🇰🇷 222.116.34.23

🇨🇳 211.103.219.51