JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

195.154.18.106

Neutral Activity

Abuse confidence score ?

0% Low Risk

78 reports

51 reporters · latest 2 years ago

ISP	Scaleway
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12876
Hostname(s)	106.96-27.18.154.195.in-addr.arpa web06.itols.com
Domain Name	scaleway.com
Country	🇫🇷 France
City	Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

195.154.18.106 has been reported 78 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 195.154.18.106

This IP address has been reported a total of 78 times from 51 distinct sources. 195.154.18.106 was first reported on July 3rd 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-09-03 13:33:37 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 03 09:33:29.935921 2024] [security2:error] [pid 30491:tid 30491] [client 195.154.18.106:60520] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rambleandprose.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rambleandprose.com"] [uri "/dump.sql"] [unique_id "ZtcQKZi3ZnJwdxwfyIrx1AAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-03 00:43:09 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 02 20:43:03.767753 2024] [security2:error] [pid 12018:tid 12018] [client 195.154.18.106:34272] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kairoslogammakmur.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kairoslogammakmur.com"] [uri "/dump.sql"] [unique_id "ZtZbl1-bhqWcYU5adeq7uwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-01 23:44:30 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 01 19:44:25.235203 2024] [security2:error] [pid 2199181:tid 2199181] [client 195.154.18.106:59554] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.letmespeakpodcast.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.letmespeakpodcast.com"] [uri "/dump.sql"] [unique_id "ZtT8WQDe6uJhc8fKzhV_jQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-01 17:46:55 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇳🇱 Roderic	2024-09-01 13:45:32 (2 years ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 195.154.18.106 (FR/Fra ... show more (apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 195.154.18.106 (FR/France/web06.itols.com) show less	Port Scan
🇦🇺 clapper	2024-08-31 05:59:09 (2 years ago)	(mod_security) mod_security (id:949110) triggered by 195.154.18.106 (FR/France/web06.itols.com): 5 i ... show more (mod_security) mod_security (id:949110) triggered by 195.154.18.106 (FR/France/web06.itols.com): 5 in the last 3600 secs; ID: rub show less	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2024-08-31 02:24:28 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 22:24:21.840144 2024] [security2:error] [pid 1243:tid 1243] [client 195.154.18.106:59536] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|engravingbyangela.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "engravingbyangela.com"] [uri "/dump.sql"] [unique_id "ZtJ-1fRvRVBGQ8oJkzOd5wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-30 14:22:55 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 10:22:50.487561 2024] [security2:error] [pid 2166:tid 2166] [client 195.154.18.106:38842] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|braunhausmedia.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "braunhausmedia.com"] [uri "/dump.sql"] [unique_id "ZtHVun4D-NbOwdQq19uzDgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-30 06:42:24 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 02:42:15.239007 2024] [security2:error] [pid 14242:tid 14242] [client 195.154.18.106:32962] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|epetsure.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "epetsure.co"] [uri "/dump.sql"] [unique_id "ZtFpxxmcGb4nGloLmYBepQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-30 00:06:05 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_MODSEC	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-08-29 18:05:28 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 29 14:05:20.675854 2024] [security2:error] [pid 27717:tid 27717] [client 195.154.18.106:58472] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|atidysort.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "atidysort.com"] [uri "/dump.sql"] [unique_id "ZtC4YLenrdQpESJkl0_oUQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-08-29 16:40:23 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.ar ... show more (mod_security) mod_security (id:210730) triggered by 195.154.18.106 (106.96-27.18.154.195.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 29 12:40:17.180545 2024] [security2:error] [pid 10687:tid 10687] [client 195.154.18.106:38442] [client 195.154.18.106] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|amyisms.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amyisms.com"] [uri "/dump.sql"] [unique_id "ZtCkcXhh9lvPlVhXNM3YFwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-08-25 00:12:03 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇧🇪 taivas.nl	2024-08-05 05:32:11 (2 years ago)	Bad_requests	Bad Web Bot
🇦🇺 MAGIC	2024-08-03 03:01:07 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.190.166.75

🇻🇳 115.78.226.174

🇷🇴 92.118.39.212

🇷🇴 92.118.39.211

🇵🇹 85.244.158.127

🇮🇳 59.179.31.237

🇬🇧 37.10.113.222

🇺🇸 216.126.237.47

🇪🇹 196.188.187.205

🇩🇪 194.88.98.118

🇳🇱 176.65.148.91

🇰🇭 119.13.156.89

🇷🇴 92.118.39.210

🇷🇴 92.118.39.209

🇳🇱 89.248.172.10

🇱🇹 81.30.98.207

🇧🇬 79.124.58.198

🇩🇪 69.5.169.155

🇯🇵 47.245.10.23

🇧🇪 34.140.181.58