JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 51.158.206.25

51.158.206.25 was found in our database!

This IP was reported 112 times. Confidence of Abuse is 92%: ?

92%

ISP	Scaleway - Amsterdam, Netherlands
Usage Type	Data Center/Web Hosting/Transit
ASN	AS12876
Hostname(s)	86cf0bcc-2e68-4b99-8141-3b68a09c40ea.nl-ams-1.baremetal.scw.cloud
Domain Name	scaleway.com
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 51.158.206.25

Whois 51.158.206.25

IP Abuse Reports for 51.158.206.25:

This IP address has been reported a total of 112 times from 55 distinct sources. 51.158.206.25 was first reported on April 27th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-20 15:59:19 (9 hours ago)	(mod_security) mod_security (id:210730) triggered by 51.158.206.25 (86cf0bcc-2e68-4b99-8141-3b68a09c ... show more (mod_security) mod_security (id:210730) triggered by 51.158.206.25 (86cf0bcc-2e68-4b99-8141-3b68a09c40ea.nl-ams-1.baremetal.scw.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:59:14.783618 2026] [security2:error] [pid 8328:tid 8328] [client 51.158.206.25:32602] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|oakleighfarm.com\|F\|2"] [data ".pkg_sourcerer.sys.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oakleighfarm.com"] [uri "/language/en-GB/en-GB.pkg_sourcerer.sys.ini"] [unique_id "arAC0hPIQ4hq37NzlkdFJgAAABE"], referer: https://oakleighfarm.com/administrator/manifests/packages/pkg_sourcerer.xml show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 neron	2026-09-18 19:09:32 (2 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 LRob	2026-09-17 12:57:54 (3 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-content/plugins/wpmudev-updates/changelog.txt \| 2026-09-17 12:57 UTC show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-17 10:39:26 (3 days ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 cwytech	2026-09-12 08:12:18 (1 week ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇹🇷 neron	2026-09-12 06:55:32 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 conseilgouz	2026-09-10 23:03:51 (1 week ago)	ave-Joomla Admin : try to force the door...	Hacking
🇩🇪 LRob	2026-09-10 19:37:42 (1 week ago)	Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ... show more Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for \| method: GET \| path: / \| 2026-09-10 19:37 UTC show less	Bad Web Bot
Anonymous	2026-09-10 18:05:14 (1 week ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-10 17:39:40 (1 week ago)	[10/Sep/2026:20:39:39 +0300] -- 51.158.206.25 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-c ... show more [10/Sep/2026:20:39:39 +0300] -- 51.158.206.25 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1 show less	Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-10 16:35:08 (1 week ago)	[ThuSep1018:35:04.7770182026][security2:error][pid515851:tid515958][client51.158.206.25:0]ModSecurit ... show more [ThuSep1018:35:04.7770182026][security2:error][pid515851:tid515958][client51.158.206.25:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"maurokorangraf.ch\"][uri\"/components/com_rsfiles/assets/css/style.css\"][unique_id\"aqLcOJVOlTNgOUoopi-0MQAAAUA\"] show less	Port Scan Brute-Force Web App Attack
🇳🇱 Savvii	2026-09-10 15:38:53 (1 week ago)	20 attempts against mh-misbehave-ban on frost	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-10 14:57:45 (1 week ago)	[ThuSep1016:57:38.2349072026][security2:error][pid3111440:tid3111631][client51.158.206.25:0]ModSecur ... show more [ThuSep1016:57:38.2349072026][security2:error][pid3111440:tid3111631][client51.158.206.25:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"swiss-domain-name.ch\"][uri\"/media/sourcerer/js/popup.js\"][unique_id\"aqLFYufYSDpU4ekkl4AViQAAAIs\"] show less	Hacking Web App Attack
🇫🇷 conseilgouz	2026-09-10 13:35:02 (1 week ago)	hae-Joomla Admin : try to force the door...	Hacking
🇫🇷 conseilgouz	2026-09-10 13:04:17 (1 week ago)	sce-Joomla Admin : try to force the door...	Hacking

Showing 1 to 15 of 112 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇸 212.33.115.6

🇦🇷 200.50.155.14

🇧🇷 186.232.71.250

🇯🇵 160.251.202.50

🇺🇸 98.168.101.144

🇫🇷 91.196.152.241

🇺🇸 2604:a880:400:d1:0:5:2a3:8001

🇺🇸 205.210.31.91

🇺🇸 205.210.31.84

🇺🇸 205.210.31.73

🇺🇸 205.210.31.69

🇲🇾 203.106.78.211

🇨🇱 201.222.235.152

🇷🇴 195.58.146.31

🇫🇷 188.165.131.202

🇦🇷 181.118.65.185

🇺🇸 173.255.223.115

🇺🇸 172.234.21.101

🇸🇬 152.42.221.98

🇸🇬 129.150.44.191