AbuseIPDB » 66.135.4.153

66.135.4.153 was found in our database!

This IP was reported 3 times. Confidence of Abuse is 11%: ?

11%

ISP	Vultr Holdings, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	66-135-4-153.lum-int.io
Domain Name	vultr.com
Country	United States of America
City	Piscataway, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 66.135.4.153

Whois 66.135.4.153

IP Abuse Reports for 66.135.4.153:

This IP address has been reported a total of 3 times from 3 distinct sources. 66.135.4.153 was first reported on March 7th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-06-16 11:13:31 (1 week ago)	Fail2ban block	Brute-Force Exploited Host Web App Attack
Anonymous	2025-06-10 02:31:08 (2 weeks ago)	Web Scanning Attack to Multiple Domain	DDoS Attack Ping of Death Web Spam SQL Injection
TPI-Abuse	2025-03-07 02:53:38 (3 months ago)	(mod_security) mod_security (id:218420) triggered by 66.135.4.153 (66-135-4-153.lum-int.io): 1 in th ... show more(mod_security) mod_security (id:218420) triggered by 66.135.4.153 (66-135-4-153.lum-int.io): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 21:53:31.558226 2025] [security2:error] [pid 29218:tid 29218] [client 66.135.4.153:38786] [client 66.135.4.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||192.64.150.199|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:-d allow_url_include=on -d auto_prepend_file=php://input: -d allow_url_include=on -d auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.199"] [uri "/index.php"] [unique_id "Z8pfq8MgM7fCPK4OSPJ06AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩