JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.86.18

66.56.86.18 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 0%: ?

ISP	VPN Consumer Bratislava, Slovakia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇸🇰 Slovakia
City	Bratislava, Bratislava Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.86.18

Whois 66.56.86.18

IP Abuse Reports for 66.56.86.18:

This IP address has been reported a total of 154 times from 39 distinct sources. 66.56.86.18 was first reported on April 14th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 r3versedk	2026-03-15 08:55:40 (4 months ago)	🛡️ Automated Threat Report from maxjensen.dk 🎯 Attack Type: Botnet Fingerprint 🚨 Severity: CRITICAL ... show more 🛡️ Automated Threat Report from maxjensen.dk 🎯 Attack Type: Botnet Fingerprint 🚨 Severity: CRITICAL 📊 Threat Score: 95/100 📈 Total Attacks: 404 (database verified, seen over today) 🔍 Peak Score: 95/100 🎯 Common Types: Botnet Fingerprint(1x) 🔍 Fingerprint: 9f96b00ce11bc787 🤖 AI/ML: 🤝 Multi-Model Consensus (neural-network, q-learning, gpt) - 🧠 NN (55%): block (95.9%) \| 🎮 QL (23%): block (75.0%) \| 🤖 Claude (23%): monitor (70.0%) \| ⚖️ dynamic+boosted weights... Detected: 2026-03-15T08:55:40.933Z show less	Bad Web Bot
🇯🇵 Valhalla	2026-03-14 21:18:09 (4 months ago)	/bak/public_html.zip	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-11 15:13:03 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 11:12:58.783569 2026] [security2:error] [pid 687:tid 687] [client 66.56.86.18:61903] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.pcga.golf\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.pcga.golf"] [uri "/old/wallet.dat"] [unique_id "abGGehXoXRCxjVoh4AAHCQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-03-02 00:01:57 (4 months ago)	/backups/public_html.gz	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-03-01 23:34:14 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 01 18:34:06.112833 2026] [security2:error] [pid 16096:tid 16096] [client 66.56.86.18:46575] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcointradingsquare.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointradingsquare.com"] [uri "/bak/www.sql"] [unique_id "aaTM7ksIJ_phHPSAVj9XmAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Sylvyon	2026-03-01 14:35:01 (4 months ago)	Triggered Cloudflare WAF (firewallCustom) from SK. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint ... show more Triggered Cloudflare WAF (firewallCustom) from SK. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: / \| UA: Empty string • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-27 06:03:58 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 01:03:49.660116 2026] [security2:error] [pid 13443:tid 13443] [client 66.56.86.18:26201] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jussetcotradinglimited.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jussetcotradinglimited.co"] [uri "/restore/backup.sql"] [unique_id "aaEzxVuNB5NdMBsORcu8XAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-16 10:32:43 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 16 05:32:36.857173 2026] [security2:error] [pid 9957:tid 9957] [client 66.56.86.18:61809] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kwtlaw.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kwtlaw.com"] [uri "/backup.sql"] [unique_id "aZLyRLfgIRvoqY9nKgtWAAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 blinx	2026-02-16 09:45:11 (5 months ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 13:36:23 (5 months ago)	(mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 66.56.86.18 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 08:36:18.328958 2026] [security2:error] [pid 878:tid 878] [client 66.56.86.18:25829] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cryptofructo.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cryptofructo.com"] [uri "/restore/backup.sql"] [unique_id "aZB6UmKKjeNoevGH_KyctwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-06 14:52:16 (5 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇩🇪 bescared	2026-02-04 02:45:37 (5 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-02-02 04:13:59 (5 months ago)	/back/wallet.dat	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-01-27 23:04:28 (5 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 Penny Packer	2026-01-22 08:36:25 (6 months ago)	Fail2Ban apache-tripwires	Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:2:d1:0:1:6aaf:c001

🇬🇧 2400:cb00:989:1000:fa66:4c64:ef4c:9481

🇬🇧 193.176.29.15

🇺🇦 185.228.105.4

🇬🇧 185.216.145.180

🇨🇳 183.159.202.83

🇮🇳 152.58.42.161

🇻🇳 124.158.10.21

🇨🇳 120.26.200.188

🇺🇸 104.22.95.75

🇦🇿 89.147.194.166

🇹🇷 85.105.24.58

🇬🇧 81.19.219.240

🇱🇹 77.90.185.203

🇵🇱 57.128.223.80

🇸🇬 47.82.9.48

🇺🇸 45.194.67.29

🇺🇸 45.91.81.111

🇸🇳 41.214.55.235

🇧🇪 34.38.20.1