JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.152.161.153

213.152.161.153 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 11%: ?

11%

ISP	AirVPN.org
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49453
Domain Name	airvpn.org
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.152.161.153

Whois 213.152.161.153

IP Abuse Reports for 213.152.161.153:

This IP address has been reported a total of 33 times from 17 distinct sources. 213.152.161.153 was first reported on November 26th 2025, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 solution.it	2026-07-23 22:54:00 (16 hours ago)	[Fri Jul 24 00:53:59.484880 2026] [php7:error] [pid 913883:tid 913883] [client 213.152.161.153:50964 ... show more [Fri Jul 24 00:53:59.484880 2026] [php7:error] [pid 913883:tid 913883] [client 213.152.161.153:50964] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇨🇳 pengpeng	2026-06-10 07:12:11 (1 month ago)	monitor: on VM-0-7-ubuntu \| port: 13995 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 13995 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-05-20 15:27:59 (2 months ago)	Blocked by UFW (TCP on 41333) Source port: 38445 TTL: 48 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 41333) Source port: 38445 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 213.152.161.153) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-04-29 04:37:59 (2 months ago)	Try to connect to Port_Scan_8888_stealth	Port Scan
🇺🇸 MPL	2026-03-31 22:28:33 (3 months ago)	tcp/951 (2 or more attempts)	Port Scan
🇩🇪 centurion	2026-03-31 22:25:38 (3 months ago)	Blocked by UFW on ns02 [790/tcp] Source port: 50304 TTL: 244 Packet length: 40 TOS: 0x00 This repor ... show more Blocked by UFW on ns02 [790/tcp] Source port: 50304 TTL: 244 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 ICS Labs	2026-03-30 16:06:33 (3 months ago)	ICS Labs Firewall blocked outbound connection from host to known malware IP 213.152.161.153:2478 (Ne ... show more ICS Labs Firewall blocked outbound connection from host to known malware IP 213.152.161.153:2478 (Netherlands). show less	Hacking Exploited Host
🇺🇸 Starburst SysOp Team	2026-03-24 16:56:49 (3 months ago)	Restricted File Access Attempt. Matched phrase "wp-config." at REQUEST_FILENAME. (930130-stl2-17)	Hacking Web App Attack
🇨🇳 pengpeng	2026-03-24 10:42:23 (4 months ago)	monitor: on VM-0-7-ubuntu \| port: 19283 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ... show more monitor: on VM-0-7-ubuntu \| port: 19283 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-03-21 02:59:25 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 213.152.161.153 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 213.152.161.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 22:58:25.076246 2026] [security2:error] [pid 29922:tid 29922] [client 213.152.161.153:34756] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail.modmove.com\|F\|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.modmove.com"] [uri "/app/etc/env.php.bak"] [unique_id "ab4JUHFccyQQ0bU8qbUu8wAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 Starburst SysOp Team	2026-03-17 17:41:29 (4 months ago)	Restricted File Access Attempt. Matched phrase "config.php" at REQUEST_FILENAME. (930130-ams6-1)	Hacking Web App Attack
Anonymous	2026-03-16 06:05:13 (4 months ago)	suspicious request in access.log	Web App Attack
🇳🇱 debestelapp	2026-03-14 06:47:05 (4 months ago)		Web App Attack
🇷🇺 Agrohim	2026-03-13 01:52:50 (4 months ago)	Gate Inet blocked for categories:	DDoS Attack Ping of Death Port Scan Hacking Brute-Force
🇨🇦 1gz	2026-03-08 06:42:31 (4 months ago)	Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from NL. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /blog/.wp-config.php.swp UA: Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.223

🇺🇸 195.184.76.63

🇺🇦 185.204.68.40

🇺🇸 172.253.8.150

🇳🇱 45.148.10.183

🇻🇳 14.191.60.184

🇺🇸 2a09:bac1:7680:480::501:5d

🇰🇷 222.116.59.127

🇰🇷 211.51.132.104

🇮🇩 163.7.5.228

🇺🇸 162.216.149.95

🇵🇭 120.29.90.62

🇮🇪 108.130.74.206

🇨🇭 20.203.209.227

🇮🇪 4.210.91.174

🇭🇰 199.45.154.125

🇭🇰 194.187.178.216

🇧🇷 177.136.245.42

🇺🇸 162.216.149.135

🇲🇴 125.31.2.160