JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 213.152.161.98

213.152.161.98 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 41%: ?

41%

ISP	AirVPN.org
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49453
Domain Name	airvpn.org
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 213.152.161.98

Whois 213.152.161.98

IP Abuse Reports for 213.152.161.98:

This IP address has been reported a total of 44 times from 24 distinct sources. 213.152.161.98 was first reported on September 17th 2025, and the most recent report was 19 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-22 05:47:50 (19 minutes ago)	(mod_security) mod_security (id:210492) triggered by 213.152.161.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 213.152.161.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 01:47:36.868073 2026] [security2:error] [pid 9264:tid 9264] [client 213.152.161.98:53086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cubbylure.com"] [uri "/.wp-config.php.swp"] [unique_id "aok3-I0JRSgXONBkgq5Y7QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 04:35:33 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 213.152.161.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 213.152.161.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:35:19.239558 2026] [security2:error] [pid 22361:tid 22361] [client 213.152.161.98:41646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cienmalos.com"] [uri "/wp-config.php.dist"] [unique_id "aoknB_Bt5FpVkEavBv810AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-08-22 04:33:09 (1 hour ago)	Many_bad_calls	Web App Attack
Anonymous	2026-08-22 03:42:51 (2 hours ago)	[server.tmg.gr] httpd-webshell-ext: sites=www.cardiorenal2025.gr; logs=/var/log/httpd/domains/cardio ... show more [server.tmg.gr] httpd-webshell-ext: sites=www.cardiorenal2025.gr; logs=/var/log/httpd/domains/cardiorenal2025.gr.log; samples=/config.php.zip show less	Hacking Web App Attack
🇧🇪 taivas.nl	2026-08-22 02:02:14 (4 hours ago)	Bad_requests	Bad Web Bot
🇫🇷 dynamix	2026-08-22 01:55:46 (4 hours ago)	Multiple WAF Violations	Web App Attack
🇮🇹 VHosting	2026-08-21 22:40:06 (7 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 21:00:40 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 213.152.161.98 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 213.152.161.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 17:00:33.479739 2026] [security2:error] [pid 389:tid 389] [client 213.152.161.98:43152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "equipoperu.org"] [uri "/wp-config.php_orig"] [unique_id "aoi8cSoyQDymAEdo0_iYUgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-07 12:21:01 (1 month ago)	Accessed trap at '/wp-login.php'	Web App Attack
Anonymous	2026-05-07 20:02:15 (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇧🇷 chronos	2026-05-03 00:21:00 (3 months ago)	Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Loca ... show more Generic malicious activity: Tentativa de varredura de porta TCP... \| Port: 59601 \| Proto: TCP \| Location: The Netherlands, Haarlem show less	Port Scan Hacking
Anonymous	2026-05-01 18:02:02 (3 months ago)	Web attack	Bad Web Bot Web App Attack
🇸🇰 EVISION	2026-04-29 07:30:41 (3 months ago)	Automatic report from MS firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from MS firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting show less	Port Scan Hacking Brute-Force
Anonymous	2026-03-31 14:14:14 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-03-09 09:05:12 (5 months ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2409:4091:4018:ec11:ed32:ed1a:15be:dd67

🇳🇱 195.178.110.232

🇳🇱 192.42.116.52

🇽🇰 178.175.85.109

🇮🇳 103.89.136.111

🇹🇼 101.13.1.75

🇳🇱 80.79.5.250

🇺🇸 76.35.45.28

🇺🇸 64.62.197.210

🇺🇸 64.62.197.77

🇳🇱 45.148.10.141

🇮🇩 36.92.140.209

🇯🇵 8.216.2.110

🇺🇸 216.25.89.113

🇧🇷 200.139.93.67

🇬🇧 185.247.137.229

🇺🇸 162.216.149.120

🇩🇿 154.241.101.252

🇮🇳 152.59.174.30

🇺🇸 147.182.252.30