JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

78.153.130.20

Neutral Activity

Abuse Confidence Score

0% Low Risk

190 reports

32 reporters · latest 2 years ago

ISP: AEZA GROUP LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS210644
Domain Name: aeza.ru
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

78.153.130.20 has been reported 190 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

190 from 32 distinct reporters

First reported

July 24th 2022

Most recent report

2 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 taivas.nl	2024-10-07 16:32:10 UTC · (2 years ago)	Bad_requests	Bad Web Bot
🇨🇦 polycoda	2024-10-07 16:18:31 UTC · (2 years ago)	🔑 Wordpress login brute force attempt	Hacking Web App Attack
🇺🇸 TPI-Abuse	2024-10-07 15:49:16 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 78.153.130.20 (slick-anger.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 11:49:13.494365 2024] [security2:error] [pid 1276:tid 1276] [client 7 ... show more (mod_security) mod_security (id:225170) triggered by 78.153.130.20 (slick-anger.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 11:49:13.494365 2024] [security2:error] [pid 1276:tid 1276] [client 78.153.130.20:53434] [client 78.153.130.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|achildsspace.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "achildsspace.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZwQC-aIBpDB4pNfJ8FMvJwAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-10-07 15:33:48 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 78.153.130.20 (slick-anger.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 11:33:44.431294 2024] [security2:error] [pid 18129:tid 18129] [client ... show more (mod_security) mod_security (id:225170) triggered by 78.153.130.20 (slick-anger.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 07 11:33:44.431294 2024] [security2:error] [pid 18129:tid 18129] [client 78.153.130.20:49210] [client 78.153.130.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kmelson.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kmelson.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZwP_WOj4jQZrZ14hPk8z4AAAAA8"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-07 15:33:28 UTC · (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 sf-noh.de	2024-09-06 19:36:05 UTC · (2 years ago)	78.153.130.20 - - [31/Aug/2024:17:33:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3667 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" 78.153.130.20 - - [31/Aug/2024:17:33:32 +0200] "POST /wp-login.php HTTP/1.1" 200 7411 "https://sf-noh.de/wp-login.php" " ... show more 78.153.130.20 - - [31/Aug/2024:17:33:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3667 "-" "Apache-HttpClient/4.5.13 (Java/11.0.24)" 78.153.130.20 - - [31/Aug/2024:17:33:32 +0200] "POST /wp-login.php HTTP/1.1" 200 7411 "https://sf-noh.de/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" ... show less	Hacking
🇦🇺 filthywombat	2024-09-01 00:58:00 UTC · (2 years ago)	WordPress attack, using credentials from CafePress breach.	Hacking Brute-Force Web App Attack
🇧🇪 cmbplf	2024-08-31 19:22:47 UTC · (2 years ago)	3.666 requests to /xmlrpc.php 2.351 POST requests to /wp-login.php	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2024-08-31 18:00:44 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 14:00:37.198670 2024] [security2:error] [pid 23727:tid 23727] [c ... show more (mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 14:00:37.198670 2024] [security2:error] [pid 23727:tid 23727] [client 78.153.130.20:49746] [client 78.153.130.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|calogerolawfirm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calogerolawfirm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZtNaRWGOn9R2jNc7GJC-6gAAABE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Marc	2024-08-31 17:38:21 UTC · (2 years ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-08-31 17:31:38 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 13:31:34.908502 2024] [security2:error] [pid 1084:tid 1084] [cli ... show more (mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 13:31:34.908502 2024] [security2:error] [pid 1084:tid 1084] [client 78.153.130.20:53602] [client 78.153.130.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|calvarycavaliers.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users"] [unique_id "ZtNTdlFiZSa5vYDN_cxK8gAAABM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2024-08-31 17:14:07 UTC · (2 years ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2024-08-31 16:59:38 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 12:59:30.757128 2024] [security2:error] [pid 16151:tid 16151] [c ... show more (mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 12:59:30.757128 2024] [security2:error] [pid 16151:tid 16151] [client 78.153.130.20:40118] [client 78.153.130.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kerrywood.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kerrywood.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZtNL8rU0_AamNUZ3UE_WuAAAABQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2024-08-31 16:47:38 UTC · (2 years ago)	WordPress login attempt	Brute-Force
🇺🇸 TPI-Abuse	2024-08-31 16:38:51 UTC · (2 years ago)	(mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 12:38:47.359287 2024] [security2:error] [pid 19413:tid 19413] [c ... show more (mod_security) mod_security (id:225170) triggered by 78.153.130.20 (efficacious-worm.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 31 12:38:47.359287 2024] [security2:error] [pid 19413:tid 19413] [client 78.153.130.20:45160] [client 78.153.130.20] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|theamarals.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theamarals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZtNHF6bCsyhWXJb6RWaGPQAAAA4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 190 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 106.59.139.29

🇺🇸 20.118.227.175

🇨🇳 219.159.79.61

🇳🇱 195.178.110.204

🇺🇸 184.168.21.211

🇮🇩 154.18.255.118

🇮🇳 139.59.42.255

🇮🇳 103.214.63.57

🇺🇸 98.168.101.169

🇰🇷 61.82.71.209

🇺🇸 23.23.60.66

🇧🇷 2804:1b3:ad83:4c93:45b:16cc:5383:a3d6

🇨🇴 179.1.223.204

🇨🇳 114.224.83.112

🇸🇪 95.196.93.142

🇺🇦 46.201.132.122

🇶🇦 34.18.212.172

🇷🇴 2.57.121.25

🇷🇴 193.32.162.35

🇳🇮 191.103.120.42