JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.153.65.55

95.153.65.55 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 52%: ?

52%

ISP	Aggregate for ISP Interdnestrcom.
Usage Type	Fixed Line ISP
ASN	AS1547
Hostname(s)	55.65.153.95.dyn.idknet.com
Domain Name	idc.md
Country	🇲🇩 Moldova (the Republic of)
City	Tiraspol, Transnistria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.153.65.55

Whois 95.153.65.55

IP Abuse Reports for 95.153.65.55:

This IP address has been reported a total of 24 times from 18 distinct sources. 95.153.65.55 was first reported on August 1st 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 saamkuu	2026-10-22 05:42:25 (4 days ago)	DDoS botnet: TCP connection flood, 3 connections to port 443.	DDoS Attack
🇩🇪 Hazzard	2026-10-21 02:12:39 (6 days ago)	(wordpress) Failed wordpress login from 95.153.65.55 (MD/Moldova/Anenii Noi/Varniţa/55.65.153.95.dyn ... show more (wordpress) Failed wordpress login from 95.153.65.55 (MD/Moldova/Anenii Noi/Varniţa/55.65.153.95.dyn.idknet.com/[redacted]): (CF_ENABLE) show less	Brute-Force
🇩🇪 FeG Deutschland	2026-10-17 04:14:11 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack
🇮🇹 sssrit	2026-10-17 03:20:23 (1 week ago)	95.153.65.55 - - [17/Oct/2026:05:20:22 +0200] "POST /wp-login.php HTTP/2.0" 401 4719 "https://sssr.i ... show more 95.153.65.55 - - [17/Oct/2026:05:20:22 +0200] "POST /wp-login.php HTTP/2.0" 401 4719 "https://sssr.it/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-10-12 17:39:57 (2 weeks ago)	Web application attack detected.	Web App Attack
🇩🇪 Packets-Decreaser.NET	2026-10-11 23:24:38 (2 weeks ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2026-09-29 01:40:22 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 95.153.65.55 (55.65.153.95.dyn.idknet.com): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 95.153.65.55 (55.65.153.95.dyn.idknet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 21:40:18.041315 2026] [security2:error] [pid 20468:tid 20565] [client 95.153.65.55:59384] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.ccgparquitectos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.ccgparquitectos.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arsXAj2WGlOWiVnQdJcjdgAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-09-28 04:24:54 (4 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇭🇰 CyberFox	2026-09-23 22:54:08 (1 month ago)	59948/udp (1 or more attempts)	Port Scan
🇺🇸 TPI-Abuse	2026-09-21 20:25:38 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 95.153.65.55 (55.65.153.95.dyn.idknet.com): 1 i ... show more (mod_security) mod_security (id:225170) triggered by 95.153.65.55 (55.65.153.95.dyn.idknet.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:25:32.028796 2026] [security2:error] [pid 31047:tid 31047] [client 95.153.65.55:47958] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.constructionloansfunding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.constructionloansfunding.com"] [uri "/wp-json/wp/v2/users"] [unique_id "arGSvETcQJifEbGs5ZQrWAAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netclix.gr	2026-09-19 03:19:01 (1 month ago)	(wordpress) Failed wordpress login from 95.153.65.55 (MD/Moldova/55.65.153.95.dyn.idknet.com): (CF_ ... show more (wordpress) Failed wordpress login from 95.153.65.55 (MD/Moldova/55.65.153.95.dyn.idknet.com): (CF_ENABLE) show less	Brute-Force
Anonymous	2026-09-18 23:50:17 (1 month ago)	WordPress Brute Force	Brute-Force
🇩🇪 neckaralb-admin.de	2026-09-18 22:20:32 (1 month ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇬🇧 Aetherweb Ark	2026-09-15 23:55:18 (1 month ago)	Port Scan detected from 95.153.65.55 (MD/Moldova/55.65.153.95.dyn.idknet.com). N in the last X sec ... show more Port Scan detected from 95.153.65.55 (MD/Moldova/55.65.153.95.dyn.idknet.com). N in the last X seconds show less	Port Scan
🇩🇪 FeG Deutschland	2026-09-12 23:18:27 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257	Exploited Host Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.242.226.91

🇺🇸 170.187.165.130

🇯🇵 160.251.215.51

🇵🇭 154.18.197.35

🇨🇦 142.44.225.130

🇨🇳 117.83.20.13

🇩🇪 69.5.169.63

🇨🇳 47.115.161.54

🇳🇱 45.148.10.240

🇺🇿 37.110.214.28

🇬🇧 35.203.211.67

🇧🇪 34.76.189.254

🇧🇪 198.235.24.235

🇧🇪 198.235.24.192

🇬🇧 188.240.59.38

🇨🇳 116.207.108.41

🇧🇩 103.158.125.159

🇲🇦 81.192.46.49

🇳🇱 77.67.26.221

🇩🇪 69.5.169.106