JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

95.163.152.98

Neutral Activity

Abuse Confidence Score

0% Low Risk

28 reports

18 reporters · latest 1 month ago

ISP: AEZA GROUP LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS210644
Domain Name: aeza.ru
Country: 🇫🇷 France
City: Paris, Ile-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

28 from 18 distinct reporters

First reported

December 4th 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇷🇺 Russian Federation 1

Most common categories Port Scan 1 Exploited Host 1 DDoS Attack 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 AbuseIPDB informer	2026-10-08 10:18:45 UTC · (1 month ago)	nfdump top talker: 95.163.152.98 \| first seen 2026-10-08 13:18:45.120 \| duration 00:00:00.122 \| flows=1 \| packets=53196 \| bytes=38.2 M \| pps=433 \| bps=2.5 M \| bpp=717 \| proto=any	DDoS Attack Port Scan Exploited Host
🇧🇪 taivas.nl	2024-12-18 14:32:10 UTC · (1 year ago)	Wordpress_xmlrpc_attack	Bad Web Bot
🇺🇸 TPI-Abuse	2024-12-18 14:23:58 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 09:23:51.331750 2024] [security2:error] [pid 11030:tid 11030] [client 9 ... show more (mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 09:23:51.331750 2024] [security2:error] [pid 11030:tid 11030] [client 95.163.152.98:47146] [client 95.163.152.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tedharris.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tedharris.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2La9wBSF4LzL9J17qcihwAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 DerDoktor	2024-12-18 14:17:44 UTC · (1 year ago)	Dec 18 14:48:14 Fail2ban action triggered	Brute-Force
🇺🇸 TPI-Abuse	2024-12-18 14:06:32 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 09:06:25.030939 2024] [security2:error] [pid 12540:tid 12540] [client 9 ... show more (mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 09:06:25.030939 2024] [security2:error] [pid 12540:tid 12540] [client 95.163.152.98:57550] [client 95.163.152.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|furryfriendzy.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "furryfriendzy.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2LW4dJ7cOg2lNm5pc6ItAAAABI"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 plzenskypruvodce.cz	2024-12-18 14:01:09 UTC · (1 year ago)	2024-12-18T15:01:00.522406+01:00 web wordpress(ckvilla.cz)[1452009]: Authentication failure for ckvilla from 95.163.152.98 2024-12-18T15:01:05.537846+01:00 web wordpress(ckvilla.cz)[1452038]: Authentication failure for buchtic from 95.163.152.98 2024 ... show more 2024-12-18T15:01:00.522406+01:00 web wordpress(ckvilla.cz)[1452009]: Authentication failure for ckvilla from 95.163.152.98 2024-12-18T15:01:05.537846+01:00 web wordpress(ckvilla.cz)[1452038]: Authentication failure for buchtic from 95.163.152.98 2024-12-18T15:01:09.557974+01:00 web wordpress(ckvilla.cz)[1452007]: Authentication failure for ckvilla from 95.163.152.98 ... show less	Brute-Force
🇺🇸 TPI-Abuse	2024-12-18 13:43:08 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 08:43:03.640226 2024] [security2:error] [pid 4215:tid 4215] [client 95. ... show more (mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 08:43:03.640226 2024] [security2:error] [pid 4215:tid 4215] [client 95.163.152.98:48260] [client 95.163.152.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|alsetsystems.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "alsetsystems.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2LRZ5iOMEAPZMdHG-hmnAAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2024-12-18 13:34:40 UTC · (1 year ago)	(wordpress) Failed wordpress login from 95.163.152.98 (FR/France/heap-iron.aeza.network)	Brute-Force
🇩🇪 bsoft.de	2024-12-18 13:34:17 UTC · (1 year ago)	95.163.152.98 - - [18/Dec/2024:14:34:13 +0100] "GET /wp-json/wp/v2/users HTTP/1.1" 404 144 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 95.163.152.98 - - [18/Dec/2024 ... show more 95.163.152.98 - - [18/Dec/2024:14:34:13 +0100] "GET /wp-json/wp/v2/users HTTP/1.1" 404 144 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 95.163.152.98 - - [18/Dec/2024:14:34:15 +0100] "POST /xmlrpc.php HTTP/1.1" 200 181 "-" "Apache-HttpClient/4.5.13 (Java/11.0.25)" 95.163.152.98 - - [18/Dec/2024:14:34:16 +0100] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Apache-HttpClient/4.5.13 (Java/11.0.25)" show less	Web App Attack
🇺🇸 TPI-Abuse	2024-12-18 13:25:33 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 08:25:26.615717 2024] [security2:error] [pid 26193:tid 26211] [client 9 ... show more (mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 08:25:26.615717 2024] [security2:error] [pid 26193:tid 26211] [client 95.163.152.98:42376] [client 95.163.152.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iancaird.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iancaird.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2LNRvFD_eBhfEt28lYVTwAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2024-12-18 13:17:07 UTC · (1 year ago)	Wordpress Vunerability attack	Web App Attack
🇸🇬 Cloudkul Cloudkul	2024-12-18 13:12:14 UTC · (1 year ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-12-18 13:05:37 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 08:05:29.790344 2024] [security2:error] [pid 12551:tid 12551] [client 9 ... show more (mod_security) mod_security (id:225170) triggered by 95.163.152.98 (heap-iron.aeza.network): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 18 08:05:29.790344 2024] [security2:error] [pid 12551:tid 12551] [client 95.163.152.98:40718] [client 95.163.152.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|univey.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "univey.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z2LImdH6baYbaidgQ9TDTAAAAAg"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-12-18 13:01:31 UTC · (1 year ago)	apache-wordpress-login	Brute-Force Web App Attack
🇫🇷 Jean Valjean	2024-12-18 12:58:03 UTC · (1 year ago)	Fail2ban Caboom : wp-login.php Bruteforce	Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 189.7.126.217

🇪🇸 159.253.248.124

🇮🇳 103.86.107.148

🇺🇸 57.141.0.32

🇩🇪 195.63.26.14

🇨🇳 182.114.48.46

🇰🇪 154.159.252.42

🇧🇷 138.122.17.219

🇺🇸 130.49.11.122

🇹🇼 116.241.157.164

🇺🇸 45.156.129.118

🇷🇴 2.57.122.208

🇵🇰 103.205.178.205

🇧🇩 103.173.173.232

🇺🇸 93.177.94.72

🇬🇧 51.89.129.85

🇧🇷 205.210.31.170

🇺🇸 205.210.31.29

🇹🇬 196.170.89.208

🇩🇪 195.63.24.27