JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 95.85.252.153

95.85.252.153 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 44%: ?

44%

ISP	1Cent Host
Usage Type	Data Center/Web Hosting/Transit
ASN	AS209693
Domain Name	1cent.host
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 95.85.252.153

Whois 95.85.252.153

IP Abuse Reports for 95.85.252.153:

This IP address has been reported a total of 30 times from 18 distinct sources. 95.85.252.153 was first reported on March 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 xveil	2026-06-12 19:09:05 (1 day ago)	2026-06-13T02:09:02.534685 mail-honeypot postfix/submission/smtpd[4416]: warning: unknown[95.85.252. ... show more 2026-06-13T02:09:02.534685 mail-honeypot postfix/submission/smtpd[4416]: warning: unknown[95.85.252.153]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇦🇺 oncord	2026-06-12 13:00:34 (1 day ago)	Form spam	Web Spam
🇮🇩 xveil	2026-06-07 11:22:30 (6 days ago)	2026-06-07T18:22:27.896405 mail-honeypot postfix/submission/smtpd[18645]: warning: unknown[95.85.252 ... show more 2026-06-07T18:22:27.896405 mail-honeypot postfix/submission/smtpd[18645]: warning: unknown[95.85.252.153]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 oncord	2026-06-03 15:50:19 (1 week ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2026-05-30 00:50:09 (2 weeks ago)	(From [email protected]) Hi there, I'm Victoria with Vetted VAs. I’m reaching out because ... show more (From [email protected]) Hi there, I'm Victoria with Vetted VAs. I’m reaching out because we offer Virtual Assistants that utilize our custom-built AI tool, MAVIS (My Advanced Virtual Intelligent System), that easily replaces a 20-man team. We overtake and handle all of your marketing, administrative tasks, graphic design, video animations, accounting, and even all your prospecting with our system. This isn't a software you have to learn, and all you have to do is delegate to a human Virtual Assistant to get everything done! Reply YES to schedule a Zoom meeting or STOP to unsubscribe. show less	Phishing Web Spam
🇩🇪 LRob.fr	2026-05-29 20:00:07 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-05-27 07:30:43 (2 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇺🇸 nowyouknow	2026-05-25 20:42:38 (2 weeks ago)	(From [email protected]) Hi there, I'm Sophia with Top Talent VAs. I’m reaching out beca ... show more (From [email protected]) Hi there, I'm Sophia with Top Talent VAs. I’m reaching out because we offer Virtual Assistants that utilize our custom-built AI tool, MAVIS (My Advanced Virtual Intelligent System), that easily replaces a 20-man team. We overtake and handle all of your marketing, administrative tasks, graphic design, video animations, accounting, and even all your prospecting with our system. This isn't a software you have to learn, and all you have to do is delegate to a human Virtual Assistant to get everything done! Reply YES to schedule a Zoom meeting or STOP to unsubscribe. show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-05-22 15:11:11 (3 weeks ago)	(From [email protected]) Hi, We provide human Virtual Assistants powered by MAVIS, our custom ... show more (From [email protected]) Hi, We provide human Virtual Assistants powered by MAVIS, our custom AI system that can handle admin, marketing, design, accounting, and prospecting. You simply delegate, we handle the execution. Are you looking for help? show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2026-05-18 17:15:37 (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 95.85.252.153 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 95.85.252.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 13:15:31.630664 2026] [security2:error] [pid 9458:tid 9458] [client 95.85.252.153:49780] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "agtJM1ga-lpEwUc6boVxJAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 KIDOS	2026-05-17 05:59:22 (3 weeks ago)	malicious activity	Web App Attack
🇺🇸 nowyouknow	2026-05-15 05:27:43 (4 weeks ago)	(From [email protected]) Hi, We provide human Virtual Assistants powered by MAVIS, our custom ... show more (From [email protected]) Hi, We provide human Virtual Assistants powered by MAVIS, our custom AI system that can handle admin, marketing, design, accounting, and prospecting. You simply delegate, we handle the execution. Are you looking for help? show less	Phishing Web Spam
🇵🇱 sefinek.net	2026-05-13 00:07:18 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2026-04-30 05:09:17 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 georgengelmann	2026-04-25 03:24:34 (1 month ago)	Failed login attempt for carolecooch2	Brute-Force Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 193.32.126.157

🇬🇧 87.106.44.172

🇷🇺 81.23.173.32

🇩🇪 185.242.3.195

🇩🇪 167.94.146.45

🇩🇪 167.94.146.32

🇮🇩 103.151.140.97

🇩🇪 69.5.169.76

🇧🇷 43.164.196.114

🇺🇸 15.204.211.98

🇬🇧 2a06:4880:2000::36

🇺🇸 184.56.169.255

🇸🇬 172.253.236.212

🇨🇳 157.0.0.10

🇩🇪 139.59.208.49

🇷🇺 77.41.156.64

🇱🇹 45.227.254.170

🇺🇸 35.237.94.109

🇮🇳 34.131.249.13

🇰🇷 218.236.61.29