JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.53.103.233

152.53.103.233 was found in our database!

This IP was reported 262 times. Confidence of Abuse is 34%: ?

34%

ISP	Anexia Holding GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202409230783285824.bestsrv.de
Domain Name	anexia.com
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.53.103.233

Whois 152.53.103.233

IP Abuse Reports for 152.53.103.233:

This IP address has been reported a total of 262 times from 79 distinct sources. 152.53.103.233 was first reported on October 3rd 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-07-21 02:06:47 (2 hours ago)	Banned for trying to access xmlrpc [BY]	Web App Attack
🇺🇸 lostswordfish.com	2026-07-18 04:44:04 (2 days ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇷🇴 INTEQ	2026-07-17 05:49:18 (3 days ago)	Web attack from 152.53.103.233	Web App Attack
🇲🇹 Malta	2026-07-10 17:57:23 (1 week ago)	152.53.103.233 - - [10/Jul/2026:19:57:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 152.53.103.233 - - [10/Jul/2026:19:57:23 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 Edg/140.0.0.0" show less	Hacking Web App Attack
🇷🇴 INTEQ	2026-06-25 23:56:07 (3 weeks ago)	Web attack from 152.53.103.233	Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 14:11:42 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 10:11:34.895168 2026] [security2:error] [pid 22273:tid 22273] [client 152.53.103.233:53822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.kaylamaclaincounseling.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.kaylamaclaincounseling.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVOFmHquxpOLW78nZdezwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 13:30:49 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:30:41.861228 2026] [security2:error] [pid 29125:tid 29125] [client 152.53.103.233:48672] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|theopinionatedowl.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "theopinionatedowl.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajVEgToeWuh6lk6Pi16SBQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tecnicorioja	2026-06-07 22:00:07 (1 month ago)	POST /xmlrpc.php [07/Jun/2026:11:52:38	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 12:18:23 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 08:18:16.392693 2026] [security2:error] [pid 10143:tid 10143] [client 152.53.103.233:58032] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vintageamptubes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vintageamptubes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiFtCBqdsqJephcOsrtTqwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-26 22:38:39 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 26 18:38:32.482907 2026] [security2:error] [pid 10325:tid 10348] [client 152.53.103.233:47426] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|boxvalleyrockers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "boxvalleyrockers.com"] [uri "/ROCK/wp-json/wp/v2/users"] [unique_id "ahYg6FH3F1VbnsNlBNzYwQAAAIs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-20 20:52:52 (2 months ago)	[redacted] 152.53.103.233 - - [20/May/2026:22:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ... show more [redacted] 152.53.103.233 - - [20/May/2026:22:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0" [redacted] 152.53.103.233 - - [20/May/2026:22:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" [redacted] 152.53.103.233 - - [20/May/2026:22:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" [redacted] 152.53.103.233 - - [20/May/2026:22:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0" [redacted] 152.53.103.233 - - [20/May/2026:22:52:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" [redacted] 152.53.103.233 - - [20/May/2026:22:5 ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-10 19:22:54 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.103.233 (v2202409230783285824.bestsrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 15:22:48.511007 2026] [security2:error] [pid 20643:tid 20643] [client 152.53.103.233:41306] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.alsetsystems.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.alsetsystems.com"] [uri "/wp-json/wp/v2/users"] [unique_id "agDbCEUSeaGlPtscGzPw6AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2026-05-05 21:14:29 (2 months ago)	152.53.103.233 - - [05/May/2026:23:14:28 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 152.53.103.233 - - [05/May/2026:23:14:28 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Edg/142.0.0.0" show less	Hacking Web App Attack
🇺🇸 octageeks.com	2026-04-28 04:10:15 (2 months ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇫🇷 masterguru	2026-04-28 02:31:46 (2 months ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-196)	Hacking

Showing 1 to 15 of 262 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 203.25.124.116

🇹🇼 198.235.24.69

🇸🇪 195.178.191.5

🇬🇧 194.50.235.132

🇬🇧 193.46.0.59

🇬🇧 185.216.145.184

🇸🇬 103.136.68.246

🇷🇺 5.167.34.106

🇨🇳 220.181.108.174

🇬🇧 185.216.145.168

🇰🇷 182.225.25.178

🇨🇴 181.78.234.68

🇭🇰 123.58.210.106

🇧🇷 45.205.1.240

🇳🇱 45.148.10.152

🇬🇧 45.133.173.212

🇺🇸 45.79.23.62

🇧🇷 205.210.31.164

🇩🇪 193.124.20.252

🇬🇧 193.46.0.189