JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.53.120.26

Recent Activity

Abuse Confidence Score

4% Caution

15 reports

7 reporters · latest 2 hours ago

ISP: netcup GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS197540
Hostname(s): v2202606285443469489.powersrv.de
Domain Name: netcup.de
Country: 🇩🇪 Germany
City: Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 7 distinct reporters

First reported

October 30th 2025

Most recent report

2 hours ago

Last 60 days

Top reporter locations 🇨🇳 China 2

Most common categories Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 鹏鹏	2026-11-12 00:22:51 UTC · (2 hours ago)	monitor: on VM-0-7-ubuntu \| port: 21827 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇨🇳 鹏鹏	2026-10-21 03:57:28 UTC · (3 weeks ago)	monitor: on VM-0-7-ubuntu \| port: 31666 \| ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇩🇪 kjaerulff	2025-11-30 17:30:47 UTC · (11 months ago)	Failed Wordpress login using wp-login.php (v2202508195834368842.ultrasrv.de)	Web App Attack
🇧🇪 voormedia	2025-11-30 16:52:27 UTC · (11 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 17:34:20 UTC · (11 months ago)	(mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 12:34:17.124194 2025] [security2:error] [pid 1029:tid 1029] [ ... show more (mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 12:34:17.124194 2025] [security2:error] [pid 1029:tid 1029] [client 152.53.120.26:57832] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|lopansri.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "lopansri.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSiLmfOo-lISB2vHJX-xEwAAAB4"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2025-11-27 16:23:24 UTC · (11 months ago)	Failed Wordpress login using xmlrpc.php (v2202508195834368842.ultrasrv.de)	Web App Attack
🇩🇪 kjaerulff	2025-11-24 17:01:06 UTC · (11 months ago)	Failed Wordpress login using xmlrpc.php (v2202508195834368842.ultrasrv.de)	Web App Attack
Anonymous	2025-11-24 15:37:14 UTC · (11 months ago)	Fail2Ban - Nginx Bot Probes	Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 19:29:47 UTC · (11 months ago)	(mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 14:29:41.705536 2025] [security2:error] [pid 6717:tid 6717] [ ... show more (mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 14:29:41.705536 2025] [security2:error] [pid 6717:tid 6717] [client 152.53.120.26:56518] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jbowerslaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jbowerslaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSNgpTymiSMqVXLNocUXWwAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2025-11-23 19:21:45 UTC · (11 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇧🇪 voormedia	2025-11-07 18:21:31 UTC · (1 year ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇺🇸 TPI-Abuse	2025-11-01 13:09:06 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 09:09:01.428351 2025] [security2:error] [pid 7581:tid 7581] [ ... show more (mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 01 09:09:01.428351 2025] [security2:error] [pid 7581:tid 7581] [client 152.53.120.26:38092] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|celltechs.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "celltechs.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aQYGbYGSO9UPQBcb24xvbgAAAAc"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 kjaerulff	2025-10-31 01:26:42 UTC · (1 year ago)	Failed Wordpress login using xmlrpc.php (v2202508195834368842.ultrasrv.de)	Web App Attack
🇺🇸 TPI-Abuse	2025-10-30 21:07:34 UTC · (1 year ago)	(mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 17:07:27.498202 2025] [security2:error] [pid 31422:tid 31422] ... show more (mod_security) mod_security (id:225170) triggered by 152.53.120.26 (v2202508195834368842.ultrasrv.de): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 17:07:27.498202 2025] [security2:error] [pid 31422:tid 31422] [client 152.53.120.26:40300] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|biff0.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "biff0.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQPTj9ffi8d0xKv8YyQchwAAABw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-10-30 20:25:04 UTC · (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 198.235.24.99

🇨🇳 183.56.216.88

🇨🇳 180.76.105.165

🇵🇰 153.117.1.38

🇧🇷 118.26.105.144

🇫🇷 51.83.7.228

🇫🇷 37.187.28.212

🇺🇸 199.165.159.177

🇦🇷 181.209.59.251

🇺🇸 162.216.150.64

🇸🇪 83.233.22.225

🇬🇧 81.19.219.228

🇺🇸 70.183.193.124

🇫🇷 45.157.112.3

🇨🇳 36.134.96.76

🇧🇪 35.210.216.137

🇸🇪 31.208.124.219

🇩🇪 23.132.164.201

🇺🇸 13.143.31.180

🇺🇸 209.207.227.129