JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.53.137.180

152.53.137.180 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 47%: ?

47%

ISP	Anexia Holding GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202603341614438045.nicesrv.de
Domain Name	anexia.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.53.137.180

Whois 152.53.137.180

IP Abuse Reports for 152.53.137.180:

This IP address has been reported a total of 20 times from 9 distinct sources. 152.53.137.180 was first reported on June 19th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-07-11 02:59:31 (14 hours ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:80 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-09 05:59:55 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:80 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-08 04:04:10 (3 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:80 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-06 07:06:01 (5 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:80 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-05 04:04:23 (6 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:80 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-04 03:01:01 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:80 show less	Open Proxy Port Scan
🇺🇸 oncord	2026-06-28 14:17:45 (1 week ago)	Form spam	Web Spam
🇺🇸 mnsf	2026-06-27 08:05:58 (2 weeks ago)	Abuse Detected (5)	Brute-Force Web App Attack
🇬🇧 spamverify.com	2026-06-27 07:52:53 (2 weeks ago)	Honeypot Hit: Contact Form	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-06-26 11:48:43 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 17:49:05 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 13:48:59.681008 2026] [security2:error] [pid 16126:tid 16126] [client 152.53.137.180:51694] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ewingmissouri.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ewingmissouri.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aj1qC9PXm1dDo0Oz9IGwXgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-06-25 07:21:01 (2 weeks ago)	block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-25 00:35:06 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 20:34:58.198179 2026] [security2:error] [pid 24245:tid 24245] [client 152.53.137.180:55660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|vendor21.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "vendor21.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajx3sjJi18cY_dhwNLDN9wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 23:40:53 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 19:40:46.317718 2026] [security2:error] [pid 5284:tid 5284] [client 152.53.137.180:35900] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|linnardfinancial.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "linnardfinancial.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajxq_q7v0aGCIMw52X1RsAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 13:37:57 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de ... show more (mod_security) mod_security (id:225170) triggered by 152.53.137.180 (v2202603341614438045.nicesrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 09:37:50.962004 2026] [security2:error] [pid 23372:tid 23372] [client 152.53.137.180:41380] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|intelerium.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "intelerium.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajvdroYXg6QaZE9qfw8LtgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 139.162.179.137

🇹🇷 94.154.43.230

🇳🇱 195.178.110.232

🇩🇪 185.242.3.184

🇺🇸 162.216.150.143

🇨🇳 124.174.32.95

🇷🇴 92.118.39.50

🇨🇦 85.217.149.47

🇩🇪 82.165.175.206

🇺🇸 54.188.64.40

🇬🇧 5.252.83.66

🇮🇳 2404:6800:4000:1002::126

🇳🇱 185.224.128.16

🇺🇸 166.62.35.226

🇺🇸 162.0.230.235

🇮🇳 120.60.5.95

🇳🇱 45.148.10.157

🇺🇸 20.88.55.220

🇵🇱 176.53.159.198

🇺🇸 165.154.172.181