JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.53.193.182

Recent Activity

Abuse confidence score ?

84% Critical

135 reports

83 reporters · latest 3 days ago

ISP	Anexia Holding GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214996
Hostname(s)	v2202605355655456614.powersrv.de
Domain Name	netcup.de
Country	🇺🇸 United States of America
City	Manassas, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 152.53.193.182

This IP address has been reported a total of 135 times from 83 distinct sources. 152.53.193.182 was first reported on May 5th 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: Germany with 17 reports; Finland with 15 reports; United Kingdom of Great Britain and Northern Ireland with 10 reports. The most common categories in these recent reports were: Web App Attack 61 times; Brute-Force 23 times; Bad Web Bot 22 times; Hacking 19 times; Exploited Host 6 times; Other 16 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 kumiko	2026-09-19 05:47:19 (3 days ago)	[2026-09-19 08:47:19] File probing, 404 attack [10 in a quick succession] "GET /admin/js/tinymce/p ... show more [2026-09-19 08:47:19] File probing, 404 attack [10 in a quick succession] "GET /admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /assets/filemanager/dialog.php HTTP/1.1" 404 "GET /js/filemanager/dialog.php HTTP/1.1" 404 "GET /plugins/filemanager/dialog.php HTTP/1.1" 404 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-09-18 00:55:43 (4 days ago)	[2026-09-18 03:55:43] User-Agent Spoofing (6 unique User-Agent strings from the same IP address with ... show more [2026-09-18 03:55:43] User-Agent Spoofing (6 unique User-Agent strings from the same IP address within 1 seconds) show less	Bad Web Bot
🇫🇮 kumiko	2026-09-15 23:13:02 (6 days ago)	[2026-09-16 02:13:02] File probing, 404 attack [10 in a quick succession] "GET /js/tinymce/plugins ... show more [2026-09-16 02:13:02] File probing, 404 attack [10 in a quick succession] "GET /js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /js/filemanager/dialog.php HTTP/1.1" 404 "GET /assets/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /assets/admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /scripts/filemanager/dialog.php HTTP/1.1" 404 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-09-15 20:38:13 (6 days ago)	[2026-09-15 23:38:13] File probing, 404 attack [10 in a quick succession] "GET /assets/filemanager ... show more [2026-09-15 23:38:13] File probing, 404 attack [10 in a quick succession] "GET /assets/filemanager/dialog.php HTTP/1.1" 404 "GET /admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /js/filemanager/dialog.php HTTP/1.1" 404 "GET /assets/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /plugins/filemanager/dialog.php HTTP/1.1" 404 show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2026-09-15 20:01:15 (6 days ago)	[2026-09-15 23:01:14] File probing, 404 attack [10 in a quick succession] "GET /admin/js/tinymce/p ... show more [2026-09-15 23:01:14] File probing, 404 attack [10 in a quick succession] "GET /admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /admin/filemanager/dialog.php HTTP/1.1" 404 "GET /js/filemanager/dialog.php HTTP/1.1" 404 "GET /assets/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 "GET /assets/admin/js/tinymce/plugins/filemanager/dialog.php HTTP/1.1" 404 show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-15 19:36:00 (6 days ago)	[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ... show more [ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 152.53.193.182 - - [15/Sep/2026:21:35:51 +0200] "GET /filemanager/dialog.php HTTP/1.1" 404 12780 "-" "python-requests/2.27.1" 152.53.193.182 - - [15/Sep/2026:21:35:53 +0200] "GET /admin/filemanager/dialog.php HTTP/1.1" 404 12780 "-" "python-requests/2.27.1" 152.53.193.182 - - [15/Sep/2026:21:35:54 +0200] "GET /filemanager/dialog.php HTTP/1.1" 404 12780 "-" "python-requests/2.27.1" 152.53.193.182 - - [15/Sep/2026:21:35:54 +0200] "GET /assets/filemanager/dialog.php HTTP/1.1" 404 12780 "-" "python-requests/2.27.1" 152.53.193.182 - - [15/Sep/2026:21:35:55 +0200] "GET /filemanager/dialog.php HTTP/1.1" 404 12780 "-" "python-requests/2.27.1" 152.53.193.182 - - ... show less	Bad Web Bot Web App Attack
🇩🇪 xavier-momain.eu	2026-09-15 12:08:57 (6 days ago)	CrowdSec ban — scenario: tcp:scan	Port Scan
🇳🇱 Site.eu	2026-09-12 13:25:32 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇳🇱 Site.eu	2026-09-10 19:08:59 (1 week ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇨🇭 4server	2026-09-10 14:22:18 (1 week ago)	[ThuSep1016:22:16.4489142026][security2:error][pid2997536:tid2997868][client152.53.193.182:0]ModSecu ... show more [ThuSep1016:22:16.4489142026][security2:error][pid2997536:tid2997868][client152.53.193.182:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof\"rx\(\^w3c-\\|systran\\\\\\\\\)\)\"against\"REQUEST_HEADERS:User-Agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"218\"][id\"331039\"][rev\"1\"][msg\"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(Python-urllib\).DisablethisruleifyouusePython-urllib.\"][severity\"CRITICAL\"][hostname\"vetreriaperletti.ch\"][uri\"/index.php\"][unique_id\"aqK9GANlVZYxzgR2QfmR1gAAAMc\"] show less	Hacking Web App Attack
🇹🇷 neron	2026-09-09 12:55:32 (1 week ago)	CrowdSec blocked: tcp:scan detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-09-09 01:15:26 (1 week ago)	Attack detected: 152.53.193.182 [2026-09-09] Categories: 21 --- wp2shell/batch exploit (5 hits) --- ... show more Attack detected: 152.53.193.182 [2026-09-09] Categories: 21 --- wp2shell/batch exploit (5 hits) --- 152.53.193.182 - - [09/Aug/2026:23:06:23 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 500 6493 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 152.53.193.182 - - [09/Aug/2026:23:06:24 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 6492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 152.53.193.182 - - [09/Aug/2026:23:23:39 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 207 5240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 152.53.193.182 - - [09/Aug/2026:23:23:40 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 152.53.193.182 - - [09/Aug/2026:23:23:41 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 207 1030 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack
🇹🇷 neron	2026-09-08 04:55:32 (2 weeks ago)	CrowdSec blocked: tcp:scan detected via OPNsense firewall	Hacking Web App Attack
🇬🇧 consul.to	2026-09-06 14:46:12 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 iNetWorker	2026-09-06 12:47:33 (2 weeks ago)	trolling for resource vulnerabilities	Web App Attack

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 147.139.173.35

🇭🇰 103.243.27.155

🇺🇸 72.47.208.106

🇳🇱 45.148.10.240

🇺🇸 20.83.164.196

🇧🇷 205.210.31.219

🇦🇺 202.47.1.13

🇪🇨 177.53.213.245

🇸🇬 167.172.87.193

🇮🇩 163.7.11.126

🇰🇷 106.251.50.73

🇻🇳 103.199.16.90

🇨🇦 96.63.152.243

🇳🇱 77.239.124.173

🇲🇾 76.13.179.76

🇩🇪 47.87.135.207

🇳🇱 45.148.10.152

🇦🇺 45.132.224.144

🇲🇽 38.65.137.120

🇷🇺 31.76.34.47