JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.53.249.211

152.53.249.211 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 0%: ?

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	mail.kekich.tv
Domain Name	netcup.de
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.53.249.211

Whois 152.53.249.211

IP Abuse Reports for 152.53.249.211:

This IP address has been reported a total of 31 times from 12 distinct sources. 152.53.249.211 was first reported on April 23rd 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-07-18 22:16:49 (11 months ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 afleventoffice.com.au	2025-07-17 01:19:48 (11 months ago)	GET /feed/ HTTP/1.1	Web App Attack
🇬🇧 SilverZippo	2025-07-16 19:26:57 (11 months ago)	Web App Attack	Web App Attack
🇩🇪 hbrks	2025-07-16 10:46:13 (1 year ago)	GET http://kasm.life/	Web Spam Hacking Bad Web Bot
🇮🇹 Progetto1	2025-07-13 16:35:02 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-07-12 16:49:20 (1 year ago)	(mod_security) mod_security (id:211180) triggered by 152.53.249.211 (v2202504218763331300.supersrv.d ... show more (mod_security) mod_security (id:211180) triggered by 152.53.249.211 (v2202504218763331300.supersrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 12 12:49:16.532733 2025] [security2:error] [pid 19594:tid 19594] [client 152.53.249.211:57354] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "50"] [id "211180"] [rev "3"] [msg "COMODO WAF: Session Fixation: SessionID Parameter Name with No Referer\|\|www.thecrimsonpirate.com\|F\|2"] [data "Matched Data: phpsessid found within REQUEST_HEADERS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thecrimsonpirate.com"] [uri "/paangling/index.php"] [unique_id "aHKSDO-s3strTXsk4bblEgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-11 16:50:36 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 152.53.249.211 (v2202504218763331300.supersrv.d ... show more (mod_security) mod_security (id:210730) triggered by 152.53.249.211 (v2202504218763331300.supersrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 12:50:28.324222 2025] [security2:error] [pid 13662:tid 13662] [client 152.53.249.211:51510] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|djdharma.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "djdharma.com"] [uri "/djdharma.com"] [unique_id "aHFA1OVpAK9bGCvQrNuXXgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-07-11 15:26:03 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-07-11 10:14:59 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 152.53.249.211 (v2202504218763331300.supersrv.d ... show more (mod_security) mod_security (id:210730) triggered by 152.53.249.211 (v2202504218763331300.supersrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 11 06:14:52.274368 2025] [security2:error] [pid 10566:tid 10566] [client 152.53.249.211:59938] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|civilwarzone.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "civilwarzone.com"] [uri "/~site/Scripts_ExternalRedirect/ExternalRedirect.dll"] [unique_id "aHDkHDL2lifB6nNMTTFs4QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Progetto1	2025-07-10 11:43:02 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-07-10 01:09:48 (1 year ago)	Malicious activity detected	Hacking Web App Attack
🇫🇷 dynamix	2025-07-09 10:37:25 (1 year ago)	Multiple WAF Violations	Web App Attack
🇫🇷 dynamix	2025-07-07 20:52:32 (1 year ago)	Multiple WAF Violations	Web App Attack
🇨🇭 backslash	2025-06-20 00:35:06 (1 year ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 octageeks.com	2025-06-11 04:07:23 (1 year ago)	Wordpress malicious attack:[octa404]	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.153.227.12

🇺🇸 216.73.163.27

🇵🇱 176.53.159.197

🇹🇷 95.10.19.90

🇱🇹 81.30.98.144

🇰🇷 175.118.127.138

🇺🇸 172.178.82.191

🇺🇸 153.92.214.208

🇨🇳 121.235.159.181

🇧🇩 103.126.217.41

🇺🇸 64.72.74.162

🇸🇬 43.128.111.31

🇳🇱 5.187.35.142

🇧🇷 191.6.236.155

🇵🇪 190.119.63.98

🇵🇱 176.53.159.198

🇺🇸 165.227.209.27

🇨🇳 106.117.116.219

🇩🇪 2a09:bac5:2f1b:18fa::27d:da

🇹🇭 203.150.107.244