JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.53.51.165

152.53.51.165 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 0%: ?

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS197540
Hostname(s)	v2202512195834422410.megasrv.de
Domain Name	netcup.de
Country	🇦🇹 Austria
City	Vienna, State of Vienna

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.53.51.165

Whois 152.53.51.165

IP Abuse Reports for 152.53.51.165:

This IP address has been reported a total of 104 times from 37 distinct sources. 152.53.51.165 was first reported on December 2nd 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-10-20 04:28:18 (8 months ago)	Malicious activity detected	Hacking Web App Attack
🇵🇹 Subnet Shadow Specter	2025-10-18 15:22:02 (8 months ago)	Malicious activity detected. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:143.0) Geck ... show more Malicious activity detected. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:143.0) Gecko/20100101 Firefox/143.0. Auto blocked and Banned. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-11 10:35:13 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 152.53.51.165 (v2202411243680299935.happysrv.de ... show more (mod_security) mod_security (id:210730) triggered by 152.53.51.165 (v2202411243680299935.happysrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 11 06:35:08.995709 2025] [security2:error] [pid 27677:tid 27677] [client 152.53.51.165:47082] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.chicagowca.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chicagowca.com"] [uri "/[email protected]"] [unique_id "aOoy3KpvaYa_BPGlfR_AeAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 AutoAddOnStore	2025-10-03 17:56:00 (9 months ago)	Probing for vulnerabilities	Brute-Force Web App Attack
Anonymous	2025-10-01 11:19:00 (9 months ago)	Malicious IP Address	Brute-Force Bad Web Bot
🇮🇩 Ridwan Na'im	2025-09-23 22:04:26 (9 months ago)	[WAZUH] IP Blocked 152.53.51.165 - Reason: Malicious IP Address found in Block List reputation Datab ... show more [WAZUH] IP Blocked 152.53.51.165 - Reason: Malicious IP Address found in Block List reputation Database. show less	Hacking Web App Attack
Anonymous	2025-09-17 22:11:00 (9 months ago)	"Undesired, excess traffic against library/education infrastructure"	Brute-Force
🇺🇸 TPI-Abuse	2025-09-17 10:00:24 (9 months ago)	(mod_security) mod_security (id:240950) triggered by 152.53.51.165 (v2202411243680299935.happysrv.de ... show more (mod_security) mod_security (id:240950) triggered by 152.53.51.165 (v2202411243680299935.happysrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 17 06:00:16.128374 2025] [security2:error] [pid 2347:tid 2347] [client 152.53.51.165:53520] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|beckersystems.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "beckersystems.com"] [uri "/apps/buswiki/index.php"] [unique_id "aMqGsIpfgTSKr-W3dUAndgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-09-12 05:05:09 (10 months ago)	(mod_security) mod_security (id:240950) triggered by 152.53.51.165 (v2202411243680299935.happysrv.de ... show more (mod_security) mod_security (id:240950) triggered by 152.53.51.165 (v2202411243680299935.happysrv.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 12 01:05:04.588500 2025] [security2:error] [pid 31378:tid 31378] [client 152.53.51.165:52612] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|www.noelramos.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.noelramos.com"] [uri "/wiki/index.php"] [unique_id "aMOqADOl9VysDY0bEX552AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2025-09-12 04:06:21 (10 months ago)	Wordpress malicious attack:[octa404]	Web App Attack
🇳🇱 JCB	2025-09-11 06:52:00 (10 months ago)	152.53.51.165 - - [11/Sep/2025:08:27:06 +0300] "GET /.well-known/nodeinfo HTTP/1.1" 404 196 "-" "Moz ... show more 152.53.51.165 - - [11/Sep/2025:08:27:06 +0300] "GET /.well-known/nodeinfo HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/118.0.0.0" 152.53.51.165 - - [11/Sep/2025:09:08:50 +0300] "GET /.well-known/ai-plugin.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 OPR/118.0.0.0" ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-09-08 08:03:01 (10 months ago)	Attacks with Bad user agents	Hacking
🇦🇺 MAGIC	2025-09-04 02:04:53 (10 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇷 RocketEmi	2025-09-02 00:25:06 (10 months ago)	Intento de hackeo	Brute-Force
🇭🇳 unph	2025-09-01 18:25:55 (10 months ago)	Intento de acceso sospechoso en el login de WordPress	Brute-Force

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.187.176.85

🇫🇷 51.103.18.104

🇷🇴 193.46.255.86

🇲🇽 189.156.230.245

🇭🇳 186.96.252.171

🇫🇮 147.185.133.103

🇺🇸 147.185.132.179

🇲🇴 125.31.2.160

🇲🇬 102.17.221.211

🇫🇷 85.204.70.104

🇱🇹 81.30.98.142

🇨🇳 61.170.159.79

🇸🇬 47.84.108.75

🇸🇬 43.134.54.137

🇮🇳 20.235.242.37

🇺🇸 20.42.101.239

🇹🇼 218.173.149.36

🇨🇳 121.238.160.246

🇳🇿 121.73.169.149

🇨🇦 99.233.39.241