JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.53.54.209

152.53.54.209 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 100%: ?

100%

ISP	netcup GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS214996
Hostname(s)	v2202607376222477888.nicesrv.de
Domain Name	netcup.de
Country	🇺🇸 United States of America
City	Manassas, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.53.54.209

Whois 152.53.54.209

IP Abuse Reports for 152.53.54.209:

This IP address has been reported a total of 37 times from 31 distinct sources. 152.53.54.209 was first reported on July 2nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-07 21:59:33 (1 hour ago)	Auto-ban: >3000 req/min op 2026-07-07	Web App Attack SSH Hacking
Anonymous	2026-07-07 21:46:23 (1 hour ago)	152.53.54.209 - - [08/Jul/2026:05:45:56 +0800] "GET /administrator/components/com_jce/jce.xml HTTP/1 ... show more 152.53.54.209 - - [08/Jul/2026:05:45:56 +0800] "GET /administrator/components/com_jce/jce.xml HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 152.53.54.209 - - [08/Jul/2026:05:46:00 +0800] "GET /administrator/components/com_sppagebuilder/sppagebuilder.xml HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 152.53.54.209 - - [08/Jul/2026:05:46:06 +0800] "GET /plugins/system/helix3/helix3.xml HTTP/1.1" 404 30479 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 152.53.54.209 - - [08/Jul/2026:05:46:15 +0800] "GET /administrator/components/com_pagebuilderck/pagebuilderck.xml HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 152.53.54.209 - - [08/Jul/2026:05:46:16 ... show less	Bad Web Bot Web App Attack
🇫🇷 LRob	2026-07-07 17:58:59 (5 hours ago)	CrowdSec: crowdsecurity/http-admin-interface-probing \| req: ["/administrator/components/com_jce/jce. ... show more CrowdSec: crowdsecurity/http-admin-interface-probing \| req: ["/administrator/components/com_jce/jce.xml","/administrator/components/com_sppagebuilder/sppagebuilder.xml","/administrator/components/com_pagebuilderck/pagebuilderck.xml"] \| UA: ["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv show less	Hacking
🇩🇪 HandyTreff.de	2026-07-07 17:56:39 (5 hours ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -87.175 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -87.175 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0 show less	Web App Attack Bad Web Bot
Anonymous	2026-07-07 17:01:10 (6 hours ago)	AGERADE WEBEXPLOIT 152.53.54.209 (v2202607376222477888.nicesrv.de)	Web App Attack
Anonymous	2026-07-07 16:11:13 (7 hours ago)	Bot / seems abusive / Apache connections: 20	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-07-07 13:21:28 (10 hours ago)	(antiscrape_rule) Web application abuse detected 152.53.54.209 (US/United States/v220260737622247788 ... show more (antiscrape_rule) Web application abuse detected 152.53.54.209 (US/United States/v2202607376222477888.nicesrv.de): 5 in the last 900 secs show less	Hacking
🇩🇪 mravb	2026-07-07 07:34:07 (15 hours ago)	152.53.54.209 - - [07/Jul/2026:10:34:07 +0300] "GET /administrator/components/com_jce/jce.xml HTTP/1 ... show more 152.53.54.209 - - [07/Jul/2026:10:34:07 +0300] "GET /administrator/components/com_jce/jce.xml HTTP/1.1" 404 179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" ... show less	Web App Attack Hacking
🇱🇺 conseilgouz	2026-07-07 06:46:53 (16 hours ago)	are-403 : Blocked Admin access=>/administrator/components/com_jce/jce.xml	Hacking
Anonymous	2026-07-07 06:39:24 (16 hours ago)	Auto-reported by Fail2Ban (NPM-Auth)	Web App Attack
🇵🇱 webadmin	2026-07-07 03:24:25 (20 hours ago)		Web App Attack
Anonymous	2026-07-07 03:14:40 (20 hours ago)	[Tue Jul 07 05:14:30.813558 2026] [authz_core:error] [pid 330842] [client 152.53.54.209:60430] AH016 ... show more [Tue Jul 07 05:14:30.813558 2026] [authz_core:error] [pid 330842] [client 152.53.54.209:60430] AH01630: client denied by server configuration: /var/www/html/portfolio/public/administrator [Tue Jul 07 05:14:32.571248 2026] [authz_core:error] [pid 327685] [client 152.53.54.209:60434] AH01630: client denied by server configuration: /var/www/html/portfolio/public/administrator [Tue Jul 07 05:14:33.380490 2026] [authz_core:error] [pid 330843] [client 152.53.54.209:60442] AH01630: client denied by server configuration: /var/www/html/portfolio/public/plugins [Tue Jul 07 05:14:35.422367 2026] [authz_core:error] [pid 327684] [client 152.53.54.209:60446] AH01630: client denied by server configuration: /var/www/html/portfolio/public/administrator [Tue Jul 07 05:14:39.969884 2026] [authz_core:error] [pid 328576] [client 152.53.54.209:60120] AH01630: client denied by server configuration: /var/www/html/portfolio/public/plugins ... show less	Web App Attack
🇳🇿 Antinson	2026-07-07 02:21:16 (21 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇫🇷 masterguru	2026-07-07 00:52:23 (22 hours ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-196)	Hacking
Anonymous	2026-07-06 23:25:04 (1 day ago)	brute force CMS admin login	Brute-Force Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.26.63.83

🇰🇷 59.0.127.22

🇳🇱 45.148.10.151

🇺🇸 216.158.95.135

🇰🇷 211.55.204.203

🇺🇸 207.211.163.60

🇺🇸 185.180.141.4

🇺🇸 170.23.22.240

🇺🇸 162.216.150.120

🇯🇵 160.251.101.169

🇵🇭 124.106.39.167

🇸🇪 83.226.218.5

🇺🇸 77.73.14.87

🇺🇸 64.62.197.207

🇫🇮 45.87.249.146

🇹🇭 203.154.158.195

🇭🇰 199.45.155.87

🇭🇳 190.124.22.69

🇰🇷 175.123.187.78

🇵🇭 136.158.59.16