JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.53.20.61

Neutral Activity

Abuse Confidence Score

0% Low Risk

17 reports

17 reporters · latest 3 months ago

ISP: PS CASA Marrakech Maroc Telecom
Usage Type: Fixed Line ISP
ASN: AS36903
Domain Name: menara.ma
Country: 🇲🇦 Morocco
City: Beni Mellal, Beni Mellal-Khenifra

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

102.53.20.61 has been reported 17 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

17 from 17 distinct reporters

First reported

August 12th 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 tjs	2026-08-13 12:25:00 UTC · (3 months ago)	web attack, shell attempt	Hacking Web App Attack
🇨🇦 oh.mg	2026-08-12 22:53:53 UTC · (3 months ago)	(sshd) Failed SSH login from 102.53.20.61 (MA/Morocco/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-08-11T13:43:28.438190+00:00 bathurst sshd-session[2831477]: Invalid user admin from 102.53.20.61 port 34256 2026-0 ... show more (sshd) Failed SSH login from 102.53.20.61 (MA/Morocco/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-08-11T13:43:28.438190+00:00 bathurst sshd-session[2831477]: Invalid user admin from 102.53.20.61 port 34256 2026-08-11T13:43:28.442039+00:00 bathurst sshd-session[2831477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.53.20.61 2026-08-11T13:43:29.613367+00:00 bathurst sshd-session[2831477]: Failed password for invalid user admin from 102.53.20.61 port 34256 ssh2 2026-08-11T13:44:21.310032+00:00 bathurst sshd-session[2835471]: Invalid user orangepi from 102.53.20.61 port 34008 2026-08-11T13:44:21.312466+00:00 bathurst sshd-session[2835471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.53.20.61 show less	Brute-Force SSH
🇨🇿 lp	2026-08-12 21:18:40 UTC · (3 months ago)	SSH Brute force: 7 attempts were recorded from 102.53.20.61 2026-08-12T22:45:07+02:00 Invalid user admin from 102.53.20.61 port 39054 2026-08-12T22:45:39+02:00 Invalid user orangepi from 102.53.20.61 port 55472 2026-08-12T22:46:10+02:00 Connection cl ... show more SSH Brute force: 7 attempts were recorded from 102.53.20.61 2026-08-12T22:45:07+02:00 Invalid user admin from 102.53.20.61 port 39054 2026-08-12T22:45:39+02:00 Invalid user orangepi from 102.53.20.61 port 55472 2026-08-12T22:46:10+02:00 Connection closed by authenticating user root 102.53.20.61 port 58904 [preauth] 2026-08-12T22:46:46+02:00 Connection closed by authenticating user root 102.53.20.61 port 23818 [preauth] 2026-08-12T22:47:48+02:00 Connection closed by authenticating user root 102.53.20.61 port 11372 [preauth] 2026-08-12T22:48:19+02:00 Connection closed by authenticating user root 102.53.20.61 port 53778 [preauth] 2026-08-12T22:48:50+02:00 Connection closed by authenticating user root 102.53.20.61 port 33598 [preauth] show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-08-12 21:14:21 UTC · (3 months ago)	(mod_security) mod_security (id:218420) triggered by 102.53.20.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 17:14:17.264656 2026] [security2:error] [pid 2984:tid 2984] [client 102.53.20.61:11732] ModSe ... show more (mod_security) mod_security (id:218420) triggered by 102.53.20.61 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 12 17:14:17.264656 2026] [security2:error] [pid 2984:tid 2984] [client 102.53.20.61:11732] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.230:443\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.230"] [uri "/hello.world"] [unique_id "anziKWQuDMxm7UkF8tcbqAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-12 21:04:32 UTC · (3 months ago)	2026-08-12T23:03:59.257694+02:00 vm986549.cloud.nuxt.network sshd-session[3357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.53.20.61 2026-08-12T23:04:01.010302+02:00 vm986549.cloud.nuxt.network sshd-se ... show more 2026-08-12T23:03:59.257694+02:00 vm986549.cloud.nuxt.network sshd-session[3357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.53.20.61 2026-08-12T23:04:01.010302+02:00 vm986549.cloud.nuxt.network sshd-session[3357]: Failed password for invalid user admin from 102.53.20.61 port 62630 ssh2 2026-08-12T23:04:31.406239+02:00 vm986549.cloud.nuxt.network sshd-session[3360]: Invalid user orangepi from 102.53.20.61 port 47340 ... show less	Brute-Force SSH
Anonymous	2026-08-12 21:00:35 UTC · (3 months ago)	1786568435 - 08/12/2026 23:00:35 Host: 102.53.20.61/102.53.20.61 Port: 23 TCP Blocked ...	Port Scan
🇩🇪 formality	2026-08-12 19:54:27 UTC · (3 months ago)	Invalid user admin from 102.53.20.61 port 31922	Brute-Force SSH
Anonymous	2026-08-12 19:30:14 UTC · (3 months ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
Anonymous	2026-08-12 19:12:58 UTC · (3 months ago)	Unauthorized connection to SSH port 22	Port Scan SSH
🇺🇸 MPL	2026-08-12 19:04:49 UTC · (3 months ago)	tcp/22 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-08-12 19:03:38 UTC · (3 months ago)	Blocked by UFW (TCP on 22) Source port: 47746 TTL: 47 Packet length: 44 TOS: 0x08 This report (for 102.53.20.61) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH Brute-Force
🇳🇱 paradoxnetworks	2026-08-12 18:42:58 UTC · (3 months ago)	2026-08-12T18:37:50.381651+00:00 edge-drt-ams03.int.pdx.net.uk sshd-session[2671771]: Invalid user admin from 102.53.20.61 port 49694 2026-08-12T18:38:40.954910+00:00 edge-drt-ams03.int.pdx.net.uk sshd-session[2671847]: Invalid user orangepi from 102 ... show more 2026-08-12T18:37:50.381651+00:00 edge-drt-ams03.int.pdx.net.uk sshd-session[2671771]: Invalid user admin from 102.53.20.61 port 49694 2026-08-12T18:38:40.954910+00:00 edge-drt-ams03.int.pdx.net.uk sshd-session[2671847]: Invalid user orangepi from 102.53.20.61 port 52922 2026-08-12T18:42:57.195570+00:00 edge-drt-ams03.int.pdx.net.uk sshd-session[2672224]: Invalid user test from 102.53.20.61 port 45492 ... show less	Brute-Force SSH
🇺🇸 RAP	2026-08-12 18:34:17 UTC · (3 months ago)	2026-08-12 18:34:17 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 arc21	2026-08-12 18:25:19 UTC · (3 months ago)	2026-08-12T18:24:35.928705+00:00 ENGL-NYC-5 sshd[3178513]: Invalid user orangepi from 102.53.20.61 port 64260 2026-08-12T18:24:35.929851+00:00 ENGL-NYC-5 sshd[3178513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show more 2026-08-12T18:24:35.928705+00:00 ENGL-NYC-5 sshd[3178513]: Invalid user orangepi from 102.53.20.61 port 64260 2026-08-12T18:24:35.929851+00:00 ENGL-NYC-5 sshd[3178513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.53.20.61 2026-08-12T18:24:38.014846+00:00 ENGL-NYC-5 sshd[3178513]: Failed password for invalid user orangepi from 102.53.20.61 port 64260 ssh2 2026-08-12T18:25:17.207474+00:00 ENGL-NYC-5 sshd[3182615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.53.20.61 user=root 2026-08-12T18:25:19.724435+00:00 ENGL-NYC-5 sshd[3182615]: Failed password for root from 102.53.20.61 port 59790 ssh2 ... show less	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-08-12 18:24:08 UTC · (3 months ago)	Banned by fail2ban jail sshd-instant on jump	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 147.185.132.109

🇨🇳 36.152.150.242

🇻🇳 27.77.147.163

🇵🇱 2a02:26f0:d8::6851:3cc3

🇸🇬 188.166.226.125

🇧🇷 187.49.11.84

🇩🇪 185.201.137.193

🇧🇷 177.44.82.151

🇺🇸 142.173.153.119

🇳🇵 103.144.106.72

🇮🇩 103.132.54.150

🇵🇱 85.221.140.21

🇳🇱 74.234.167.211

🇩🇪 69.5.169.67

🇫🇷 51.68.236.59

🇬🇧 35.203.211.43

🇳🇱 213.209.159.26

🇺🇸 213.188.85.185

🇧🇷 168.196.162.74

🇨🇳 113.98.254.50