107.131.52.53

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
38% Elevated
24 reports
18 reporters · latest 2 weeks ago
ISP
AT&T Enterprises, LLC
Usage Type
Fixed Line ISP
ASN
AS7018
Hostname(s)
107-131-52-53.lightspeed.irvnca.sbcglobal.net
Domain Name
att.com
Country
🇺🇸 United States of America
City
Huntington Park, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
24 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇭🇰 Hong Kong 5 🇭🇺 Hungary 4
Most common categories Brute-Force 17 Web App Attack 11 Hacking 6 SSH 3 Port Scan 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇺 kisbogdan
Synology DSM login bruteforce; Requests: 2; Avg time between requests: 0.00 seconds; Attempted usernames: esterno
Brute-Force
🇭🇺 kisbogdan
Synology DSM login bruteforce; Requests: 4; Avg time between requests: 214.00 seconds; Attempted usernames: banana
Brute-Force
Anonymous
Web directory scan: 19 requests in 23h 40m (Last path: '/webapi/entry.cgi?account=tecnico&api=SYNO.API.Auth&format=sid&method=login&passwd=tecnico%40123&session=FileStation&version=6').
Hacking Web App Attack
Anonymous
Web directory scan: 10 requests in 9h 12m (Last path: '/webapi/auth.cgi?account=aurelio&api=SYNO.API.Auth&format=sid&method=login&passwd=123&session=FileStation&version=6').
Hacking Web App Attack
🇭🇺 poschm
Synology DSM web login brute-force: 3 failed password attempt(s) between 2026-10-22T21:58:11+02:00 and 2026-10-22T22:15:26+02:00
Brute-Force Web App Attack
🇦🇺 Hacker Reporter
Synology DSM web login brute-force: 8 failed password sign-in attempts between 2026-10-07T00:56:38+11:00 and 2026-10-07T11:28:29+11:00 using 4 different usernames (wolters, mori, galitec, administrativo).
Brute-Force Web App Attack
🇩🇪 sstrack74Abuse
Synology DSM web login brute-force: 5 failed sign-in attempt(s) between 09:56:08 and 19:31:00 CEST on 2026-10-06; part of distributed low-and-slow campaign (1000+ IPs).
Brute-Force Web App Attack
Anonymous
Web directory scan: 10 requests in 8h 51m (Last path: '/webapi/auth.cgi?account=aileen&api=SYNO.API.Auth&format=sid&method=login&passwd=p%40ssw0rd&session=FileStation&version=6').
Hacking Web App Attack
🇩🇪 Ivan Ivanov
Global Docker honeypot port trap
Port Scan
🇵🇱 Budyn
Hacking Brute-Force SSH
🇩🇪 NetWatch
NetWatch sensor network: The IP 107.131.52.53 executed unauthorized SSH login attempts.
Brute-Force SSH
🇩🇪 Phenix Info
SmallGuard.fr/Prestashop SSH Login failded
Brute-Force
Anonymous
Suspicious brute-force activity was detected by MikroTik and the source IP was observed in the Brut_knock stage tracking list.
Brute-Force
🇩🇪 chris_yooo
Brute-Force SSH
🇨🇭 Philippus
Brute-force login attempts, auto-blocked by Synology DSM
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.242
🇨🇭 179.43.153.250
🇺🇸 136.0.39.68
🇨🇳 111.192.19.3
🇱🇹 45.227.254.73
🇭🇰 42.200.73.3
🇨🇳 120.221.233.41
🇩🇪 69.5.169.252
🇷🇺 46.188.47.206
🇺🇸 195.184.76.37
🇺🇸 184.35.19.30
🇨🇳 180.76.105.165
🇩🇪 167.94.146.38
🇧🇷 138.122.28.55
🇻🇳 116.99.169.71
🇿🇦 105.246.82.249
🇮🇳 103.130.90.169
🇺🇸 91.201.107.168
🇨🇳 82.156.75.52
🇨🇳 60.175.91.53
feedback