JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 114.55.53.252

114.55.53.252 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 0%: ?

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 114.55.53.252

Whois 114.55.53.252

IP Abuse Reports for 114.55.53.252:

This IP address has been reported a total of 57 times from 47 distinct sources. 114.55.53.252 was first reported on May 23rd 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Neko-World Network	2024-07-22 21:05:55 (1 year ago)	2024-07-22T21:05:41.305494+00:00 vps-2fbf7b1a sshd[166902]: Failed password for root from 114.55.53. ... show more 2024-07-22T21:05:41.305494+00:00 vps-2fbf7b1a sshd[166902]: Failed password for root from 114.55.53.252 port 41470 ssh2 2024-07-22T21:05:54.940295+00:00 vps-2fbf7b1a sshd[166902]: Disconnecting authenticating user root 114.55.53.252 port 41470: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] show less	Hacking Brute-Force SSH
🇩🇪 TostHost	2024-07-22 18:52:19 (1 year ago)	Jul 22 20:51:58 s1 sshd[1680170]: Failed password for root from 114.55.53.252 port 37042 ssh2 Jul 22 ... show more Jul 22 20:51:58 s1 sshd[1680170]: Failed password for root from 114.55.53.252 port 37042 ssh2 Jul 22 20:52:10 s1 sshd[1680170]: Failed password for root from 114.55.53.252 port 37042 ssh2 Jul 22 20:52:14 s1 sshd[1680170]: Failed password for root from 114.55.53.252 port 37042 ssh2 Jul 22 20:52:17 s1 sshd[1680170]: Failed password for root from 114.55.53.252 port 37042 ssh2 Jul 22 20:52:19 s1 sshd[1680170]: Disconnecting authenticating user root 114.55.53.252 port 37042: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇺🇸 chronos	2024-07-21 08:23:31 (1 year ago)	[AUTORAVALT][[21/07/2024 - 05:23:31 -03:00 UTC] Attack from [Li Jia] [114.55.53.252]-[RANGE:114.55.0 ... show more [AUTORAVALT][[21/07/2024 - 05:23:31 -03:00 UTC] Attack from [Li Jia] [114.55.53.252]-[RANGE:114.55.0.0 - 114.55.255.255] Action: BLocKed FTP Brute-Force -> Running brute force credentials on the FTP server. Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc. ] ... show less	FTP Brute-Force Brute-Force
Anonymous	2024-07-20 23:14:28 (1 year ago)	sshd	Brute-Force SSH
🇬🇧 paradox-hub.fr	2024-07-20 09:38:02 (1 year ago)	Jul 20 09:38:00 964 sshd[15278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jul 20 09:38:00 964 sshd[15278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.55.53.252 user=root Jul 20 09:38:02 964 sshd[15278]: Failed password for root from 114.55.53.252 port 59342 ssh2 ... show less	Brute-Force SSH
🇬🇧 essinghigh	2024-07-20 08:26:23 (1 year ago)	1721463983 # Service_probe # SIGNATURE_SEND # source_ip:114.55.53.252 # dst_port:8000 ...	Port Scan
🇸🇰 GOVCERT	2024-07-19 15:55:24 (1 year ago)	Excessive Firewall Denies	DDoS Attack Web Spam
🇺🇸 leosgarcia	2024-07-19 03:12:24 (1 year ago)	2024-07-19T00:12:22.518721vmi1989674.contaboserver.net kernel: [443241.732183] [UFW BLOCK] IN=eth0 O ... show more 2024-07-19T00:12:22.518721vmi1989674.contaboserver.net kernel: [443241.732183] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:53:5a:5b:2c:dd:e9:57:d9:29:08:00 SRC=114.55.53.252 DST=62.146.226.173 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=0 DF PROTO=TCP SPT=28570 DPT=2222 WINDOW=19386 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 Dark0547	2024-07-18 18:59:18 (1 year ago)	[2024-07-18 18:59:18.627059] SSH/2222 Unautorized connection. Suspicious SSH Brute-force.	Port Scan Hacking Brute-Force Exploited Host SSH
🇩🇪 nicosqc	2024-07-18 05:03:23 (1 year ago)	Invalid user test from 114.55.53.252 port 53150	Brute-Force SSH
🇩🇪 nicosqc	2024-07-18 05:03:23 (1 year ago)	Invalid user test from 114.55.53.252 port 53150	Brute-Force SSH
🇩🇪 nicosqc	2024-07-18 05:03:23 (1 year ago)	Invalid user test from 114.55.53.252 port 53150	Brute-Force SSH
🇫🇷 Falco	2024-07-17 18:55:19 (1 year ago)	2024-07-17T20:55:03.697265+02:00 ovh-proxmox sshd[1564473]: Failed password for root from 114.55.53. ... show more 2024-07-17T20:55:03.697265+02:00 ovh-proxmox sshd[1564473]: Failed password for root from 114.55.53.252 port 49940 ssh2 2024-07-17T20:55:15.667112+02:00 ovh-proxmox sshd[1564473]: Failed password for root from 114.55.53.252 port 49940 ssh2 2024-07-17T20:55:18.713653+02:00 ovh-proxmox sshd[1564473]: Failed password for root from 114.55.53.252 port 49940 ssh2 ... show less	Brute-Force SSH
🇫🇮 itbyhf	2024-07-17 16:31:13 (1 year ago)	2024-07-17T19:30:59.964246+03:00 backup-hel sshd[2949427]: Failed password for root from 114.55.53.2 ... show more 2024-07-17T19:30:59.964246+03:00 backup-hel sshd[2949427]: Failed password for root from 114.55.53.252 port 46454 ssh2 2024-07-17T19:31:03.721290+03:00 backup-hel sshd[2949427]: Failed password for root from 114.55.53.252 port 46454 ssh2 2024-07-17T19:31:08.136757+03:00 backup-hel sshd[2949427]: Failed password for root from 114.55.53.252 port 46454 ssh2 2024-07-17T19:31:11.559941+03:00 backup-hel sshd[2949427]: Failed password for root from 114.55.53.252 port 46454 ssh2 2024-07-17T19:31:13.355989+03:00 backup-hel sshd[2949427]: Disconnecting authenticating user root 114.55.53.252 port 46454: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] ... show less	Brute-Force SSH
🇬🇧 quarba	2024-07-17 05:42:40 (1 year ago)	Brute force SMTP login attempted	Brute-Force SSH

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.255

🇫🇷 94.23.188.204

🇩🇪 87.106.255.14

🇺🇸 199.127.62.250

🇧🇪 198.235.24.131

🇺🇸 170.106.163.215

🇦🇺 168.144.163.162

🇺🇸 162.216.149.163

🇺🇸 147.185.132.52

🇨🇳 115.120.226.245

🇨🇳 112.46.214.37

🇨🇳 111.170.140.246

🇻🇳 103.166.184.148

🇺🇸 65.49.1.172

🇫🇮 45.82.110.150

🇮🇳 5.175.167.71

🇬🇪 2.57.217.229

🇨🇳 183.197.87.126

🇨🇳 139.227.76.45

🇨🇳 117.34.85.168