JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

152.53.245.166

Neutral Activity

Abuse Confidence Score

0% Low Risk

249 reports

167 reporters · latest 6 months ago

ISP: netcup GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS197540
Hostname(s): v2202608393767495962.goodsrv.de
Domain Name: netcup.de
Country: 🇩🇪 Germany
City: Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

152.53.245.166 has been reported 249 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

249 from 167 distinct reporters

First reported

April 8th 2026

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 helix	2026-05-04 19:06:07 UTC · (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).	Brute-Force SSH
🇮🇳 evicky2002	2026-04-30 13:02:46 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 sh97	2026-04-23 02:46:37 UTC · (6 months ago)	FR02: SSH Brute Force from 152.53.245.166 at 2026-04-23 06:46:37 +04	Brute-Force SSH
🇭🇺 simrol	2026-04-11 00:00:50 UTC · (7 months ago)	Automated report from vps-201 - Batch job Sat Apr 11 00:00:50 UTC 2026	Brute-Force SSH
🇺🇸 anon333	2026-04-10 16:33:36 UTC · (7 months ago)	Hacker syslog review 1775838815	Hacking
🇫🇷 forhosting	2026-04-10 15:38:44 UTC · (7 months ago)	2026-04-10T17:35:47.617983 vps773228.ovh.net sshd[701697]: Failed password for root from 152.53.245.166 port 26732 ssh2 2026-04-10T17:37:14.360789 vps773228.ovh.net sshd[701711]: Invalid user ftpuser from 152.53.245.166 port 50932 2026-04-10T17:37:14 ... show more 2026-04-10T17:35:47.617983 vps773228.ovh.net sshd[701697]: Failed password for root from 152.53.245.166 port 26732 ssh2 2026-04-10T17:37:14.360789 vps773228.ovh.net sshd[701711]: Invalid user ftpuser from 152.53.245.166 port 50932 2026-04-10T17:37:14.365140 vps773228.ovh.net sshd[701711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.53.245.166 2026-04-10T17:37:16.310119 vps773228.ovh.net sshd[701711]: Failed password for invalid user ftpuser from 152.53.245.166 port 50932 ssh2 2026-04-10T17:38:43.826784 vps773228.ovh.net sshd[701725]: Invalid user teste from 152.53.245.166 port 41200 ... show less	Brute-Force SSH
Anonymous	2026-04-10 15:38:39 UTC · (7 months ago)	2026-04-10T17:32:06.681210+02:00 hvs sshd-session[124363]: Disconnected from authenticating user root 152.53.245.166 port 27162 [preauth] 2026-04-10T17:35:40.604661+02:00 hvs sshd-session[124400]: Disconnected from authenticating user root 152.53.245 ... show more 2026-04-10T17:32:06.681210+02:00 hvs sshd-session[124363]: Disconnected from authenticating user root 152.53.245.166 port 27162 [preauth] 2026-04-10T17:35:40.604661+02:00 hvs sshd-session[124400]: Disconnected from authenticating user root 152.53.245.166 port 53098 [preauth] 2026-04-10T17:37:09.715343+02:00 hvs sshd-session[124413]: Invalid user ftpuser from 152.53.245.166 port 42650 2026-04-10T17:37:09.733796+02:00 hvs sshd-session[124413]: Disconnected from invalid user ftpuser 152.53.245.166 port 42650 [preauth] 2026-04-10T17:38:39.010680+02:00 hvs sshd-session[124446]: Invalid user teste from 152.53.245.166 port 49526 ... show less	Brute-Force SSH
Anonymous	2026-04-10 15:03:02 UTC · (7 months ago)	Automatic Reporting - Brute Force Attempts	Brute-Force SSH Web App Attack
🇫🇮 kowal	2026-04-10 15:02:43 UTC · (7 months ago)	Fail2ban: sshd jail triggered	Brute-Force SSH
🇨🇭 Modules	2026-04-10 14:59:38 UTC · (7 months ago)	Auto-report depuis Fail2Ban (jail: sshd, log: /var/log/auth.log)	SSH
🇰🇷 2048	2026-04-10 14:33:22 UTC · (7 months ago)	2026-04-10T23:18:38.140404+09:00 no8 sshd[579377]: Invalid user password from 152.53.245.166 port 14908 2026-04-10T23:23:06.114806+09:00 no8 sshd[579409]: Invalid user sammy from 152.53.245.166 port 48540 2026-04-10T23:28:49.569223+09:00 no8 sshd[579 ... show more 2026-04-10T23:18:38.140404+09:00 no8 sshd[579377]: Invalid user password from 152.53.245.166 port 14908 2026-04-10T23:23:06.114806+09:00 no8 sshd[579409]: Invalid user sammy from 152.53.245.166 port 48540 2026-04-10T23:28:49.569223+09:00 no8 sshd[579436]: Invalid user oracle from 152.53.245.166 port 34000 2026-04-10T23:31:55.251942+09:00 no8 sshd[579535]: Invalid user user from 152.53.245.166 port 11184 2026-04-10T23:33:17.266242+09:00 no8 sshd[579543]: Invalid user n8n from 152.53.245.166 port 44958 ... show less	Brute-Force SSH
🇺🇸 anon333	2026-04-10 14:21:42 UTC · (7 months ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-04-10T14:15:33Z and 2026-04-10T14:21:42Z	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-10 14:15:52 UTC · (7 months ago)	152.53.245.166 (DE/Germany/v2202504264165328279.luckysrv.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 10 09:13:32 14514 sshd[30154]: Failed password for root from 1 ... show more 152.53.245.166 (DE/Germany/v2202504264165328279.luckysrv.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 10 09:13:32 14514 sshd[30154]: Failed password for root from 152.53.245.166 port 53560 ssh2 Apr 10 09:15:40 14514 sshd[30312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.160.210.225 user=root Apr 10 09:15:43 14514 sshd[30312]: Failed password for root from 43.160.210.225 port 48826 ssh2 Apr 10 09:13:30 14514 sshd[30154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.53.245.166 user=root Apr 10 08:33:10 14514 sshd[26740]: Failed password for root from 103.143.11.150 port 40046 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇨🇦 Anytech	2026-04-10 14:15:28 UTC · (7 months ago)	Blocked by Conn-Monitor	Brute-Force SSH
🇰🇷 2048	2026-04-10 14:12:03 UTC · (7 months ago)	2026-04-10T23:12:01.632795+09:00 no8 sshd[579174]: Disconnected from authenticating user root 152.53.245.166 port 14492 [preauth] ...	Brute-Force SSH

Showing 1 to 15 of 249 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 175.206.113.91

🇹🇷 88.238.46.164

🇵🇱 2a02:26f7:c940:f89e:0:e000:0:1

🇵🇭 2001:4450:468a:700:4dfe:e8cd:9578:6c3

🇧🇷 186.192.15.37

🇺🇸 172.236.96.75

🇺🇸 165.154.173.120

🇧🇩 103.145.74.156

🇷🇴 92.118.39.56

🇬🇧 81.149.169.12

🇷🇴 80.94.95.115

🇭🇷 78.1.150.248

🇰🇷 58.230.162.174

🇺🇸 57.141.0.48

🇩🇪 41.216.189.147

🇬🇧 31.14.254.40

🇷🇼 197.243.14.52

🇦🇷 186.177.193.205

🇺🇸 173.190.43.124

🇺🇸 162.216.149.130