This IP address has been reported a total of
13
times from
11 distinct
sources.
179.48.102.53 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
United States of America
with 3
reports;
Russian Federation
with 1
report.
The most common categories in these recent reports were:
Brute-Force
5
times;
SSH
3
times;
Port Scan
3
times;
Web App Attack
2
times;
Bad Web Bot
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-17T06:27:28.224481+02:00 server sshd-session[3404]: Connection closed by 179.48.102.53 port ...
show more2026-10-17T06:27:28.224481+02:00 server sshd-session[3404]: Connection closed by 179.48.102.53 port 51126 [preauth]
...
show less
SSH brute-force: 3 blocked connection attempts to port 22 between 2026-10-16 16:59 and 2026-10-16 16 ...
show moreSSH brute-force: 3 blocked connection attempts to port 22 between 2026-10-16 16:59 and 2026-10-16 16:59 UTC (OPNsense firewall log).
show less
Brute-Force
SSH
Anonymous
denied traffic to a honeypot network. destination port 23.
nfdump top talker: 179.48.102.53 | first seen 2026-10-15 21:55:08 | duration 245.248s | flows=139 | ...
show morenfdump top talker: 179.48.102.53 | first seen 2026-10-15 21:55:08 | duration 245.248s | flows=139 | packets=382602 | bytes=508095456 | pps=1560 | bps=16574094 | bpp=1328 | proto=udp
show less
DDoS Attack
Port Scan
Exploited Host
Anonymous
denied traffic to a honeypot network. destination port 23.
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan
Hacking
Anonymous
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.11 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.10.11 is noted in report timestamp
show less
Participating in DDoS Amplification Attack! Sending 11 requests over 17s asking for ?0? of apple.com ...
show moreParticipating in DDoS Amplification Attack! Sending 11 requests over 17s asking for ?0? of apple.com, cisco.com, atlassian.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
