JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.53.55.252

182.53.55.252 was found in our database!

This IP was reported 215 times. Confidence of Abuse is 100%: ?

100%

ISP	TOT Public Company Limited
Usage Type	Fixed Line ISP
ASN	AS23969
Hostname(s)	node-b24.pool-182-53.dynamic.nt-isp.net
Domain Name	totidc.net
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.53.55.252

Whois 182.53.55.252

IP Abuse Reports for 182.53.55.252:

This IP address has been reported a total of 215 times from 122 distinct sources. 182.53.55.252 was first reported on June 2nd 2026, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Bytemark	2026-07-15 03:56:03 (43 minutes ago)	Jul 15 04:56:03 lnx1 postfix/smtps/smtpd[1065513]: warning: unknown[182.53.55.252]: SASL LOGIN authe ... show more Jul 15 04:56:03 lnx1 postfix/smtps/smtpd[1065513]: warning: unknown[182.53.55.252]: SASL LOGIN authentication failed: (reason unavailable), [email protected] show less	Email Spam Spoofing Exploited Host
Anonymous	2026-07-15 02:07:39 (2 hours ago)	2026-07-15T03:07:39.091262+01:00 [masked] postfix/submission/smtpd[1827004]: warning: node-b24.pool- ... show more 2026-07-15T03:07:39.091262+01:00 [masked] postfix/submission/smtpd[1827004]: warning: node-b24.pool-182-53.dynamic.nt-isp.net[182.53.55.252]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=thijs@[masked] ... show less	Brute-Force
🇯🇵 ki3	2026-07-14 23:52:31 (4 hours ago)	Fail2Ban: Postfix Attack 182.53.55.252 1784073150.0(JST)	Email Spam Brute-Force
🇪🇸 Gem	2026-07-14 22:15:00 (6 hours ago)	Mail server brute-force access attempt. 2 times	Brute-Force
🇫🇷 dwmp	2026-07-14 20:00:08 (8 hours ago)	Jul 14 17:28:25 webcore postfix/smtpd[746034]: warning: unknown[182.53.55.252]: SASL LOGIN authentic ... show more Jul 14 17:28:25 webcore postfix/smtpd[746034]: warning: unknown[182.53.55.252]: SASL LOGIN authentication failed: authentication failure Jul 14 18:47:10 webcore postfix/smtpd[770164]: warning: unknown[182.53.55.252]: SASL LOGIN authentication failed: authentication failure Jul 14 22:00:06 webcore postfix/smtpd[826844]: warning: unknown[182.53.55.252]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇮🇩 sockominfo	2026-07-14 19:00:53 (9 hours ago)	Zimbra: Login failures from malicious IP: 182.53.55.252. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 182.53.55.252. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇩🇪 Melle	2026-07-14 18:52:01 (9 hours ago)	Unauthorized connection attempt detected from IP address 182.53.55.252	Brute-Force
🇩🇪 www.fransveldman.world	2026-07-14 18:36:51 (10 hours ago)	Jul 14 18:36:49 mail postfix/submission/smtpd[1285270]: warning: unknown[182.53.55.252]: SASL LOGIN ... show more Jul 14 18:36:49 mail postfix/submission/smtpd[1285270]: warning: unknown[182.53.55.252]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 18:36:50 mail postfix/submission/smtpd[1285270]: lost connection after AUTH from unknown[182.53.55.252] ... show less	Brute-Force Email Spam
🇩🇪 lister171254	2026-07-14 18:17:31 (10 hours ago)	2026-07-14T20:17:31.200958+02:00 thelists postfix/submission/smtpd[1403574]: warning: unknown[182.53 ... show more 2026-07-14T20:17:31.200958+02:00 thelists postfix/submission/smtpd[1403574]: warning: unknown[182.53.55.252]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=info ... show less	Hacking
🇮🇩 sockominfo	2026-07-14 18:00:53 (10 hours ago)	Zimbra: Login failures from malicious IP: 182.53.55.252. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 182.53.55.252. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 xveil	2026-07-14 17:47:58 (10 hours ago)	2026-07-15T00:47:56.815133 mail-honeypot postfix/submission/smtpd[15402]: warning: node-b24.pool-182 ... show more 2026-07-15T00:47:56.815133 mail-honeypot postfix/submission/smtpd[15402]: warning: node-b24.pool-182-53.dynamic.nt-isp.net[182.53.55.252]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
Anonymous	2026-07-14 17:30:15 (11 hours ago)	Authentication failure	Brute-Force
🇩🇪 mnpx	2026-07-14 17:24:50 (11 hours ago)	SMTP brute forcing (2× over 9h:42m); first seen here 2026-07-09T10:04Z	Brute-Force
🇵🇱 bmino.pl	2026-07-14 15:39:14 (13 hours ago)	Autoban IP(2): 182.53.55.252 - Hostname: TOT Public Company Limited - City: Sathon - Region: Bangkok ... show more Autoban IP(2): 182.53.55.252 - Hostname: TOT Public Company Limited - City: Sathon - Region: Bangkok - Country: Thailand - Location: 13.7085,100.526 - Organization: TOT Public Company Limited - failed attempts. show less	Brute-Force
Anonymous	2026-07-14 15:14:04 (13 hours ago)	2026-07-14T17:14:02.848862 biopolis.pcconsultant.it postfix/smtpd[2562950]: warning: unknown[182.53. ... show more 2026-07-14T17:14:02.848862 biopolis.pcconsultant.it postfix/smtpd[2562950]: warning: unknown[182.53.55.252]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force

Showing 1 to 15 of 215 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 35.205.201.151

🇺🇸 191.102.163.99

🇲🇽 189.146.149.110

🇺🇸 137.184.65.77

🇮🇳 116.193.128.26

🇵🇱 109.205.211.57

🇺🇸 109.105.209.12

🇬🇧 89.37.172.136

🇺🇸 64.62.197.194

🇩🇪 43.228.157.9

🇬🇧 31.14.254.94

🇺🇸 13.218.224.41

🇺🇸 2a09:bac5:9440:3af::5e:76

🇺🇸 2001:470:1:c84::64

🇩🇪 185.220.100.240

🇺🇸 185.150.190.165

🇺🇸 172.172.123.243

🇯🇵 153.251.245.76

🇹🇷 142.111.154.71

🇮🇳 124.253.192.255