JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 192.53.122.11

192.53.122.11 was found in our database!

This IP was reported 208 times. Confidence of Abuse is 72%: ?

72%

ISP	Linode, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	192-53-122-11.ip.linodeusercontent.com
Domain Name	linode.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 192.53.122.11

Whois 192.53.122.11

IP Abuse Reports for 192.53.122.11:

This IP address has been reported a total of 208 times from 39 distinct sources. 192.53.122.11 was first reported on November 14th 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Luhte	2026-06-06 21:05:29 (18 hours ago)	Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-06-06T21:05:29Z. Source IP completed ... show more Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-06-06T21:05:29Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇳🇱 tpjg	2026-06-06 18:33:24 (21 hours ago)	Automated: 15 requests with error status in 120s window from 192.53.122.11. Evidence: /login.php:404 ... show more Automated: 15 requests with error status in 120s window from 192.53.122.11. Evidence: /login.php:404,/+CSCOE+/logon.html:404,/default.php:301,/default.jsp:404,/nmaplowercheck1780770801:301,/dana-cached/hc/HostCheckerInstaller.osx:404,/api/v2/about:404,/dniapi/userInfos:404,/user:404,/default.php:404,/sdk:404,/health:404,/webui:404,/devicedesc.xml:301,/nice%20ports%2C/Tri%6Eity.txt%2ebak:301 (+35 more) show less	Web App Attack
🇨🇦 dpinse	2026-06-06 16:49:55 (22 hours ago)	This IP was detected by CrowdSec triggering firewallservices/pf-scan-multi_ports	Web App Attack Port Scan
🇧🇷 ICS Labs	2026-06-05 20:06:13 (1 day ago)	ICS Labs identified 192.53.122.11 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Brute-Force Exploited Host
🇳🇱 tpjg	2026-06-04 16:39:02 (2 days ago)	Automated: 15 requests with error status in 120s window from 192.53.122.11. Evidence: /evox/about:40 ... show more Automated: 15 requests with error status in 120s window from 192.53.122.11. Evidence: /evox/about:404,/favicon.ico:404,/rest/applinks/1.0/manifest:301,/login.php:404,/webui:404,/CFIDE/componentutils/:404,/dana-na/nc/nc_gina_ver.txt:404,/+CSCOE+/logon.html:404,/webui:404,/health:404,/nmaplowercheck1780591140:404,/base.cgi:404,/cgi-mod/header_logo.cgi:404,/devicedesc.xml:301,/nice%20ports%2C/Tri%6Eity.txt%2ebak:301 show less	Web App Attack
🇩🇪 markawes	2026-06-04 12:55:25 (3 days ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 192.53.122.11 - - [04/Jun/2026:13:55:21 +0100] "GET /HNAP1 HTTP/1.1" 404 3079 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML" 192.53.122.11 - - [04/Jun/2026:13:55:22 +0100] "GET /cgi-bin/info.cgi HTTP/1.1" 404 465 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML" 192.53.122.11 - - [04/Jun/2026:13:55:22 +0100] "GET /cgi-bin/info.cgi HTTP/1.1" 404 3080 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML" show less	Port Scan Hacking Web App Attack
🇨🇦 Luhte	2026-06-04 06:29:35 (3 days ago)	Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-06-04T06:29:35Z. Source IP completed ... show more Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-06-04T06:29:35Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇨🇦 Luhte	2026-05-26 18:26:46 (1 week ago)	Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-26T18:26:46Z. Source IP completed ... show more Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-26T18:26:46Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇨🇦 Luhte	2026-05-26 12:43:18 (1 week ago)	Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-26T12:43:18Z. Source IP completed ... show more Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-26T12:43:18Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇨🇦 Luhte	2026-05-25 04:35:32 (1 week ago)	Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-25T04:35:32Z. Source IP completed ... show more Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-25T04:35:32Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇺🇸 dpinse	2026-05-25 04:02:57 (1 week ago)	sshd: Attempt to login using a non-existent user	Brute-Force SSH
🇳🇱 tpjg	2026-05-25 00:59:35 (1 week ago)	Automated: 15 requests with error status in 120s window from 192.53.122.11. Evidence: /rest/applinks ... show more Automated: 15 requests with error status in 120s window from 192.53.122.11. Evidence: /rest/applinks/1.0/manifest:301,/main.cfm:404,/health:301,/dana-cached/hc/HostCheckerInstaller.osx:404,/login.php:404,/CFIDE/componentutils/:404,/dniapi/userInfos:404,/human.aspx:404,/webui:404,/sdk:404,/cgi-mod/header_logo.cgi:404,/health:404,/home.asp:404,/devicedesc.xml:301,/nice%20ports%2C/Tri%6Eity.txt%2ebak:301 show less	Web App Attack
🇨🇦 unullable	2026-05-24 18:59:52 (1 week ago)	Telnet scanner/bruter (port:2048)	Brute-Force
🇨🇦 Luhte	2026-05-24 14:39:41 (2 weeks ago)	Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-24T14:39:41Z. Source IP completed ... show more Unsolicited TCP connection from 192.53.122.11 to port 0 at 2026-05-24T14:39:41Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇩🇪 markawes	2026-05-24 13:13:35 (2 weeks ago)	[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ... show more [markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence: 192.53.122.11 - - [24/May/2026:14:13:33 +0100] "GET /cgi-bin/info.cgi HTTP/1.1" 404 465 "-" "Mozilla/5.0 (X11; ; Linux x86_64) AppleWebKit/537.36 (KHTML" 192.53.122.11 - - [24/May/2026:14:13:33 +0100] "GET /HNAP1 HTTP/1.1" 404 3080 "-" "Mozilla/5.0 (X11; ; Linux x86_64) AppleWebKit/537.36 (KHTML" 192.53.122.11 - - [24/May/2026:14:13:34 +0100] "GET /cgi-bin/info.cgi HTTP/1.1" 404 3081 "-" "Mozilla/5.0 (X11; ; Linux x86_64) AppleWebKit/537.36 (KHTML" show less	Port Scan Hacking Web App Attack

Showing 1 to 15 of 208 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 2a02:4780:6:1466:0:35c6:7c3b:1

🇮🇩 2406:da19:776:6e01:b56b:5511:b8dd:5e0c

🇰🇬 217.29.30.135

🇺🇸 205.210.31.69

🇫🇷 176.160.188.197

🇮🇳 128.185.201.170

🇺🇸 2607:f8b0:4001:c14::128

🇺🇾 186.53.83.39

🇬🇭 102.223.92.101

🇲🇽 45.188.76.93

🇺🇸 18.119.209.50

🇮🇳 103.105.126.30

🇿🇦 41.132.57.43

🇺🇸 4.157.250.195

🇸🇬 152.32.218.149

🇷🇺 145.255.20.211

🇦🇺 37.120.234.197

🇺🇸 5.78.154.119

🇧🇬 193.24.211.247

🇺🇦 146.120.220.178