JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

5.252.153.200

Neutral Activity

Abuse Confidence Score

0% Low Risk

340 reports

194 reporters · latest 4 months ago

ISP: Venture i. S.A.
Usage Type: Data Center/Web Hosting/Transit
ASN: Unknown
Domain Name: yohost.org
Country: 🇵🇦 Panama
City: Calidonia, Panama

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

5.252.153.200 has been reported 340 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

340 from 194 distinct reporters

First reported

June 29th 2025

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-06-26 05:53:22 UTC · (4 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-09 11:21:50 UTC · (6 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇷 SpaceHost-Server	2026-04-22 22:35:43 UTC · (6 months ago)		Brute-Force Web App Attack
Anonymous	2026-04-22 19:28:59 UTC · (6 months ago)	Fail2ban (sshd jail): 2 failed SSH attempts from 5.252.153.200.	Brute-Force SSH
🇹🇷 0xi	2026-04-22 16:00:33 UTC · (6 months ago)	SSH brute-force attack detected (1194 attempts). Targeted ports: 22. Triggered sensors: Cowrie, P0f, Suricata, Fatt. Post-exploitation commands were executed. Observed via distributed honeypot network.	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-21 22:33:30 UTC · (6 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/5.252.153.200	SSH
🇮🇳 Parth Maniar	2026-04-21 17:45:03 UTC · (6 months ago)	This IP address carried out 100 port scanning attempts on 20-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Port Scan SSH
🇺🇸 George0phile	2026-04-21 12:00:07 UTC · (6 months ago)	SSH brute force on port 22 -- 27 attempts, 1 successful. Credentials: root:159753, sammy:1Qazxsw2, server:3245gs5662d34. Active: 2026-04-21T07:00 to 2026-04-21T07:32. Downloaded: http://5.189.149.171/f/x86_64/.16; http://31.56.209.39/bizy.x64. Post-l ... show more SSH brute force on port 22 -- 27 attempts, 1 successful. Credentials: root:159753, sammy:1Qazxsw2, server:3245gs5662d34. Active: 2026-04-21T07:00 to 2026-04-21T07:32. Downloaded: http://5.189.149.171/f/x86_64/.16; http://31.56.209.39/bizy.x64. Post-login: /usr/bin/env bash /usr/local/bin/cpu-reaper; /usr/lib/systemd/systemd-executor --deserialize 29 --log-lev; pgrep -x 16. Malware: botnet (high); miner (critical); trojan (high). Source: AS205775 NEON CORE NETWORK LLC (Frankfurt am Main, DE). Data from SSH honeypot — not a production system. show less	Brute-Force SSH IoT Targeted
🇺🇸 rasmus	2026-04-21 10:24:28 UTC · (6 months ago)	SSH brute-force — e.g. Apr 21 01:26:33 localhost sshd[51352]: Invalid user vpn from 5.252.153.200 port 49858	Brute-Force SSH
Anonymous	2026-04-21 09:06:34 UTC · (6 months ago)	2026-04-21T08:57:39.671498+00:00 rs1 sshd[2386419]: Invalid user newuser from 5.252.153.200 port 54706 2026-04-21T08:59:10.695934+00:00 rs1 sshd[2386684]: Invalid user test from 5.252.153.200 port 36146 2026-04-21T09:06:33.867199+00:00 rs1 sshd[23868 ... show more 2026-04-21T08:57:39.671498+00:00 rs1 sshd[2386419]: Invalid user newuser from 5.252.153.200 port 54706 2026-04-21T08:59:10.695934+00:00 rs1 sshd[2386684]: Invalid user test from 5.252.153.200 port 36146 2026-04-21T09:06:33.867199+00:00 rs1 sshd[2386864]: Invalid user mihail from 5.252.153.200 port 46432 ... show less	Brute-Force SSH
🇺🇸 sh97	2026-04-21 08:59:26 UTC · (6 months ago)	dedirock-8034437: SSH Brute Force from 5.252.153.200 at 2026-04-21 12:59:26 +04	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-21 08:56:36 UTC · (6 months ago)	5.252.153.200 (NL/The Netherlands/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 21 03:56:12 15238 sshd[15864]: pam_unix(sshd:auth): authentication failure; logname= u ... show more 5.252.153.200 (NL/The Netherlands/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 21 03:56:12 15238 sshd[15864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.232.186.81 user=root Apr 21 03:50:38 15238 sshd[15396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.153.200 user=root Apr 21 03:50:40 15238 sshd[15396]: Failed password for root from 5.252.153.200 port 35764 ssh2 Apr 21 03:53:36 15238 sshd[15638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.78.50.146 user=root Apr 21 03:53:38 15238 sshd[15638]: Failed password for root from 89.78.50.146 port 49628 ssh2 IP Addresses Blocked: 165.232.186.81 (IN/India/-) show less	Brute-Force SSH
🇺🇸 yzfdude1	2026-04-21 08:19:27 UTC · (6 months ago)	Apr 21 02:18:01 jupyterhub sshd[582972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.153.200 user=root Apr 21 02:18:03 jupyterhub sshd[582972]: Failed password for root from 5.252.153.200 port 58702 ... show more Apr 21 02:18:01 jupyterhub sshd[582972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.153.200 user=root Apr 21 02:18:03 jupyterhub sshd[582972]: Failed password for root from 5.252.153.200 port 58702 ssh2 Apr 21 02:19:27 jupyterhub sshd[582976]: Invalid user ubuntu from 5.252.153.200 port 54738 ... show less	Brute-Force SSH
🇮🇳 Parth Maniar	2026-04-21 08:13:44 UTC · (6 months ago)	This IP address carried out 25 SSH credential attack (attempts) on 20-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇺🇸 patyk	2026-04-21 08:08:03 UTC · (6 months ago)	Apr 21 08:00:03 patyk-freedownload sshd[1441255]: Invalid user support from 5.252.153.200 port 51082 Apr 21 08:01:22 patyk-freedownload sshd[1442030]: Invalid user test_1 from 5.252.153.200 port 59360 Apr 21 08:02:39 patyk-freedownload sshd[1442802]: ... show more Apr 21 08:00:03 patyk-freedownload sshd[1441255]: Invalid user support from 5.252.153.200 port 51082 Apr 21 08:01:22 patyk-freedownload sshd[1442030]: Invalid user test_1 from 5.252.153.200 port 59360 Apr 21 08:02:39 patyk-freedownload sshd[1442802]: Invalid user ftpuser from 5.252.153.200 port 47240 Apr 21 08:06:38 patyk-freedownload sshd[1445216]: Invalid user myuser from 5.252.153.200 port 38614 Apr 21 08:08:02 patyk-freedownload sshd[1446054]: Invalid user zhang from 5.252.153.200 port 46970 ... show less	Brute-Force SSH

Showing 1 to 15 of 340 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 151.25.12.139

🇺🇸 143.110.145.158

🇮🇳 115.245.172.214

🇳🇱 103.219.153.192

🇪🇸 92.60.34.205

🇺🇸 35.222.14.58

🇺🇸 24.199.233.100

🇮🇪 3.255.149.169

🇰🇪 197.248.25.77

🇳🇱 195.178.110.159

🇨🇦 149.56.154.79

🇺🇸 147.185.132.72

🇬🇧 109.176.229.243

🇲🇦 105.74.206.8

🇳🇱 45.144.212.158

🇰🇷 220.76.91.28

🇲🇽 189.241.158.53

🇩🇪 139.59.143.102

🇷🇴 80.94.92.179

🇮🇹 79.36.119.201