JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 5.252.53.32

5.252.53.32 was found in our database!

This IP was reported 144 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3279108.contaboserver.net
Domain Name	contabo.com
Country	🇺🇸 United States of America
City	St. Louis, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 5.252.53.32

Whois 5.252.53.32

IP Abuse Reports for 5.252.53.32:

This IP address has been reported a total of 144 times from 92 distinct sources. 5.252.53.32 was first reported on May 25th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 administrator	2026-05-30 12:02:23 (5 days ago)	2026-05-25 11:53:41,747 fail2ban.actions [1070]: NOTICE [apache-badbots] Ban 5.252.53.32 202 ... show more 2026-05-25 11:53:41,747 fail2ban.actions [1070]: NOTICE [apache-badbots] Ban 5.252.53.32 2026-05-25 11:53:41,747 fail2ban.actions [1070]: NOTICE [malwarenetworks] Ban 5.252.53.32 2026-05-28 00:01:24,525 fail2ban.actions [1070]: NOTICE [apache-badbots] Ban 5.252.53.32 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇫🇷 service Informatique	2026-05-28 04:00:37 (1 week ago)	/cgi-bin	Web App Attack
Anonymous	2026-05-27 06:00:00 (1 week ago)	SSH Brute-Force	DDoS Attack Port Scan Hacking Brute-Force SSH
🇲🇽 octageeks.com	2026-05-27 04:17:50 (1 week ago)	Wordpress malicious attack:[octamissingdomain]	Web App Attack
🇺🇸 bigscoots.com	2026-05-27 01:10:43 (1 week ago)	(sshd) Failed SSH login from 5.252.53.32 (US/United States/vmi3279108.contaboserver.net): 5 in the l ... show more (sshd) Failed SSH login from 5.252.53.32 (US/United States/vmi3279108.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 26 20:09:24 17505 sshd[8013]: Invalid user admin from 5.252.53.32 port 54346 May 26 20:09:26 17505 sshd[8013]: Failed password for invalid user admin from 5.252.53.32 port 54346 ssh2 May 26 20:09:57 17505 sshd[8019]: Invalid user orangepi from 5.252.53.32 port 35944 May 26 20:09:59 17505 sshd[8019]: Failed password for invalid user orangepi from 5.252.53.32 port 35944 ssh2 May 26 20:10:31 17505 sshd[8138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.53.32 user=root show less	Brute-Force SSH
🇮🇩 Burayot	2026-05-27 00:54:44 (1 week ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 5.252.53.32 (US/United States/vmi327 ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 5.252.53.32 (US/United States/vmi3279108.contaboserver.net): 1 in the last 3600 secs show less	Web App Attack
🇫🇮 mnazibo	2026-05-26 23:00:06 (1 week ago)	Date: 27/May/2026 01:18:00 \| Reported IP: 5.252.53.32 mod_security \| id: 930100 930110 930120 933100 ... show more Date: 27/May/2026 01:18:00 \| Reported IP: 5.252.53.32 mod_security \| id: 930100 930110 930120 933100 933120 933140 933150 933160 942151 \| US/group.my_domain/- \| Connections: 20 \| Blocked: Permanent Block: [LF_MODSEC] \| URIs: /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input; /containers/json; /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input; /index.php?lang=../../../../../../../../tmp/index1 \| Logs: OS File Access Attempt; Path Traversal Attack (/../) or (/.../); PHP Injection Attack: Configuration Directive Found; PHP Injection Attack: High-Risk PHP Function Call Found; PHP Injection Attack: High-Risk PHP Function Name Found; PHP Injection Attack: I/O Stream Found; PHP Injection Attack: PHP Open Tag Found; SQL Injection Attack: SQL function name detected show less	SQL Injection Brute-Force Bad Web Bot
🇺🇸 xmission.com	2026-05-26 22:52:10 (1 week ago)	Blocked by UFW (TCP on 2375) Source port: 49354 TTL: 54 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 49354 TTL: 54 Packet length: 40 TOS: 0x08 This report (for 5.252.53.32) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇹 alph44	2026-05-26 22:42:30 (1 week ago)	(mod_security) mod_security (id:949110) triggered by 5.252.53.32 (US/United States/vmi3279108.contab ... show more (mod_security) mod_security (id:949110) triggered by 5.252.53.32 (US/United States/vmi3279108.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: show less	Web App Attack
🇺🇸 antlac1	2026-05-26 22:05:49 (1 week ago)	crowdsecurity/http-cve-2021-41773	Brute-Force Web App Attack
🇺🇸 MPL	2026-05-26 21:59:17 (1 week ago)	tcp ports: 443,80 (6 or more attempts)	Port Scan
🇺🇸 MPL	2026-05-26 21:59:17 (1 week ago)	tcp/443 (2 or more attempts)	Port Scan
🇬🇧 Don Felip	2026-05-26 21:54:36 (1 week ago)	Web Exploiter - Banned by Fail2Ban	Hacking Web App Attack
🇫🇮 tjs	2026-05-26 21:30:00 (1 week ago)	web attack, shell attempt	Hacking Web App Attack
🇺🇸 lnklnx	2026-05-26 21:27:41 (1 week ago)	www.lnklnx.com:80 5.252.53.32 - - [26/May/2026:16:27:38 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.% ... show more www.lnklnx.com:80 5.252.53.32 - - [26/May/2026:16:27:38 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 527 "-" "libredtail-http" ... show less	Web App Attack

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.91

🇨🇳 27.29.66.57

🇨🇦 2607:f8b0:4023:1801::125

🇺🇸 162.216.150.69

🇨🇳 118.25.67.181

🇷🇴 80.94.92.233

🇦🇪 47.91.125.252

🇩🇪 46.249.99.46

🇬🇭 41.242.115.84

🇺🇸 3.14.81.223

🇭🇰 2602:80d:1003::3f

🇳🇱 185.223.235.12

🇺🇸 108.167.175.44

🇻🇳 103.77.215.62

🇮🇹 93.92.77.219

🇫🇷 91.231.89.7

🇶🇦 2600:1900:4260:40e::62

🇲🇾 173.239.236.194

🇺🇸 147.185.132.113

🇮🇳 135.235.138.43