5.253.235.89
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Net1 GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- Unknown
- Hostname(s)
- vmi3733701.contaboserver.net
- Domain Name
- net1.de
- Country
- 🇩🇪 Germany
- City
- Oberasbach, Bavaria
Abuse Reports
Total reports
22 from
20 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 ZeroTrustSentinel |
Unauthorized HTTP vulnerability scanning and endpoint probe (http-crawl-non_statics); blocked by perimeter firewall.
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 ZeroTrustSentry |
Unauthorized HTTP vulnerability scanning and endpoint probe (http-crawl-non_statics); blocked by perimeter firewall.
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇪🇸 beats |
Reported by CrowdSec
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇩🇪 Tamsy |
HTTPD - 4xx scan
|
Web App Attack | |
| Anonymous |
http scanning for .env files
...
|
Hacking Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| 🇩🇪 big-cloud.nl |
Try to access /server/.env.prod.example
|
Web App Attack | |
| 🇨🇦 SSH-Admin |
Probing for Exploits on ns200
|
Exploited Host Web App Attack | |
| 🇨🇦 SSH-Admin |
Probing for Exploits on ns74
|
Exploited Host Web App Attack | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Reputation Unknown via CitrixHoneypot IOC Country: France 2x -> Target Country: Ashburn, USA HTTPS
|
Hacking Web App Attack | |
| 🇪🇸 GranTech |
|
Web App Attack | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/http-probing - events: 11
|
Web App Attack Hacking | |
| 🇮🇱 arika |
(CT) IP 5.253.235.89 (DE/Germany/vmi3733701.contaboserver.net) found to have 64 connections
|
DDoS Attack | |
| 🇵🇱 TaKeN |
Automated Wazuh observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 2 matching Wazuh alert(s) between 2026-11-07T20:58:59+01:00 and 2026-11-07T20:58:59+01:00.
|
Web App Attack Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown