This IP address has been reported a total of
36
times from
34 distinct
sources.
52.53.230.4 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: 4 SSH authentication failure events observed during the last 15 minutes against TC ...
show moreAutomated report: 4 SSH authentication failure events observed during the last 15 minutes against TCP port 22.
show less
2026-07-18T10:27:23.377389+00:00 boron sshd[187368]: Connection closed by 52.53.230.4 port 40414 [pr ...
show more2026-07-18T10:27:23.377389+00:00 boron sshd[187368]: Connection closed by 52.53.230.4 port 40414 [preauth]
2026-07-18T10:27:24.362507+00:00 boron sshd[187370]: Connection closed by 52.53.230.4 port 40430 [preauth]
2026-07-18T10:27:24.789934+00:00 boron sshd[187372]: Unable to negotiate with 52.53.230.4 port 41968: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
*Port Scan* detected from 52.53.230.4 (US/United States/ec2-52-53-230-4.us-west-1.compute.amazonaws. ...
show more*Port Scan* detected from 52.53.230.4 (US/United States/ec2-52-53-230-4.us-west-1.compute.amazonaws.com).
show less
2026-07-18T11:57:13.715838+02:00 zg0iiuob sshd-session[3825113]: Connection closed by 52.53.230.4 po ...
show more2026-07-18T11:57:13.715838+02:00 zg0iiuob sshd-session[3825113]: Connection closed by 52.53.230.4 port 33034 [preauth]
2026-07-18T11:57:14.651374+02:00 zg0iiuob sshd-session[3825115]: Connection closed by 52.53.230.4 port 33036 [preauth]
2026-07-18T11:57:15.250365+02:00 zg0iiuob sshd-session[3825117]: Unable to negotiate with 52.53.230.4 port 33048: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-07-18T11:57:15.780667+02:00 zg0iiuob sshd-session[3825119]: Unable to negotiate with 52.53.230.4 port 33050: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-07-18T11:57:16.957585+02:00 zg0iiuob sshd-session[3825121]: Connection closed by 52.53.230.4 port 33064 [preauth]
...
show less
2026-07-18T11:15:39.818060+02:00 immelmann sshd-session[2152662]: Connection closed by 52.53.230.4 p ...
show more2026-07-18T11:15:39.818060+02:00 immelmann sshd-session[2152662]: Connection closed by 52.53.230.4 port 36544 [preauth]
...
show less
SSH brute-force attempt from 52.53.230.4 blocked by Houston-Xeon-Dartnode. 2026-07-18T09:08:12.35156 ...
show moreSSH brute-force attempt from 52.53.230.4 blocked by Houston-Xeon-Dartnode. 2026-07-18T09:08:12.351561+00:00 texas.dartnode.com sshd[3166175]: Connection closed by 52.53.230.4 port 58754 [preauth]
2026-07-18T09:08:12.443611+00:00 texas.dartnode.com sshd[3166178]: Connection from 52.53.230.4 port 58772 on 166.0.192.166 port 22 rdomain ""
2026-07-18T09:08:12.676511+00:00 texas.dartnode.com sshd[3166178]: Unable to negotiate with 52.53.230.4 port 58772: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
show less
2026-07-18T16:54:32.305985+08:00 cowgl-hkg sshd[1557263]: Connection closed by 52.53.230.4 port 4032 ...
show more2026-07-18T16:54:32.305985+08:00 cowgl-hkg sshd[1557263]: Connection closed by 52.53.230.4 port 40326 [preauth]
2026-07-18T16:54:33.187988+08:00 cowgl-hkg sshd[1557265]: Connection closed by 52.53.230.4 port 40334 [preauth]
2026-07-18T16:54:33.787672+08:00 cowgl-hkg sshd[1557267]: Unable to negotiate with 52.53.230.4 port 40346: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-07-18T16:54:34.504005+08:00 cowgl-hkg sshd[1557269]: Unable to negotiate with 52.53.230.4 port 40358: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
...
show less
2026-07-18T08:45:54.675543+00:00 subaru sshd-session[1294647]: Connection closed by 52.53.230.4 port ...
show more2026-07-18T08:45:54.675543+00:00 subaru sshd-session[1294647]: Connection closed by 52.53.230.4 port 35580 [preauth]
2026-07-18T08:45:55.637461+00:00 subaru sshd-session[1294669]: Connection closed by 52.53.230.4 port 35592 [preauth]
2026-07-18T08:45:55.995360+00:00 subaru sshd-session[1294682]: Unable to negotiate with 52.53.230.4 port 35604: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-07-18T08:45:56.541991+00:00 subaru sshd-session[1294692]: Unable to negotiate with 52.53.230.4 port 35610: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-07-18T08:45:57.236284+00:00 subaru sshd-session[1294724]: Connection closed by 52.53.230.4 port 35620 [preauth]
...
show less
SSH brute-force attempt from 52.53.230.4 blocked by Detroit. 2026-07-18T01:32:21.158592-07:00 UR313 ...
show moreSSH brute-force attempt from 52.53.230.4 blocked by Detroit. 2026-07-18T01:32:21.158592-07:00 UR313 sshd-session[366727]: Connection closed by 52.53.230.4 port 44886 [preauth]
2026-07-18T01:32:21.215993-07:00 UR313 sshd-session[366732]: Connection from 52.53.230.4 port 44890 on 66.187.7.83 port 22 rdomain ""
2026-07-18T01:32:21.473211-07:00 UR313 sshd-session[366732]: Unable to negotiate with 52.53.230.4 port 44890: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
show less
Brute-Force
SSH
Anonymous
SSH Brute Force (3 attempts). Evidence: sshd[2264796]: Connection closed by 52.53.230.4 port 34396 [ ...
show moreSSH Brute Force (3 attempts). Evidence: sshd[2264796]: Connection closed by 52.53.230.4 port 34396 [preauth];sshd[2264798]: Connection closed by 52.53.230.4 port 34398 [preauth]
show less
Part of detected botnet campaign. Shared hassh: 87e3d9ffee0540b0390f8a5b9c343c08. 3 IPs in this camp ...
show morePart of detected botnet campaign. Shared hassh: 87e3d9ffee0540b0390f8a5b9c343c08. 3 IPs in this campaign.
show less
Port Scan
Brute-Force
SSH
Showing 1 to
15
of 36 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩