This IP address has been reported a total of
11
times from
11 distinct
sources.
52.53.254.102 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
France
with 2
reports;
Poland
with 2
reports.
The most common categories in these recent reports were:
SSH
8
times;
Brute-Force
6
times;
Port Scan
4
times;
IoT Targeted
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-10-04T21:13:50Z to 2026-10-04T21:13:50Z UTC.
2026-10-04T21:13:50Z tcp/2222 data: SSH-2.0-paramiko_3.4.1
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
Port scan: 6 unsolicited TCP connections (handshake completed) to a decoy port with no production se ...
show morePort scan: 6 unsolicited TCP connections (handshake completed) to a decoy port with no production service between 2026-10-04 22:42:03 and 22:42:54 UTC. Destination port probed: tcp/2222 (SSH alternate port). Source blocked. - Lumerux Defense (lumerux.com), automated report. Contact: [email protected]show less
Honeypot Finding: repeated TCP service probing on TCP/2222 (service); 8 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/2222 (service); 8 application-level events across 8 source port(s). Sensor(s): Honeytrap.
show less
2026-10-04T17:46:35.690425-03:00 salada-de-fruta sshd[3447983]: Connection closed by 52.53.254.102 p ...
show more2026-10-04T17:46:35.690425-03:00 salada-de-fruta sshd[3447983]: Connection closed by 52.53.254.102 port 58536 [preauth]
...
show less
Oct 4 19:14:50 vps-eb8e942e sshd-session[3693277]: Connection closed by 52.53.254.102 port 40816 [p ...
show moreOct 4 19:14:50 vps-eb8e942e sshd-session[3693277]: Connection closed by 52.53.254.102 port 40816 [preauth]
Oct 4 19:14:50 vps-eb8e942e sshd-session[3693279]: Connection from 52.53.254.102 port 40818 on 57.128.195.69 port 2222 rdomain ""
Oct 4 19:14:51 vps-eb8e942e sshd-session[3693279]: Unable to negotiate with 52.53.254.102 port 40818: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
...
show less
2026-10-04T21:02:49.097232+02:00 thelists sshd[1328058]: Connection closed by 52.53.254.102 port 383 ...
show more2026-10-04T21:02:49.097232+02:00 thelists sshd[1328058]: Connection closed by 52.53.254.102 port 38396 [preauth]
2026-10-04T21:02:50.082586+02:00 thelists sshd[1328060]: Connection closed by 52.53.254.102 port 38404 [preauth]
2026-10-04T21:02:50.710540+02:00 thelists sshd[1328062]: Unable to negotiate with 52.53.254.102 port 38416: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-10-04T21:02:51.643141+02:00 thelists sshd[1328064]: Unable to negotiate with 52.53.254.102 port 38418: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
