163.53.252.100

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
163.53.252.13	attack	[Fri Sep 06 00:59:13.294193 2019] [:error] [pid 200348] [client 163.53.252.13:47384] [client 163.53.252.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XXHZkaDElfbcirD75ea4ZwAAAAc"] ...	2019-09-06 12:39:39

Type

Details

Datetime

163.53.252.13

attack

[Fri Sep 06 00:59:13.294193 2019] [:error] [pid 200348] [client 163.53.252.13:47384] [client 163.53.252.13] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XXHZkaDElfbcirD75ea4ZwAAAAc"]
...

2019-09-06 12:39:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.53.252.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12488
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;163.53.252.100.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 08:38:25 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 100.252.53.163.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 100.252.53.163.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.175.151	attack	Nov 6 02:34:04 microserver sshd[22158]: Failed none for root from 222.186.175.151 port 19798 ssh2 Nov 6 02:34:05 microserver sshd[22158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Nov 6 02:34:07 microserver sshd[22158]: Failed password for root from 222.186.175.151 port 19798 ssh2 Nov 6 02:34:11 microserver sshd[22158]: Failed password for root from 222.186.175.151 port 19798 ssh2 Nov 6 02:34:15 microserver sshd[22158]: Failed password for root from 222.186.175.151 port 19798 ssh2 Nov 6 10:38:18 microserver sshd[20211]: Failed none for root from 222.186.175.151 port 44726 ssh2 Nov 6 10:38:19 microserver sshd[20211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Nov 6 10:38:21 microserver sshd[20211]: Failed password for root from 222.186.175.151 port 44726 ssh2 Nov 6 10:38:25 microserver sshd[20211]: Failed password for root from 222.186.175.151 port 44726 ssh2	2019-11-09 02:25:26
201.6.253.64	attack	Autoban 201.6.253.64 AUTH/CONNECT	2019-11-09 02:26:40
103.86.37.45	attackbots	11/08/2019-15:36:04.152193 103.86.37.45 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-11-09 02:36:57
86.49.224.130	attackbots	Brute force attempt	2019-11-09 02:23:09
217.61.122.160	attackspam	Nov 8 12:56:37 ny01 sshd[13066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.122.160 Nov 8 12:56:39 ny01 sshd[13066]: Failed password for invalid user army from 217.61.122.160 port 33512 ssh2 Nov 8 13:00:28 ny01 sshd[13575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.122.160	2019-11-09 02:14:30
78.186.138.134	attack	" "	2019-11-09 02:15:35
121.140.165.67	attack	Telnetd brute force attack detected by fail2ban	2019-11-09 01:59:54
103.23.224.121	attackbots	103.23.224.121 - - [08/Nov/2019:15:37:12 +0100] "POST /wp-login.php HTTP/1.1" 200 2112 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.23.224.121 - - [08/Nov/2019:15:37:14 +0100] "POST /wp-login.php HTTP/1.1" 200 2093 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-11-09 01:59:04
77.70.96.195	attackspam	Nov 8 18:51:06 sso sshd[23170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.70.96.195 Nov 8 18:51:08 sso sshd[23170]: Failed password for invalid user ftp from 77.70.96.195 port 51652 ssh2 ...	2019-11-09 02:02:23
188.35.187.50	attackbots	Nov 8 18:25:03 sd-53420 sshd\[1316\]: User root from 188.35.187.50 not allowed because none of user's groups are listed in AllowGroups Nov 8 18:25:03 sd-53420 sshd\[1316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.35.187.50 user=root Nov 8 18:25:05 sd-53420 sshd\[1316\]: Failed password for invalid user root from 188.35.187.50 port 52076 ssh2 Nov 8 18:29:08 sd-53420 sshd\[2537\]: Invalid user comdd from 188.35.187.50 Nov 8 18:29:08 sd-53420 sshd\[2537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.35.187.50 ...	2019-11-09 02:00:28
3.86.204.193	attack	2019-11-08 08:37:01 H=ec2-3-86-204-193.compute-1.amazonaws.com (phylobago.mysecuritycamera.org) [3.86.204.193]:43430 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-11-08 08:37:01 H=ec2-3-86-204-193.compute-1.amazonaws.com (phylobago.mysecuritycamera.org) [3.86.204.193]:43430 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-11-08 08:37:05 H=ec2-3-86-204-193.compute-1.amazonaws.com (phylobago.mysecuritycamera.org) [3.86.204.193]:35616 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-11-08 08:37:05 H=ec2-3-86-204-193.compute-1.amazonaws.com (phylobago.mysecuritycamera.org) [3.86.204.193]:35616 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-11-09 02:05:48
188.220.180.145	attackspambots	Automatic report - Port Scan Attack	2019-11-09 01:58:33
132.232.177.170	attackspam	Nov 8 15:29:35 vmanager6029 sshd\[13989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.177.170 user=root Nov 8 15:29:36 vmanager6029 sshd\[13989\]: Failed password for root from 132.232.177.170 port 47836 ssh2 Nov 8 15:36:31 vmanager6029 sshd\[14125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.177.170 user=root	2019-11-09 02:24:32
78.184.1.38	attackbotsspam	Automatic report - Port Scan Attack	2019-11-09 02:06:55
201.179.153.61	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/201.179.153.61/ AR - 1H : (46) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : AR NAME ASN : ASN22927 IP : 201.179.153.61 CIDR : 201.178.0.0/15 PREFIX COUNT : 244 UNIQUE IP COUNT : 4001024 ATTACKS DETECTED ASN22927 : 1H - 3 3H - 6 6H - 9 12H - 12 24H - 20 DateTime : 2019-11-08 15:36:48 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-09 02:13:28

Recently Reported IPs

82.16.215.86	36.232.24.44	112.248.6.111	81.70.255.20
218.200.114.13	177.33.42.73	150.255.24.250	59.95.68.106
67.204.218.50	82.65.217.242	120.197.32.9	156.96.44.167
59.30.235.77	141.101.69.180	123.176.31.150	203.25.208.154
117.111.1.21	151.21.148.185	183.228.135.138	37.252.84.49