Name: Threat Intelligence: 152.53.42.72
Creator: UnwantedIP
License: https://creativecommons.org/licenses/by/4.0/

Threat LevelCRITICAL72/1001 rule type

3 incidents on record · active attack detected · persistent 11-day campaign · last seen 22d ago

PTR	h30.mein-webdienst.de
Org / ASN	Netcup KVM
Country	🇩🇪 Germany
City	Nuremberg, Bavaria
Timezone	Europe/Berlin

Attack Analysis

🇩🇪 Germany · Nuremberg · 197540 · DE NETCUP KVM

Suricata IDS Alert

Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (3)

Date	Severity	Description
9 Jul 2026 - 16:19	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
8 Jul 2026 - 13:27	medium	IDS: Suricata alert — Honeypot: probe to closed SSH port 22
28 Jun 2026 - 10:23	high	IDS: Suricata alert — Honeypot: probe to closed SSH port 22

Report for IP: 152.53.42.72

Attack Analysis

Reports (3)

Related IPs — Same /24 Block (152.53.42.0/24)