1.52.155.147

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
60 reports
48 reporters · latest 16 minutes ago
ISP
FPT Telecom
Usage Type
Fixed Line ISP
ASN
AS18403
Domain Name
fpttoanquoc.com
Country
🇻🇳 Viet Nam
City
Ho Chi Minh City, Ho Chi Minh City (HCMC)
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
60 from 48 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 9 🇩🇪 Germany 8 🇦🇹 Austria 5
Most common categories Port Scan 35 Brute-Force 10 Hacking 8 SSH 8 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
Port Scan
🇳🇱 IPCollective Intelligence
Residential Proxy - IPCollective Intelligence
Open Proxy
🇫🇷 ACE-INFORMATIQUE.NC
Brute-Force + SSH (honeypot) blocked by Fail2ban
Brute-Force SSH
🇺🇸 benjensen
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
Brute-Force SSH
🇩🇪 LRob
Not following 301 redirects — wasted requests | method: GET | path: /en/collection/elevations | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/154.0.0.0 Safari/537.36
Bad Web Bot
🇦🇷 Bruno
Port Scanner: 1.52.155.147
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇸🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 47 | Len: 60B | Win: 64240(1) | F2B/ufw-honeypot@2026-11-07T23:12:19Z
Port Scan Hacking
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇸🇬 khairilgunawan
ZonaKuota Sentinel: Port honeypot probe detected on port 22 (SSH). Unauthorized scanner blocked.
Port Scan SSH
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
🇩🇪 iNetWorker
firewall-block, port(s): 22/tcp, 23/tcp
Port Scan
🇬🇧 KTSTechnology
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 212.92.83.183
🇨🇴 181.53.221.19
🇵🇹 148.63.194.210
🇨🇳 121.10.215.142
🇳🇱 81.19.216.122
🇮🇱 79.177.139.76
🇬🇧 5.252.83.204
🇷🇴 193.32.162.15
🇨🇳 175.22.68.196
🇧🇷 168.205.190.245
🇬🇧 141.98.100.150
🇮🇱 130.185.96.113
🇰🇷 121.165.36.99
🇮🇹 79.3.96.178
🇧🇷 35.247.195.235
🇨🇳 183.222.174.168
🇺🇸 152.32.208.169
🇺🇸 96.240.20.2
🇺🇸 72.215.46.210
🇺🇸 44.229.34.100
feedback