JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.51.52.252

103.51.52.252 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 27%: ?

27%

ISP	Speed Net Connection
Usage Type	Fixed Line ISP
ASN	AS150669
Domain Name	snc-bd.com
Country	🇧🇩 Bangladesh
City	Tungi, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.51.52.252

Whois 103.51.52.252

IP Abuse Reports for 103.51.52.252:

This IP address has been reported a total of 30 times from 19 distinct sources. 103.51.52.252 was first reported on August 17th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-10-21 20:00:10 (11 hours ago)	(XMLRPC) WP XMLRPC Attack 103.51.52.252 (BD/Bangladesh/-/-/-/[AS150669 Speed Net Connection]): 1 in ... show more (XMLRPC) WP XMLRPC Attack 103.51.52.252 (BD/Bangladesh/-/-/-/[AS150669 Speed Net Connection]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 103.51.52.252 - - [21/Oct/2026:22:59:44 +0300] "GET /xmlrpc.php HTTP/1.1" 503 7317 "https://tavernadimitris.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0" show less	Port Scan
🇳🇱 Maurice	2026-10-20 06:28:29 (2 days ago)	Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 Maurice	2026-10-18 05:23:09 (4 days ago)	Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [3] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (68 bytes of payload); 14310 [3] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇨🇭 backslash	2026-10-06 10:03:03 (2 weeks ago)	block ruleset DA4A07AEE48B136A3922182BE8AA8BFBC1840803	Bad Web Bot
🇺🇸 kosada.com	2026-09-24 18:47:45 (3 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B0%5D=28&topics%5B2%5D=54&topics%5B3%5D=50&topics%5B4%5D=59 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-25 12:35:36 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇸🇬 garrymenata	2026-08-23 19:20:11 (1 month ago)	103.51.52.252 - - [24/Aug/2026:01:00:05 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U ... show more 103.51.52.252 - - [24/Aug/2026:01:00:05 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 103.51.52.252 - - [24/Aug/2026:01:00:09 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" 103.51.52.252 - - [24/Aug/2026:01:00:12 +0700] "GET / HTTP/1.1" 403 3258 "-" "Dalvik/2.1.0 (Linux; U; Android 12; Dcolor GD2 Build/SGZ4.240805.001)" ... show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-13 16:53:38 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-07-31 12:58:57 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-07-24 14:30:51 (2 months ago)	Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (777+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/256/form_key/ymzXeYSMueWgBwQF/ \| UA: Mozilla/5.0 (Windows; U; Windows CE) AppleWebKit/535.29.5 (KHTML, like Gecko) Version/4.0 Safari/535.29.5 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-12 10:37:57 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 Vegascosmetics	2026-07-12 09:26:16 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇺🇸 kosada.com	2026-06-29 17:07:08 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇰🇷 zlhIcd	2026-06-16 00:58:57 (4 months ago)	103.51.52.252 - - [15/Jun/2026:19:41:46 +0900] "GET /pcwiki/index.php?days=30&from=20251212222956&li ... show more 103.51.52.252 - - [15/Jun/2026:19:41:46 +0900] "GET /pcwiki/index.php?days=30&from=20251212222956&limit=250&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.6668.29 Safari/537.36" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-05-29 10:58:11 (4 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.68

🇬🇪 91.231.218.149

🇩🇪 69.5.169.67

🇬🇧 193.32.209.236

🇺🇿 188.113.206.245

🇦🇷 181.23.35.195

🇦🇺 175.36.141.228

🇳🇱 164.92.211.98

🇬🇧 154.16.44.59

🇮🇩 153.76.64.107

🇨🇿 78.44.238.178

🇱🇹 77.90.185.240

🇻🇳 27.79.2.7

🇺🇸 205.210.31.72

🇲🇽 189.244.107.78

🇷🇴 185.100.87.250

🇨🇴 181.58.39.102

🇺🇸 147.185.132.70

🇳🇱 146.190.229.211

🇯🇵 109.61.109.240