JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.152.52.254

122.152.52.254 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 29%: ?

29%

ISP	Innovative Online Ltd.
Usage Type	Fixed Line ISP
ASN	AS38562
Domain Name	iolbd.net
Country	🇧🇩 Bangladesh
City	Chattogram, Chittagong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.152.52.254

Whois 122.152.52.254

IP Abuse Reports for 122.152.52.254:

This IP address has been reported a total of 16 times from 12 distinct sources. 122.152.52.254 was first reported on January 17th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-06-29 11:51:33 (2 days ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-25 08:15:17 (6 days ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /brands/powercom/shopby/manufacturer-lsi-aruba_networks-haivision-inspur-powercom-xyz.html?mode=grid \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇦🇺 screwlooseit.com.au	2026-06-19 05:34:27 (1 week ago)	Blocked by CSF 13 firewall - Rule: XMLRPC BD/Bangladesh/-	Web App Attack
🇫🇷 dynamix	2026-06-19 05:34:10 (1 week ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇩🇪 milcraft.nl	2026-05-15 01:35:24 (1 month ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇨🇭 unifr	2023-01-04 16:42:03 (3 years ago)	Unauthorized IMAP connection attempt	Brute-Force
🇮🇸 ISPLtd	2022-12-25 23:53:46 (3 years ago)	Dec 26 00:42:11 SRC=122.152.52.254 PROTO=TCP SPT=44473 DPT=25565 SYN Dec 26 00:42:12 SRC=122.152.52. ... show more Dec 26 00:42:11 SRC=122.152.52.254 PROTO=TCP SPT=44473 DPT=25565 SYN Dec 26 00:42:12 SRC=122.152.52.254 PROTO=TCP SPT=44473 DPT=25565 SYN Dec 26 00:42:14 SRC=122.152.52.254 PROTO=TCP SPT=44473 DPT=25565 ... show less	Port Scan
🇮🇸 ISPLtd	2022-10-31 08:43:35 (3 years ago)	Oct 31 09:16:17 SRC=122.152.52.254 PROTO=TCP SPT=52975 DPT=8081 SYN Oct 31 09:16:18 SRC=122.152.52.2 ... show more Oct 31 09:16:17 SRC=122.152.52.254 PROTO=TCP SPT=52975 DPT=8081 SYN Oct 31 09:16:18 SRC=122.152.52.254 PROTO=TCP SPT=52975 DPT=8081 SYN Oct 31 09:16:19 SRC=122.152.52.254 PROTO=TCP SPT=52991 DPT=8081 ... show less	Port Scan
🇫🇷 QUADEMU Abuse Dpt	2022-09-13 19:57:24 (3 years ago)	Noxious/Nuisible/вредоносный Host.	Port Scan Brute-Force
🇺🇸 serverargentina.com	2022-07-18 11:20:08 (3 years ago)	Jul 18 11:19:23 serverargentina sshd[19401]: Did not receive identification string from 122.152.52.2 ... show more Jul 18 11:19:23 serverargentina sshd[19401]: Did not receive identification string from 122.152.52.254 port 48184 ... show less	Brute-Force SSH
🇺🇸 VSM Networks	2022-05-19 01:51:32 (4 years ago)	Credential Stuffing	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-11 13:31:10 (4 years ago)	[Wed May 11 17:25:33.668221 2022] [:error] [pid 35432] [client 122.152.52.254:0] [client 122.152.52. ... show more [Wed May 11 17:25:33.668221 2022] [:error] [pid 35432] [client 122.152.52.254:0] [client 122.152.52.254] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluation ... show less	Brute-Force
🇺🇸 Blue Pumpkin	2022-05-09 23:58:14 (4 years ago)	[Tue May 10 03:56:46.782483 2022] [:error] [pid 2733653] [client 122.152.52.254:0] [client 122.152.5 ... show more [Tue May 10 03:56:46.782483 2022] [:error] [pid 2733653] [client 122.152.52.254:0] [client 122.152.52.254] ModSecurity: Access denied with code 403 (phase 4). Operator GE matched 4 at TX:outbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.2/rules/RESPONSE-959-BLOCKING-EVALUATION.conf"] [line "76"] [id "959100"] [msg "Outbound Anomaly Score Exceeded (Total Score: 4)"] [ver "OWASP_CRS/3.3.2"] [tag "anomaly-evaluati ... show less	Brute-Force
🇺🇸 VSM Networks	2022-03-14 00:10:20 (4 years ago)	Credential Stuffing	Brute-Force
🇺🇸 VSM Networks	2022-01-30 22:56:17 (4 years ago)	Credential Stuffing	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 116.111.138.150

🇸🇪 2603:1062:0:334::10

🇺🇸 192.126.252.127

🇲🇽 189.151.143.220

🇺🇸 136.118.145.236

🇻🇳 125.212.224.208

🇮🇳 116.193.143.165

🇧🇬 93.94.141.115

🇩🇪 69.5.169.27

🇺🇸 52.207.196.234

🇨🇳 36.135.62.79

🇺🇸 34.11.187.242

🇸🇪 4.223.83.61

🇺🇸 3.132.26.232

🇮🇳 2405:201:a80b:e035:91c9:e45d:d8b2:ee1f

🇺🇸 216.25.89.86

🇵🇰 203.128.10.138

🇨🇭 195.177.93.53

🇬🇹 190.151.130.5

🇮🇳 185.100.212.141