JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 152.233.20.21

152.233.20.21 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 70%: ?

70%

ISP	Datacamp Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Hostname(s)	unn-152-233-20-21.datapacket.com
Domain Name	datacamp.co.uk
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 152.233.20.21

Whois 152.233.20.21

IP Abuse Reports for 152.233.20.21:

This IP address has been reported a total of 18 times from 14 distinct sources. 152.233.20.21 was first reported on October 1st 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-10-26 21:10:29 (8 hours ago)	Fail2Ban Jail: tomcat-honeypot \| Evidence: 152.233.20.21 104.23.199.201 - - [26/Oct/2026:18:10:25 -0 ... show more Fail2Ban Jail: tomcat-honeypot \| Evidence: 152.233.20.21 104.23.199.201 - - [26/Oct/2026:18:10:25 -0300] "GET /peregrine.sql HTTP/1.1" 404 414 show less	Bad Web Bot
🇺🇸 agenciahypelab.com.br	2026-10-25 09:45:33 (1 day ago)	WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER	Brute-Force SSH
🇮🇩 sockominfo	2026-10-24 19:00:53 (2 days ago)	Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 5.8/10 (MEDIUM). Confiden ... show more Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 5.8/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 75%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-24 18:00:53 (2 days ago)	Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 5.9/10 (MEDIUM). Confiden ... show more Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 5.9/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 74%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-24 17:00:53 (2 days ago)	Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 6/10 (MEDIUM). Confidence ... show more Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-24 16:00:53 (2 days ago)	Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 6.1/10 (MEDIUM). Confiden ... show more Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-10-24 15:00:09 (2 days ago)	Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 5.3/10 (MEDIUM). Reported ... show more Email: Login failures from Bad Reputation IP: 152.233.20.21. Threat Score: 5.3/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-10-24 11:16:41 (2 days ago)	Authentication failure	Brute-Force
Anonymous	2026-10-23 14:19:05 (3 days ago)	2026-10-23 14:16:28,436 INFO [ImapSSLServer-1274] [ip=192.168.1.235;oip=152.233.20.21;via=192.168.1 ... show more 2026-10-23 14:16:28,436 INFO [ImapSSLServer-1274] [ip=192.168.1.235;oip=152.233.20.21;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=5458;] imap - authentication failed for [[email protected]] (invalid password) 2026-10-23 14:16:28,436 INFO [ImapSSLServer-1274] [ip=192.168.1.235;oip=152.233.20.21;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=5458;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: invalid password. 2026-10-23 14:19:04,377 INFO [ImapSSLServer-1277] [ip=192.168.1.235;oip=152.233.20.21;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=5459;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: invalid password. 2026-10-23 14:19:04,377 INFO [ImapSSLServer-1277] [ip=192.168.1.235;oip=152.233.20.21;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=5459;] imap - authentication failed for [[email protected]] (inva ... show less	Brute-Force Web App Attack
🇮🇩 aaKenshin	2026-10-23 14:07:31 (3 days ago)	Suspicious activity detected from IP 152.233.20.21 based on mailserver logs. Sample logs: 2026-10-23 ... show more Suspicious activity detected from IP 152.233.20.21 based on mailserver logs. Sample logs: 2026-10-23 22:03:45,177 INFO [Pop3Server-4] [ip=172.16.0.182;oip=152.233.20.21;cid=2716;] account - Error occurred during authentication: authentication failed for []. Reason: LDAP error: - unable to ldap authenticate: invalid credentials. 2026-10-23 22:07:20,256 INFO [ImapServer-2085] [ip=172.16.0.182;cid=2717;oip=152.233.20.21;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;] imap - ID elapsed=0 (NIO) 2026-10-23 22:07:20,259 INFO [ImapServer-2086] [ip=172.16.0.182;oip=152.233.20.21;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=2717;] imap - authentication failed for [] (LDAP error: - unable to ldap authenticate: invalid credentials) 2026-10-23 22:07:20,265 INFO [ImapServer-2086] [ip=172.16.0.182;oip=152.233.20.21;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=2717;] account - Error occurred during authentication: authentication fa show less	Brute-Force
🇿🇦 Megasurf	2026-10-23 09:49:35 (3 days ago)	IMAP/POP3 mailbox login brute-force. Blocked automatically by our firewall (LF_IMAPD).	Brute-Force
🇮🇹 Inartis	2026-10-23 09:42:45 (3 days ago)	Oct 23 11:42:37 mail1 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 4 secs): user=< ... show more Oct 23 11:42:37 mail1 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=152.233.20.21, lip=93.39.247.192, TLS, session=<ge+tzH5eJdyY6RQV> Oct 23 11:42:44 mail1 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 7 secs): user=<ida.poletto>, method=PLAIN, rip=152.233.20.21, lip=93.39.247.192, TLS, session=<Lk3uzH5eFt2Y6RQV> ... show less	Port Scan Brute-Force
Anonymous	2026-10-23 06:41:07 (3 days ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇩🇪 netclix.gr	2026-10-22 02:36:49 (5 days ago)	(pop3d) Failed POP3 login from 152.233.20.21 (DE/Germany/unn-152-233-20-21.datapacket.com)	Brute-Force
🇳🇱 Mangelot Hosting	2026-10-21 22:55:02 (5 days ago)	(dovecot_invalid_user) srv102 Dovecot login on non-existent account 152.233.20.21 (DE/Germany/unn-15 ... show more (dovecot_invalid_user) srv102 Dovecot login on non-existent account 152.233.20.21 (DE/Germany/unn-152-233-20-21.datapacket.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: Oct 22 00:55:01 dovecot[1889894]: pop3-login: Login aborted: Logged out (auth failed, 1 attempts in 8 secs) (auth_failed): user=[USERNAME] method=PLAIN, rip=152.233.20.21, lip=0.0.0.x, TLS, session=<0yaaomFeKd2Y6RQV> show less	Web App Attack

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.101

🇮🇳 202.179.93.199

🇰🇿 195.82.2.246

🇲🇴 182.93.50.90

🇺🇸 173.239.198.50

🇺🇸 170.187.163.117

🇸🇪 154.14.144.138

🇮🇳 123.253.162.253

🇮🇳 122.165.195.204

🇩🇪 109.160.32.130

🇿🇦 105.247.89.210

🇫🇷 91.196.152.233

🇳🇱 86.38.187.214

🇵🇰 72.255.26.13

🇺🇸 72.63.151.118

🇺🇸 69.253.232.121

🇭🇰 34.92.3.201

🇶🇦 34.18.184.99

🇺🇸 20.169.85.58

🇧🇪 207.175.196.43