This IP address has been reported a total of
1,800
times from
250 distinct
sources.
152.52.220.126 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jun 7 11:15:06 mx4 postfix/smtpd[3515025]: warning: unknown[152.52.220.126]: SASL LOGIN authenticat ...
show moreJun 7 11:15:06 mx4 postfix/smtpd[3515025]: warning: unknown[152.52.220.126]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 11:30:24 mx4 postfix/submission/smtpd[3516794]: warning: unknown[152.52.220.126]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
show less
2026-06-07 04:24:38.535 [936432] no host name found for IP address 152.52.220.126
2026-06-07 04:24:4 ...
show more2026-06-07 04:24:38.535 [936432] no host name found for IP address 152.52.220.126
2026-06-07 04:24:45.062 [936432] dovecot_login authenticator failed for ([142.54.235.12]) [152.52.220.126]:34032 I=[217.197.86.168]:465 Ci=936432: 535 Incorrect authentication data
2026-06-07 04:24:45.681 [936432] no MAIL in SMTP connection from ([142.54.235.12]) [152.52.220.126]:34032 I=[217.197.86.168]:465 Ci=936432 D=8s X=TLS1.2:ECDHE_SECP256R1__ECDSA_SHA512__AES_256_GCM:256 CV=no C=EHLO,AUTH
...
show less
2026-06-07T01:49:13.187572ls2.tom2.co.uk postfix/smtpd[31576]: warning: unknown[152.52.220.126]: SAS ...
show more2026-06-07T01:49:13.187572ls2.tom2.co.uk postfix/smtpd[31576]: warning: unknown[152.52.220.126]: SASL LOGIN authentication failed: authentication failure
...
show less
Suspicious activity detected from IP 152.52.220.126 based on mailserver logs.
Sample logs:
2026-06-0 ...
show moreSuspicious activity detected from IP 152.52.220.126 based on mailserver logs.
Sample logs:
2026-06-07 03:13:28,440 INFO [qtp2102534528-29221] [ip=172.16.0.182;oip=152.52.220.126;oport=41064;oproto=smtp;port=55726;soapId=68902aa5;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-06-07 03:13:28,440 INFO [qtp2102534528-29221] [ip=172.16.0.182;oip=152.52.220.126;oport=41064;oproto=smtp;port=55726;soapId=68902aa5;] soap - AuthRequest elapsed=0
2026-06-07 03:28:37,018 INFO [qtp2102534528-29281] [ip=172.16.0.182;oip=152.52.220.126;oport=35750;oproto=smtp;port=46822;soapId=68902ab6;] account - Error occurred during authentication: authentication failed for [**]. Reason: account not found.
2026-06-07 03:28:37,018 INFO [qtp2102534528-29281] [ip=172.16.0.182;oip=152.52.220.126;oport=35750;oproto=smtp;port=46822;soapId=68902ab6;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-06-07 03:28:37,018 INFO [qtp2102534528-
show less
2026-06-06T17:05:42+02:00 <masked> exim[543678]: fixed_login authenticator failed for ([83.239.108.2 ...
show more2026-06-06T17:05:42+02:00 <masked> exim[543678]: fixed_login authenticator failed for ([83.239.108.218]) [152.52.220.126]: 535 Incorrect authentication data ([email protected])
show less
Brute-Force
Showing 1 to
15
of 1800 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩