197.52.5.252
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- TE Data
- Usage Type
- Fixed Line ISP
- ASN
- AS8452
- Domain Name
- tedata.net
- Country
- 🇪🇬 Egypt
- City
- Halwan, Cairo
No reports in the last 60 days
197.52.5.252 has been reported 15 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
15 from
15 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
RdpGuard detected brute-force attempt on MS-SQL
|
Brute-Force | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:295 | alerts5m:295
|
Port Scan | |
| Anonymous |
unsolicited connect TCP dport 1433 (sport 52944)
|
Hacking | |
| 🇹🇷 Detmach |
Security attack detected. Multiple failed attempts from 197.52.5.252. IP banned for 1440 minutes at 18.08.2026 13:44:27. Failed attempts: 5
|
Brute-Force | |
| 🇩🇪 Admins@FBN |
IPS:drop <match> dstport=1433
|
Brute-Force Exploited Host | |
| 🇩🇪 phil2k |
|
Port Scan Brute-Force | |
| Anonymous |
1433/tcp (1 or more attempts)
|
Port Scan | |
| 🇫🇷 Entalpi.net |
Tried to hit sensible closed port commonly used in attacks
|
Port Scan Hacking | |
| 🇩🇪 Luhte |
Unsolicited TCP connection from 197.52.5.252 to port 0 at 2026-08-17T23:43:01Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇬🇧 sonot |
Blocked by UFW on tunneluk01 [1433/tcp] | SPT: 49327 | TTL: 237 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Aug 17 22:42) SRC=197.52.5.252 LEN=40 TTL=237 ID=22595 TCP DPT=1433 WINDOW=1024 SYN
|
Port Scan | |
| Anonymous |
Port scanning: unsolicited connection probes to closed ports. Detected and blocked automatically.
|
Port Scan | |
| 🇪🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 241 | Len: 40B | Win: 1024(1) | F2B/ufw-honeypot@2026-08-17T15:31:15Z
|
Port Scan Hacking | |
| 🇺🇸 drewf.ink |
[14:10] Port scanning. Port(s) scanned: TCP/1433
|
Port Scan | |
| 🇹🇷 SeczarSecureOps |
Auto-blocked by Seczar SecureOps — Database Service Brute Force (12 events in 5min) at 2026-08-16 02:08
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown