Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: São Paulo

Region: Sao Paulo

Country: Brazil

Internet Service Provider: Vivo

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#


NetRange:       152.252.0.0 - 152.252.255.255
CIDR:           152.252.0.0/16
NetName:        LACNIC-ERX-152-252-0-0
NetHandle:      NET-152-252-0-0-1
Parent:         NET152 (NET-152-0-0-0-0)
NetType:        Transferred to LACNIC
OriginAS:       
Organization:   Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is under LACNIC responsibility
Comment:        for further allocations to users in LACNIC region.
Comment:        Please see http://www.lacnic.net/ for further details,
Comment:        or check the WHOIS server located at http://whois.lacnic.net
Ref:            https://rdap.arin.net/registry/ip/152.252.0.0

ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink:  whois.lacnic.net


OrgName:        Latin American and Caribbean IP address Regional Registry
OrgId:          LACNIC
Address:        Rambla Republica de Mexico 6125
City:           Montevideo
StateProv:      
PostalCode:     11400
Country:        UY
RegDate:        2002-07-27
Updated:        2018-03-15
Ref:            https://rdap.arin.net/registry/entity/LACNIC

ReferralServer:  whois://whois.lacnic.net
ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois

OrgAbuseHandle: LWI100-ARIN
OrgAbuseName:   LACNIC Whois Info
OrgAbusePhone:  +598-2604-2222 
OrgAbuseEmail:  abuse@lacnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/LWI100-ARIN

OrgTechHandle: LACNIC-ARIN
OrgTechName:   LACNIC Whois Info
OrgTechPhone:  +598-2604-2222 
OrgTechEmail:  whois-contact@lacnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/LACNIC-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.lacnic.net.

% IP Client: 124.223.158.242
 % Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2025-09-23T20:00:42-03:00 - 124.223.158.242

inetnum:     152.252.0.0/15
aut-num:     AS26599
abuse-c:     CSTBR
owner:       TELEF�NICA BRASIL S.A
ownerid:     02.558.157/0001-62
responsible: Diretoria de Planejamento e Tecnologia
owner-c:     ARITE
tech-c:      ARITE
inetrev:     152.252.0.0/15
nserver:     aquarius.vivo.com.br
nsstat:      20250920 AA
nslastaa:    20250920
nserver:     lynx.vivo.com.br
nsstat:      20250920 AA
nslastaa:    20250920
nserver:     hercules.vivo.com.br
nsstat:      20250920 AA
nslastaa:    20250920
nserver:     orion.vivo.com.br
nsstat:      20250920 AA
nslastaa:    20250920
created:     20140424
changed:     20180807

nic-hdl-br:  ARITE
person:      Administra��o Rede IP Telesp
created:     20080407
changed:     20230629

nic-hdl-br:  CSTBR
person:      CSIRT TELEFONICA BR
created:     20180713
changed:     20180713

% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 152.252.42.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;152.252.42.130.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025092302 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 24 07:00:42 CST 2025
;; MSG SIZE  rcvd: 107
Host info
130.42.252.152.in-addr.arpa domain name pointer 152-252-42-130.user.vivozap.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
130.42.252.152.in-addr.arpa	name = 152-252-42-130.user.vivozap.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
27.223.78.168 attackbots
07/29/2020-08:10:11.364184 27.223.78.168 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-30 00:30:50
27.7.6.166 attack
27.7.6.166 - - [29/Jul/2020:17:28:39 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18211 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
27.7.6.166 - - [29/Jul/2020:17:28:40 +0100] "POST /wp-login.php HTTP/1.1" 503 18029 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
27.7.6.166 - - [29/Jul/2020:17:30:01 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18029 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)"
...
2020-07-30 00:45:26
5.61.30.164 attack
Automatic report - Banned IP Access
2020-07-30 00:32:32
124.111.52.102 attack
2020-07-29 11:40:44,305 fail2ban.actions        [937]: NOTICE  [sshd] Ban 124.111.52.102
2020-07-29 12:18:52,019 fail2ban.actions        [937]: NOTICE  [sshd] Ban 124.111.52.102
2020-07-29 12:57:04,035 fail2ban.actions        [937]: NOTICE  [sshd] Ban 124.111.52.102
2020-07-29 13:35:06,705 fail2ban.actions        [937]: NOTICE  [sshd] Ban 124.111.52.102
2020-07-29 14:10:03,619 fail2ban.actions        [937]: NOTICE  [sshd] Ban 124.111.52.102
...
2020-07-30 00:34:57
125.132.73.28 attackbotsspam
$f2bV_matches
2020-07-30 00:36:03
49.232.135.14 attackspam
Jul 29 17:27:20 inter-technics sshd[9207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.135.14  user=daemon
Jul 29 17:27:22 inter-technics sshd[9207]: Failed password for daemon from 49.232.135.14 port 45794 ssh2
Jul 29 17:32:33 inter-technics sshd[9538]: Invalid user qiming from 49.232.135.14 port 37756
Jul 29 17:32:33 inter-technics sshd[9538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.135.14
Jul 29 17:32:33 inter-technics sshd[9538]: Invalid user qiming from 49.232.135.14 port 37756
Jul 29 17:32:35 inter-technics sshd[9538]: Failed password for invalid user qiming from 49.232.135.14 port 37756 ssh2
...
2020-07-30 01:00:58
91.121.162.198 attack
Jul 29 16:11:03 vlre-nyc-1 sshd\[11384\]: Invalid user pengteng from 91.121.162.198
Jul 29 16:11:03 vlre-nyc-1 sshd\[11384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.162.198
Jul 29 16:11:05 vlre-nyc-1 sshd\[11384\]: Failed password for invalid user pengteng from 91.121.162.198 port 34220 ssh2
Jul 29 16:17:31 vlre-nyc-1 sshd\[11550\]: Invalid user zhangzl from 91.121.162.198
Jul 29 16:17:31 vlre-nyc-1 sshd\[11550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.162.198
...
2020-07-30 00:20:06
177.222.61.244 attackspam
Jul 29 14:10:14 icecube postfix/smtpd[72132]: NOQUEUE: reject: RCPT from unknown[177.222.61.244]: 554 5.7.1 Service unavailable; Client host [177.222.61.244] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/177.222.61.244 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<[177.222.61.244]>
2020-07-30 00:25:57
77.28.74.166 attackbotsspam
ddosing on local network
2020-07-30 00:51:18
94.189.143.132 attack
Invalid user takazawa from 94.189.143.132 port 41284
2020-07-30 00:37:19
118.100.116.155 attack
2020-07-29T12:26:56.408055devel sshd[31328]: Invalid user songnahong from 118.100.116.155 port 54974
2020-07-29T12:26:58.577328devel sshd[31328]: Failed password for invalid user songnahong from 118.100.116.155 port 54974 ssh2
2020-07-29T12:39:20.115447devel sshd[589]: Invalid user xiapeng from 118.100.116.155 port 35350
2020-07-30 00:53:12
195.224.138.61 attackbotsspam
2020-07-29T16:25:59.189213shield sshd\[1450\]: Invalid user daixuan from 195.224.138.61 port 47102
2020-07-29T16:25:59.200280shield sshd\[1450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.224.138.61
2020-07-29T16:26:00.533744shield sshd\[1450\]: Failed password for invalid user daixuan from 195.224.138.61 port 47102 ssh2
2020-07-29T16:29:22.943355shield sshd\[1937\]: Invalid user artif from 195.224.138.61 port 51998
2020-07-29T16:29:22.953799shield sshd\[1937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.224.138.61
2020-07-30 00:29:53
190.206.118.253 attackspambots
firewall-block, port(s): 445/tcp
2020-07-30 00:23:57
68.183.17.99 attackspam
scans once in preceeding hours on the ports (in chronological order) 20988 resulting in total of 6 scans from 68.183.0.0/16 block.
2020-07-30 00:36:29
212.64.91.114 attack
Jul 29 14:56:06 vps sshd[169484]: Failed password for invalid user zunwen from 212.64.91.114 port 40408 ssh2
Jul 29 14:59:33 vps sshd[181178]: Invalid user wei from 212.64.91.114 port 49448
Jul 29 14:59:33 vps sshd[181178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.91.114
Jul 29 14:59:36 vps sshd[181178]: Failed password for invalid user wei from 212.64.91.114 port 49448 ssh2
Jul 29 15:03:02 vps sshd[199307]: Invalid user lc from 212.64.91.114 port 58490
...
2020-07-30 00:47:13

Recently Reported IPs

182.127.192.84 27.128.226.204 35.195.226.12 34.49.1.247
185.177.72.36 159.65.125.125 162.216.150.14 111.22.245.96
94.176.26.64 1.71.140.154 1.10.176.77 192.228.113.165
43.229.9.35 51.38.112.254 54.221.2.44 196.251.85.178
106.75.78.149 10.0.189.66 5.34.223.12 37.6.212.144