Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: Claro S.A.

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:
Type Details Datetime
attack
Oct 23 11:45:18 odroid64 sshd\[389\]: Invalid user ark from 201.52.241.252
Oct 23 11:45:18 odroid64 sshd\[389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.52.241.252
Oct 23 11:45:20 odroid64 sshd\[389\]: Failed password for invalid user ark from 201.52.241.252 port 48517 ssh2
Nov  4 11:11:06 odroid64 sshd\[16977\]: Invalid user phion from 201.52.241.252
Nov  4 11:11:06 odroid64 sshd\[16977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.52.241.252
Nov  4 11:11:09 odroid64 sshd\[16977\]: Failed password for invalid user phion from 201.52.241.252 port 59782 ssh2
...
2019-10-18 04:25:14
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.52.241.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64836
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.52.241.252.			IN	A

;; AUTHORITY SECTION:
.			438	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101700 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 04:25:11 CST 2019
;; MSG SIZE  rcvd: 118
Host info
252.241.52.201.in-addr.arpa domain name pointer c934f1fc.virtua.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
252.241.52.201.in-addr.arpa	name = c934f1fc.virtua.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
192.35.168.70 attackspam
 TCP (SYN) 192.35.168.70:40488 -> port 7547, len 40
2020-08-13 03:13:38
211.205.224.177 attack
 TCP (SYN) 211.205.224.177:13946 -> port 9530, len 44
2020-08-13 03:35:39
139.211.63.234 attackspam
 TCP (SYN) 139.211.63.234:32322 -> port 8080, len 40
2020-08-13 02:56:40
184.105.247.247 attackbotsspam
 TCP (SYN) 184.105.247.247:39704 -> port 4899, len 44
2020-08-13 03:16:45
219.137.61.95 attackbots
 TCP (SYN) 219.137.61.95:54953 -> port 1433, len 40
2020-08-13 03:34:23
113.180.114.85 attackbots
 TCP (SYN) 113.180.114.85:62801 -> port 445, len 52
2020-08-13 03:22:17
58.137.155.187 attackspambots
 TCP (SYN) 58.137.155.187:55257 -> port 445, len 40
2020-08-13 03:30:02
27.191.210.15 attackbotsspam
 TCP (SYN) 27.191.210.15:63952 -> port 1433, len 52
2020-08-13 03:11:01
72.167.220.140 attack
php WP PHPmyadamin ABUSE blocked for 12h
2020-08-13 03:04:17
95.135.143.74 attackspambots
 TCP (SYN) 95.135.143.74:51975 -> port 445, len 52
2020-08-13 03:24:56
88.227.199.78 attackspam
 TCP (SYN) 88.227.199.78:57839 -> port 445, len 52
2020-08-13 03:26:20
194.87.138.124 attackspambots
 TCP (SYN) 194.87.138.124:45861 -> port 8080, len 40
2020-08-13 03:12:57
180.242.30.175 attackspambots
 TCP (SYN) 180.242.30.175:54066 -> port 445, len 48
2020-08-13 02:55:29
103.78.167.20 attackspambots
 TCP (SYN) 103.78.167.20:59803 -> port 445, len 52
2020-08-13 03:24:29
94.53.168.189 attackbotsspam
 TCP (SYN) 94.53.168.189:57606 -> port 445, len 52
2020-08-13 03:25:47

Recently Reported IPs

253.53.251.29 53.244.189.28 162.144.200.40 45.122.138.81
201.48.21.121 218.166.14.210 51.83.69.200 201.48.173.179
201.48.16.201 201.47.91.238 114.163.94.245 115.167.120.192
59.34.150.62 93.6.154.215 115.14.15.105 138.238.2.14
164.185.108.132 48.70.227.38 201.47.255.137 231.141.4.99