Critical Threat
IP 152.32.134.156 is a critical-risk address with a perfect 10/10 threat level, definitively linked to sustained hacking activity targeting systems worldwide. This Hong Kong-registered IP has generated 173 total abuse reports, with 20 confirmed hacking-category incidents logged by automated honeypot sensors over a seven-month period between November 2025 and May 2026. The volume and consistency of reports establish this address as an active threat rather than a transient scanning source, warranting immediate defensive action from any organization with internet-facing services.
The 173 reports filed against 152.32.134.156 represent substantial abuse history concentrated within a single threat category. All 20 hacking-category confirmations originated exclusively from automated honeypot sensors, providing algorithmic detection of malicious traffic patterns. The attack-pattern data shows "attack connection" attempts and SURICATA alerts flagging protocol detection anomalies indicating unidirectional communication—a technique commonly associated with reconnaissance, stealthy port scanning, or probing for vulnerable services. Despite a reported activity frequency of only 2/10, the sustained engagement across seven months demonstrates methodical, persistent targeting rather than opportunistic or random scanning behavior.
The dominant hacking classification encompasses intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts against exposed services. The specific detection signatures suggest this address is engaged in service enumeration and vulnerability identification rather than indiscriminate scanning. Organizations running unpatched services, exposed SSH, RDP, or web applications face the highest risk, as these represent typical targets for the reconnaissance activity this IP has demonstrated. The low activity frequency combined with high report volume indicates concentrated, purposeful attacks against specific infrastructure rather than broad internet scanning.
Network administrators should immediately block 152.32.134.156 at perimeter firewalls or implement strict rate-limiting on affected services. Deploying automated abuse-response tools such as fail2ban can dynamically mitigate repeated login or connection attempts originating from this address. Hardening authentication mechanisms—enforcing key-based authentication for SSH, implementing multi-factor authentication, and applying the principle of least privilege—significantly reduces the impact of any successful intrusion. Regular security patching, continuous monitoring of access logs for this IP address, and maintaining up-to-date intrusion detection signatures will further protect infrastructure from the reconnaissance and exploitation activities this address represents.
UA 
GB 
CO 
VN 
TH