This IP address has been reported a total of
22
times from
15 distinct
sources.
104.152.187.4 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 9
reports;
Germany
with 4
reports;
Spain
with 3
reports.
The most common categories in these recent reports were:
Hacking
12
times;
Web App Attack
9
times;
Port Scan
3
times;
Brute-Force
3
times;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
XORP (haproxy): 2x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ...
show moreXORP (haproxy): 2x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
[21:20] Crawled recognized Docker endpoints without a follow-up attack: GET /containers/d82c3b95bdfa ...
show more[21:20] Crawled recognized Docker endpoints without a follow-up attack: GET /containers/d82c3b95bdfa/archive (x29), GET /containers/b63fae786d3e/archive (x29), GET /containers/ad3921a268d0/archive (x29)
show less
[20:49] Attempted to GET logs on container '5497ff3e6e8a' via Docker API - also crawled beforehand: ...
show more[20:49] Attempted to GET logs on container '5497ff3e6e8a' via Docker API - also crawled beforehand: GET /containers/json
show less
[20:41] Attempted to GET top on container 'b63fae786d3e' via Docker API - also crawled beforehand: G ...
show more[20:41] Attempted to GET top on container 'b63fae786d3e' via Docker API - also crawled beforehand: GET /version, GET /containers/json (x4), GET /containers/b63fae786d3e/json, GET /containers/d82c3b95bdfa/json, GET /containers/ad3921a268d0/json
show less
[20:25] Attempted to GET top on container '5497ff3e6e8a' via Docker API - also crawled beforehand: G ...
show more[20:25] Attempted to GET top on container '5497ff3e6e8a' via Docker API - also crawled beforehand: GET /containers/d1940d09e3ee/archive (x12), GET /containers/b0268a12691e/archive (x12), GET /containers/5497ff3e6e8a/archive (x12), GET /containers/json
show less
[19:56] Attempted to GET logs on container '5497ff3e6e8a' via Docker API - also crawled beforehand: ...
show more[19:56] Attempted to GET logs on container '5497ff3e6e8a' via Docker API - also crawled beforehand: GET /images/json (x2), GET /images/sha256:23f27786a22dfa88b9043794fcc69fdbb28e47e42da3eb4c1595cadd9d735fd9/json, GET /images/sha256:10a9dc6c00f0d6f293f093847d699fd71b9e8aa720993d1402d8078aeef0b7a3/json, GET /images/sha256:42920d9aedb7f4e34ba4c3724c5722746e9aabbc03784aab69e517befebf5e82/json, GET /images/sha256:092556ca1f469dd3ecb8719a0f537f6a2f2ad10392d17461c49071766a462314/json, GET /images/sha256:446d006d18372f651020f2150976969db995f533bc55bb36279f1df1104c7ae1/json, GET /images/sha256:a84f5c93f328097aa119c4de3ac42423b1751199d34ba6afd38c442f8e6c7b4d/json, GET /containers/json (x3), GET /containers/5497ff3e6e8a/json (x2), GET /containers/b0268a12691e/json (x2), GET /containers/d1940d09e3ee/json (x2), GET /containers/5497ff3e6e8a/archive (x119)
show less
Honeypot detection: malware/exploit attempt; port scan / service probe. 6 events observed. 2 distinc ...
show moreHoneypot detection: malware/exploit attempt; port scan / service probe. 6 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
show less
Brute force attack on Jupyter Notebook login (POST /login). Source: UbuntuML2 nginx log. Date: 2026- ...
show moreBrute force attack on Jupyter Notebook login (POST /login). Source: UbuntuML2 nginx log. Date: 2026-10-02 10:40 UTC.
show less
Honeypot detection: malware/exploit attempt. 2 events observed. Reported automatically from a honeyp ...
show moreHoneypot detection: malware/exploit attempt. 2 events observed. Reported automatically from a honeypot sensor.
show less
[19:39] Crawled recognized Docker endpoints without a follow-up attack: GET /version, GET /container ...
show more[19:39] Crawled recognized Docker endpoints without a follow-up attack: GET /version, GET /containers/json (x2), GET /containers/c29d03fd36ae/json (x2), GET /containers/fed7ea585cc1/json (x2), GET /containers/e44fd51f1bde/json (x2)
show less
