104.155.52.228

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
41% Elevated
14 reports
12 reporters ยท latest 3 weeks ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
228.52.155.104.bc.googleusercontent.com
Domain Name
google.com
Country
๐Ÿ‡ง๐Ÿ‡ช Belgium
City
Brussels, Brussels Capital
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 6 ๐Ÿ‡ซ๐Ÿ‡ท France 2 ๐Ÿ‡น๐Ÿ‡ท Turkey 2
Most common categories Port Scan 12 Hacking 4 Brute-Force 2 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡น๐Ÿ‡ท trakyabirlik
Auto-blocked by Seczar SecureOps โ€” High-Risk Port Probe (admin-managed entries) โ€” RDP (19 events in 5min) at 2026-10-20 05:50
Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[05:18] Port scanning. Port(s) scanned: TCP/990
Port Scan
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (990/tcp) [non-standard port]
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 279 hits on ports [3389] (automated)
Port Scan Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช jann
Honeypot: connection to unused port 3389 at 2026-10-20 04:25:06 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 64 application-level events across 32 source port(s). Sensor(s): RDPHoneypot.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ ShadowWhisperer
RDP
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ withfallback.com
Attempt to connect to Java debugger (JDWP)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[03:40] Connected to RDP honeypot
Brute-Force Hacking
๐Ÿ‡ฆ๐Ÿ‡น begou.dev
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/3389
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ donarev419
Connection to port 990 with data transfer. Data preview: ๏ฟฝ
Port Scan Hacking
๐Ÿ‡น๐Ÿ‡ผ kk_it_man
honey catch
Port Scan
๐Ÿ‡น๐Ÿ‡ผ kk_it_man
ET SCAN Behavioral Unusually fast Terminal Server Traffic Potential Scan or Infection (Inbound)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port 3389 - dr
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 73.190.110.153
๐Ÿ‡บ๐Ÿ‡ธ 52.186.169.85
๐Ÿ‡จ๐Ÿ‡ฑ 34.176.97.8
๐Ÿ‡ณ๐Ÿ‡ฑ 209.38.99.209
๐Ÿ‡ซ๐Ÿ‡ท 185.177.72.66
๐Ÿ‡ง๐Ÿ‡ช 104.155.60.150
๐Ÿ‡ฟ๐Ÿ‡ฆ 102.220.210.140
๐Ÿ‡ป๐Ÿ‡ณ 101.99.22.235
๐Ÿ‡ฆ๐Ÿ‡ช 86.96.58.226
๐Ÿ‡จ๐Ÿ‡ณ 81.71.2.3
๐Ÿ‡บ๐Ÿ‡ธ 76.139.133.147
๐Ÿ‡จ๐Ÿ‡ณ 58.242.117.158
๐Ÿ‡ง๐Ÿ‡ช 34.79.175.171
๐Ÿ‡ฌ๐Ÿ‡ง 213.166.84.39
๐Ÿ‡ฎ๐Ÿ‡ณ 182.70.254.196
๐Ÿ‡ฉ๐Ÿ‡ช 167.94.146.66
๐Ÿ‡บ๐Ÿ‡ธ 162.216.150.113
๐Ÿ‡บ๐Ÿ‡ธ 147.185.132.179
๐Ÿ‡บ๐Ÿ‡ธ 130.49.10.140
๐Ÿ‡ฏ๐Ÿ‡ต 120.50.206.196
feedback