This IP address has been reported a total of
7
times from
6 distinct
sources.
52.161.82.114 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Japan
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Open Proxy
2
times;
Port Scan
2
times;
Hacking
1
time;
Web App Attack
1
time;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ...
show moreDetected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: proof.ovh.net:443
show less
2026-03-24T05:14:14.648935+00:00 ktj-nc sshd[692655]: Connection closed by authenticating user root ...
show more2026-03-24T05:14:14.648935+00:00 ktj-nc sshd[692655]: Connection closed by authenticating user root 52.161.82.114 port 60672 [preauth]
2026-03-24T05:14:36.071965+00:00 ktj-nc sshd[692657]: Connection closed by authenticating user root 52.161.82.114 port 60672 [preauth]
...
show less
2026-01-19T03:21:49.142865Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 52.161.82. ...
show more2026-01-19T03:21:49.142865Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 52.161.82.114:47112 (158.69.22.11:2223) [session: 1f5a229278d2]
2026-01-19T03:21:50.156528Z [cowrie.telnet.factory.HoneyPotTelnetFactory] New connection: 52.161.82.114:47115 (158.69.22.11:2223) [session: e150b7fe7bdd]
...
show less
Brute-Force
SSH
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
