65.108.52.131

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
25 reports
22 reporters · latest 2 months ago
ISP
Hetzner Online GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS24940
Hostname(s)
static.131.52.108.65.clients.your-server.de
Domain Name
hetzner.com
Country
🇫🇮 Finland
City
Helsinki, Uusimaa
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

65.108.52.131 has been reported 25 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
25 from 22 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 knock
Knock-Knock honeypot brute-force: RDP (161 total hits)
Brute-Force
🇳🇱 knock
Knock-Knock honeypot brute-force: RDP (249 total hits)
Brute-Force
Anonymous
3389/tcp (1 or more attempts)
Port Scan
🇳🇱 knock
Knock-Knock honeypot brute-force: RDP (48 total hits)
Brute-Force
🇬🇧 knock
Knock-Knock honeypot brute-force: RDP (49 total hits)
Brute-Force
🇨🇭 TOCE
42 hits seen on 2026-08-30, ports 3389 (RDP) on a honeypot from www.toce.ch
Brute-Force
🇫🇮 ValtonTahiri
Windows IPBan blocked brute-force / failed login activity. Source=RDP; Username=6; Count=; LogonType=3; SourcePort=0; Status=0xc000006d; SubStatus=0xc000006a; Auth=NTLM
Port Scan Brute-Force
🇩🇪 Freenex1911
2026-08-30T04:51:41Z - RDP login from 65.108.52.131 failed multiple times.
Brute-Force
🇩🇪 DoSammy
neu-RDP-Brute-Force
Brute-Force
🇬🇧 Shepley
RdpGuard detected brute-force attempt on RDP
Brute-Force
🇦🇹 CTK
RDP Brute-Force (Grieskirchen RZ2)
Brute-Force
🇩🇪 Luhte
Unsolicited TCP connection from 65.108.52.131 to port 0 at 2026-08-30T04:28:56Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
🇩🇪 Mailguard-FRD
1788064122 - 08/30/2026 06:28:42 Host: 65.108.52.131/65.108.52.131 Port: 3389 TCP Blocked ...
Port Scan
Anonymous
Trying ports that it shouldn't be.
Port Scan Hacking Exploited Host
🇫🇷 Coco Bongo
1788063866 - 08/30/2026 06:24:26 Host: 65.108.52.131/65.108.52.131 Port: 3389 TCP Blocked ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 139.59.208.49
🇳🇬 105.112.212.236
🇫🇷 104.23.225.51
🇧🇩 103.124.251.152
🇨🇦 85.217.149.31
🇲🇩 80.96.109.182
🇵🇱 45.138.12.15
🇨🇳 221.131.139.70
🇯🇵 216.226.78.20
🇳🇱 200.138.46.210
🇬🇧 185.247.137.67
🇬🇧 139.59.163.207
🇮🇳 139.59.16.152
🇨🇳 113.87.131.177
🇨🇭 104.244.79.113
🇫🇷 104.23.225.50
🇬🇧 95.101.237.174
🇷🇺 81.26.130.147
🇬🇧 81.19.219.223
🇳🇱 45.140.222.175
feedback