Check an IP Address, Domain Name, Subnet, or ASN

152.32.172.108 was found in our database!

$ whois 152.32.172.108

country·🇭🇰 Hong Kong

city·Hong Kong

isp·UCLOUD INFORMATION TECHNOLOGY HK LIMITED

asn·AS135377

network·Standard

$ sikker risk 152.32.172.108scoring →

confidence

61%High

first_seen·Jan 20, 2026

last_seen·1h ago

sessions·246

events·434

$ sikker protocols 152.32.172.108

HTTPS

236 / 417

MONGODB

9 / 16

RTSP

1 / 1

$ sikker summary 152.32.172.108

152.32.172.108 has a threat confidence score of 61%. This IP address from Hong Kong (AS135377, UCLOUD INFORMATION TECHNOLOGY HK LIMITED) has been observed in 246 honeypot sessions targeting HTTPS, MONGODB, RTSP protocols. First observed on January 20, 2026, most recently active March 23, 2026.

$ sikker behaviors 152.32.172.108catalog →

infoHttps Direct Bad Request Endpoint Access123x

Identifies direct HTTPS requests to the /bad-request path, indicating manual or automated probing of error-handling routes rather than normal application flow.

$ sikker primitives 152.32.172.108

https_path_bad_request123

$ sikker related 152.32.172.108

🇭🇰·More threats fromHong Kong→AS·More threats fromUCLOUD INFORMATION TECHNOLOGY HK LIMITED→HTTP·More threats targetingHTTPS→MONG·More threats targetingMONGODB→RTSP·More threats targetingRTSP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
118.193.65.175	75%	137
165.154.4.152	95%	1,217
118.193.33.71	88%	20
165.154.2.235	97%	3,848
165.154.22.88	98%	36

IP Address	Confidence	Events
47.76.127.147	82%	20,413
47.239.17.212	84%	1,483
172.110.223.64	98%	11,453
103.149.27.208	100%	770
47.242.168.173	100%	583