52.128.53.118 has a threat confidence score of 38%. This IP address from United States (AS26077, Nextlink Broadband) has been observed in 165 honeypot sessions targeting SMB protocols. First observed on January 21, 2026, most recently active March 7, 2026.