1.205.52.2
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET GUIZHOU PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Guiyang, Guizhou
Abuse Reports
Total reports
28 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇫🇷 ✨ |
Rule : MSSQLSERVER
Rule: MSSQLSERVER
Event: MSSQLSERVER
UserAccount: sa
sa Reason: Password did not match that for the login provided. [CLIENT: 1.205.52.2]
|
Port Scan Brute-Force | |
| 🇩🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 240 | Len: 44B | Win: 1024(1) | F2B/ufw-honeypot@2026-09-14T14:32:55Z
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-09-13 22:08:52 UTC Unauthorized activity to TCP port 1433. SQL
|
Port Scan | |
| 🇫🇷 zulzeen |
[incypit-web] Blocked by SysWarden Firewall [GEO] (Database/Cache Attack)
|
Hacking Brute-Force | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇩🇪 Mailguard-FRD |
1789228769 - 09/12/2026 17:59:29 Host: 1.205.52.2/1.205.52.2 Port: 1433 TCP Blocked
...
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 36136
TTL: 242
Packet length: 44
TOS: 0x00
This report (for 1.205.52.2) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 1433
|
Port Scan Hacking Exploited Host | |
| 🇳🇱 donarev419 |
Connection to port 1433 with data transfer.
Data preview:
|
Port Scan Hacking | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 1433/tcp
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (9 or more attempts)
|
Port Scan | |
| 🇫🇷 zulzeen |
[incypit-web] Blocked by SysWarden Firewall [GEO] (Database/Cache Attack)
|
Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown