1.28.254.54
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China unicom InnerMongolia province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Hohhot, Inner Mongolia
Abuse Reports
Total reports
14 from
8 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a non-approved destination port. destination port 5555.
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 5555
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/5555 (2 or more attempts)
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 OceanTreasure |
tcp/5555; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-26T17:44:48Z
|
Port Scan | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 5555 proto 6 detection dark_ip
|
Port Scan | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇺🇸 MPL |
tcp/5555
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5555
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 5555.
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown