1.83.125.13
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET SHAANXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- xa.sn.cn
- Country
- 🇨🇳 China
- City
- Xi'an, Shaanxi
Abuse Reports
Total reports
425 from
104 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇭🇰 sandra361 |
Port scan detected: 7 packets across 1 port (2016). | Evidence: REAPER_TARPIT: IN=eth0 SRC=1.83.125.13 LEN=97 TOS=0x14 PREC=0x00 TTL=47 ID=59448 DF PROTO=TCP SPT=32791 DPT=2016 WINDOW=29200 RES=0x00 ACK PSH FIN URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 11180
GET /
Accept: */*; 11180 [1] TCP
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/8086
|
Port Scan | |
| 🇺🇸 MPL |
tcp/6560
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 6 attempts across 1 port (60567). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=1.83.125.13 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=49857 DF PROTO=TCP SPT=23628 DPT=60567 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 8 hits on ports [2131] (automated)
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-21 21:43:36 UTC Unauthorized activity to TCP port 5900.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 4172
GET /
Accept: */*; 4172 [1] TCP
|
Web App Attack | |
| Anonymous |
unsolicited connect TCP dport 2680 (sport 44043)
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1500)
Source port: 43258
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 1.83.125.13) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇷🇸 Smel |
SQL/MH Probe, Scan, Hack -
|
Port Scan Hacking SQL Injection | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: FTP Probe (8377/tcp) [non-standard port]
|
FTP Brute-Force Port Scan | |
| 🇺🇸 thororen |
Blocked by UFW [9334/tcp]
Source port: 33205
TTL: 238
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown