1.83.125.198
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET SHAANXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- xa.sn.cn
- Country
- 🇨🇳 China
- City
- Xi'an, Shaanxi
Abuse Reports
Total reports
416 from
111 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 MPL |
tcp/7777
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 6 hits on ports [16000] (automated)
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1388 bytes); 10305 [1] TCP
|
Hacking | |
| 🇩🇪 kingjan1999 |
Blocked by UFW [9200/tcp] | SPT: 35895 | TTL: 238 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 2310 [1] TCP
|
Hacking | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [4063/tcp]
Source port: 30802
TTL: 233
Packet length: 44
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 5003
|
Port Scan Hacking Exploited Host | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 60567.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 10220 [1] TCP
|
Port Scan | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 5984 [1] TCP
|
Port Scan | |
| 🇧🇪 Saec |
Jarvis auto-ban: blocklist:cins
|
Port Scan Web App Attack | |
| 🇺🇸 RAP |
2026-10-21 05:27:36 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (8983/tcp) [non-standard port]
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown