101.34.59.139
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Tencent Cloud Computing (Beijing) Co., Ltd
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS45090
- Domain Name
- tencentcloud.com
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
14 from
10 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇭🇰 sandra361 |
Port scan detected: 9 attempts across 1 port (17681). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.34.59.139 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=19158 DF PROTO=TCP SPT=54307 DPT=17681 WINDOW=0 RES=0x00 RST URGP=0
|
Port Scan | |
| 🇭🇰 sandra361 |
|
Port Scan | |
| 🇭🇰 sandra361 |
Port scan detected: 6 attempts across 1 port (7038). | Evidence: REAPER_TARPIT: IN=eth0 SRC=101.34.59.139 LEN=44 TOS=0x14 PREC=0x00 TTL=113 ID=28724 DF PROTO=TCP SPT=49449 DPT=7038 WINDOW=65392 RES=0x00 ACK PSH FIN URGP=0
|
Port Scan | |
| 🇺🇸 drewf.ink |
[09:47] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as admin:s***i
|
Open Proxy | |
| 🇯🇵 demonsword |
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipify.org:443
|
Open Proxy Port Scan | |
| Anonymous |
134/tcp (1 or more attempts)
|
Port Scan | |
| 🇦🇹 CTK |
Customer Site (WELS SM)
|
Brute-Force | |
| 🇨🇦 smick |
Brute-force attack.
|
Brute-Force | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (5985/tcp) [non-standard port]
|
Web App Attack | |
| 🇨🇳 leonfetter |
Dasheng Security: 1 failed logons in 1440 minutes
|
Brute-Force | |
| 🇭🇺 Lacika555 |
RdpGuard detected brute-force attempt on RDP
|
Brute-Force | |
| Anonymous |
15854/tcp (1 or more attempts)
|
Port Scan | |
| 🇺🇸 drewf.ink |
[14:47] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 123456789:12*****89
|
Open Proxy | |
| 🇿🇦 maximonline.co.za |
Brute Force RDP Attack
|
Port Scan Hacking Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown