104.251.181.117
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- SKN Subnet & Telecom Ltd
- Usage Type
- Fixed Line ISP
- ASN
- AS402253
- Domain Name
- skntelecom.com
- Country
- 🇨🇭 Switzerland
- City
- Zurich, Zurich
Abuse Reports
Total reports
19 from
16 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇸🇬 drewf.ink |
[02:04] Attempted MySQL login as 'root' with an empty password
|
Brute-Force Hacking | |
| 🇺🇸 mibbsdevs |
(ric-sv) CoffeePot: Connection attempt detected on closed service bait ports (22/23/3306/3389/5432).
|
Port Scan | |
| Anonymous |
|
Brute-Force | |
| 🇩🇪 ezscale |
SSH brute force on mysql-primary (3 failures). Detected by fail2ban.
|
Brute-Force SSH | |
| 🇺🇸 heyzg |
SSH Command Execution (observed): 1 auths (3 users), 4 cmds, 2.7m
|
Hacking SSH | |
| 🇺🇸 drewf.ink |
[01:47] Listed databases via MongoDB
|
Hacking Brute-Force | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇩🇪 bancix |
Heimdallr NIDS: Automatic ban triggered. Reason: TRAP_PORT_HIT (porta 3306)
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/3306 (MySQL); 3 application-level events across 3 source port(s). Sensor(s): Dionaea.
|
Port Scan | |
| 🇩🇪 heyzg |
SSH Command Execution (observed): 1 auths (3 users), 4 cmds, 8.4m
|
Hacking SSH | |
| 🇸🇬 heyzg |
SSH Command Execution (observed): 1 auths (3 users), 4 cmds, 7.7m
|
Hacking SSH | |
| Anonymous |
Blocked by UFW [3306/tcp] | SPT: 52120 | TTL: 117 | LEN: 52 | TOS: 0x02 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 7 MySQL brute-force attempts over the last 24h (latest 2026-11-08T00:55Z).
|
Hacking Brute-Force | |
| 🇫🇷 JohnAtlas |
Honeypot: connection attempt to unused port(s) 27017/tcp on a server where these services do not exist. Automated firewall trap.
|
Port Scan Hacking | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 27017 (MongoDB) on a host running no such service. Automated port-scan detection at 2026-11-07T23:07:21Z.
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown