110.42.52.238

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
20 reports
14 reporters · latest 2 months ago
ISP
Ningbo Zhuo Zhi Innovation Network Technology Co., Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS136188
Domain Name
nbgaofang.com
Country
🇨🇳 China
City
Ningbo, Zhejiang
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

110.42.52.238 has been reported 20 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
20 from 14 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-08-14 00:16:54 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇩🇪 IP Analyzer
Unauthorized connection attempt from IP address 110.42.52.238 on Port 445(SMB)
Port Scan
🇺🇸 MPL
tcp/1433 (2 or more attempts)
Port Scan
🇦🇺 dyln
Dyls honeypot brute-force: SMB (6 total hits)
Brute-Force
🇺🇸 cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan Hacking
🇺🇸 MPL
tcp/445 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/445 (3 or more attempts)
Port Scan
Anonymous
Portscan: TCP/1433 (11x)
Port Scan
🇺🇸 IndigoRidge
Knock-Knock SMB honeypot activity; time=2026-08-09 13:02:36; smb_action=AUTH; smb_version=SMB1
Hacking Brute-Force
🇺🇸 RAP
2026-08-09 11:34:41 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
Anonymous
1433/tcp (1 or more attempts)
Port Scan
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [GEO] (SMB/Possible Ransomware Attack)
Hacking Brute-Force
🇹🇷 Domainhizmetleri.com
Source: honeypot | Reason: MS-SQL
Port Scan SQL Injection Brute-Force
🇸🇬 drewf.ink
[11:12] Port scanning. Port(s) scanned: TCP/1433
Port Scan
🇺🇸 HamSammich
Automated sensor: 1 MSSQL connection/probe attempts over the last 24h (latest 2026-08-07T04:05Z).
Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 218.238.5.110
🇷🇴 193.32.162.84
🇦🇷 186.39.61.105
🇺🇸 162.216.150.211
🇫🇷 91.231.89.215
🇧🇪 35.210.183.159
🇳🇱 195.178.110.26
🇺🇸 172.206.243.83
🇮🇷 130.193.77.236
🇰🇷 115.160.76.23
🇨🇳 58.247.18.34
🇯🇵 34.97.6.176
🇺🇸 20.84.147.13
🇰🇷 175.202.142.154
🇵🇱 151.115.63.219
🇰🇷 121.184.144.232
🇰🇷 121.131.220.136
🇺🇸 109.105.209.10
🇸🇮 102.220.161.86
🇨🇳 101.96.202.144
feedback