110.42.9.254
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Ningbo Zhuo Zhi Innovation Network Technology Co., Ltd
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS136188
- Domain Name
- nbgaofang.com
- Country
- 🇨🇳 China
- City
- Ningbo, Zhejiang
No reports in the last 60 days
110.42.9.254 has been reported 14 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
14 from
8 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
13500/tcp (1 or more attempts)
|
Port Scan | |
| 🇺🇸 drewf.ink |
[11:43] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as traefik:12*****89
|
Open Proxy | |
| 🇰🇷 stypr |
Malicious activity detected
|
Port Scan Brute-Force | |
| Anonymous |
5985/tcp (1 or more attempts)
|
Port Scan | |
| 🇦🇹 CTK |
Customer Site (Grieskirchen FP)
|
Brute-Force | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇨🇦 Luhte |
Unsolicited TCP connection from 110.42.9.254 to port 0 at 2026-08-23T17:23:11Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇩🇪 anycast_ac |
|
DDoS Attack | |
| 🇩🇪 anycast_ac |
|
DDoS Attack | |
| 🇩🇪 anycast_ac |
|
DDoS Attack | |
| 🇸🇬 drewf.ink |
[10:18] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 57075:5***5
|
Open Proxy Port Scan | |
| Anonymous |
7016/tcp (1 or more attempts)
|
Port Scan | |
| 🇸🇬 drewf.ink |
[18:06] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as 160:1*0
|
Open Proxy Port Scan | |
| 🇩🇪 NetWatch |
The IP 110.42.9.254 tried multiple SSH_BRUTE_FORCE logins
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown