116.252.54.12
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Guangxi province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Nanning, Guangxi
Abuse Reports
Total reports
31 from
21 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [1433/tcp]
Source port: 59734
TTL: 112
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇯🇵 jsys |
Automated report (nfacl NetFlow analysis, 300s window): host sweep (70 distinct dst hosts); repeated attempts on admin/database ports 1433 (70 flows to sensitive ports)
|
Port Scan Brute-Force | |
| 🇯🇵 jsys |
Automated report (nfacl NetFlow analysis, 300s window): repeated attempts on admin/database ports 1433 (49 flows to sensitive ports)
|
Brute-Force | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-19 18:46, Last: 2026-10-23 08:10 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: database attack (MSSQL/MySQL). First: 2026-10-15 06:53, Last: 2026-10-16 15:46 UTC. Triggers: non-public-port,firewall-database,unknown.
|
Port Scan Hacking | |
| 🇨🇭 Elysium Security |
Mass port scanning on a whole network
|
Port Scan | |
| 🇹🇷 Threat.live |
Suspicious activity, tcp/1433
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇨🇦 design2web.ca |
[UniFi FW] Inbound network intrusion attempt on port 1433 (MSSQL) | Policy: Region Blocking | Proto: TCP | Src: 116.252.54.12:63589 | SrcRegion: CN | Detected: 2026-04-03 20:36:20 UTC | ISP: Chinanet | D2W UniFi AbuseIPDB Reporter v2
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 59752
TTL: 113
Packet length: 52
TOS: 0x08
This report (for 116.252.54.12) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇹🇷 rtbh.com.tr |
list.rtbh.com.tr report: tcp/1433
|
Brute-Force | |
| 🇫🇷 tavis.page |
Blocked by UFW on server [1433/tcp]
Source port: 55035
TTL: 107
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇯🇵 mkaraki |
1773192471 # Service_probe # SIGNATURE_SEND # source_ip:116.252.54.12 # dst_port:1433
...
|
Port Scan | |
| Anonymous |
Port Scan
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown