AbuseIPDB » 117.72.126.252

117.72.126.252 was found in our database!

This IP was reported 76 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Jingdong 360 Degree E-commerce Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141679
Domain Name	jd.com
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 117.72.126.252

Whois 117.72.126.252

IP Abuse Reports for 117.72.126.252:

This IP address has been reported a total of 76 times from 54 distinct sources. 117.72.126.252 was first reported on May 12th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-05-24 20:08:21 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
NetWatch	2025-05-24 11:45:12 (3 weeks ago)	The IP 117.72.126.252 tried multiple SSH logins	Brute-Force SSH
Schnuffi	2025-05-24 08:25:26 (3 weeks ago)	ports, 22/24H:1/7D:1	Port Scan
rjdefrancisco	2025-05-24 07:09:43 (3 weeks ago)	Unwanted traffic detected by honeypot on May 23, 2025: brute force and hacking attacks (3 over ssh).	Port Scan Brute-Force SSH
LoNET	2025-05-24 05:50:07 (3 weeks ago)	Report 1707820 with IP 2755373 for SSH brute-force attack by source 2750045 via ssh-honeypot/0.2.0+h ... show moreReport 1707820 with IP 2755373 for SSH brute-force attack by source 2750045 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
30p87	2025-05-24 04:38:02 (3 weeks ago)	2025-05-24T06:38:01.349284+02:00 30p87-server sshd-session[2323165]: User root from 117.72.126.252 n ... show more2025-05-24T06:38:01.349284+02:00 30p87-server sshd-session[2323165]: User root from 117.72.126.252 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
ThreatBook.io	2025-05-23 22:24:35 (3 weeks ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/117.72.126.252	SSH
trivox.sh	2025-05-23 22:10:24 (3 weeks ago)	May 23 22:07:24 honey3 sshd[532857]: Disconnected from authenticating user root 117.72.126.252 port ... show moreMay 23 22:07:24 honey3 sshd[532857]: Disconnected from authenticating user root 117.72.126.252 port 44650 [preauth] May 23 22:08:52 honey3 sshd[532952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.126.252 user=root May 23 22:08:54 honey3 sshd[532952]: Failed password for root from 117.72.126.252 port 51796 ssh2 May 23 22:08:56 honey3 sshd[532952]: Disconnected from authenticating user root 117.72.126.252 port 51796 [preauth] May 23 22:10:23 honey3 sshd[533083]: Invalid user tt from 117.72.126.252 port 58964 ... show less	Brute-Force SSH
rtbh.com.tr	2025-05-23 20:08:20 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
majo-it.nl	2025-05-23 14:29:35 (3 weeks ago)	May 23 14:29:33 fail2ban sshd[966353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreMay 23 14:29:33 fail2ban sshd[966353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.126.252 May 23 14:29:35 fail2ban sshd[966353]: Failed password for invalid user nasrin from 117.72.126.252 port 36128 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-05-23 09:47:23 (3 weeks ago)	2025-05-23T09:32:25.105332+00:00 de-fra2-dns2 sshd[2391874]: Invalid user gh from 117.72.126.252 por ... show more2025-05-23T09:32:25.105332+00:00 de-fra2-dns2 sshd[2391874]: Invalid user gh from 117.72.126.252 port 55964 2025-05-23T09:46:18.245057+00:00 de-fra2-dns2 sshd[2392289]: Invalid user dbuser from 117.72.126.252 port 56436 2025-05-23T09:47:22.443928+00:00 de-fra2-dns2 sshd[2392298]: Invalid user ftpadmin from 117.72.126.252 port 34778 ... show less	Brute-Force SSH
Nerdscave Hosting	2025-05-23 07:33:40 (3 weeks ago)	2025-05-23T08:33:37.460135+01:00 fra-GW01 sshd[508617]: Invalid user deploy from 117.72.126.252 port ... show more2025-05-23T08:33:37.460135+01:00 fra-GW01 sshd[508617]: Invalid user deploy from 117.72.126.252 port 35552 2025-05-23T08:33:37.465190+01:00 fra-GW01 sshd[508617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.72.126.252 2025-05-23T08:33:39.254965+01:00 fra-GW01 sshd[508617]: Failed password for invalid user deploy from 117.72.126.252 port 35552 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-05-23 06:50:53 (3 weeks ago)	2025-05-23T06:31:25.168783+00:00 de-dus1-icmp1 sshd[2165728]: Invalid user jenkins from 117.72.126.2 ... show more2025-05-23T06:31:25.168783+00:00 de-dus1-icmp1 sshd[2165728]: Invalid user jenkins from 117.72.126.252 port 38568 2025-05-23T06:45:34.622855+00:00 de-dus1-icmp1 sshd[2166036]: Invalid user scanner from 117.72.126.252 port 43320 2025-05-23T06:50:52.391617+00:00 de-dus1-icmp1 sshd[2166061]: Invalid user nexus from 117.72.126.252 port 39540 ... show less	Brute-Force SSH
creations.works	2025-05-23 06:16:18 (3 weeks ago)	Blocked by UFW on vds [2022/tcp] Source port: 34406 TTL: 50 Packet length: 60<br / ... show moreBlocked by UFW on vds [2022/tcp] Source port: 34406 TTL: 50 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
XICTRON	2025-05-23 01:25:03 (3 weeks ago)	Failed login attempt detected by Fail2Ban in ssh jail	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩