120.0.52.109

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
120 reports
38 reporters · latest 1 year ago
ISP
China Unicom Heibei Province Network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Shijiazhuang, Hebei
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

120.0.52.109 has been reported 120 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
120 from 38 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/50075 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/50075
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 441) Source port: 65261 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 120.0.52.109) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/11210 (3 or more attempts)
Port Scan
🇵🇱 Niko's Stuff
[1x] F2B | Suspicious activity blocked on: ufw | BanTime: 604800s | Suspicious TCP packet from 120.0.52.109:18116 → port 5002 | TTL: 236, LEN: 44, TOS: 0x00, PREC: 0x20, Interface: eth0
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.0.52.109 2025-08-25 09:29:09 / 2025-08-25 08:09:17 http://www.rfa.org/english/
Web App Attack
🇳🇱 Hobby Bob
Aug 23 19:50:08 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=, rip=120.0.52.109, lip=X.X.X.X session=
Port Scan Hacking
Anonymous
Honeypot hit.
Port Scan Hacking Exploited Host
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.0.52.109 2025-08-17 07:29:30 /favicon.ico 2025-08-17 16:38:00 /favicon.ico
Web App Attack
🇺🇸 xmission.com
Blocked by UFW (TCP on 9443) Source port: 30963 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 120.0.52.109) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 drewf.ink
[14:29] Port scanning. Port(s) scanned: TCP/444
Port Scan
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/8 (unassigned) [srv127]
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.0.52.109 2025-07-20 13:13:38 //www.so.com:443 2025-07-20 14:38:33 / 2025-07-20 13:13:36 http://www.rfa.org/english/ 2025-07-20 13:13:36 http://www.minghui.org/
Web App Attack
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/8 (unassigned) [srv127]
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 220.135.33.204
🇹🇼 198.235.24.97
🇧🇷 191.251.252.46
🇲🇽 189.165.23.212
🇺🇸 142.93.193.235
🇺🇸 136.64.76.201
🇰🇷 121.183.240.55
🇧🇬 78.128.112.74
🇩🇪 196.251.102.125
🇦🇷 191.241.142.170
🇭🇰 191.223.44.8
🇮🇩 163.7.4.109
🇵🇰 153.117.50.52
🇮🇩 103.19.78.119
🇧🇬 91.92.199.36
🇮🇹 79.13.140.121
feedback