120.0.52.187

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
148 reports
46 reporters · latest 11 months ago
ISP
China Unicom Heibei Province Network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Shijiazhuang, Hebei
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

120.0.52.187 has been reported 148 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
148 from 46 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/6009 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/6009
Port Scan
🇰🇷 forgeban
Honeypot hit: HTTP/1.1 request on 40005 GET / Accept: */*; 40005 [1] TCP
Hacking Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: HTTP/1.0 request on 8000 GET /; 8000 [1] TCP
Web App Attack
🇺🇸 MPL
tcp/5008 (4 or more attempts)
Port Scan
🇺🇸 MPL
tcp/1720 (3 or more attempts)
Port Scan
🇯🇵 mkaraki
1763128898 # Service_probe # SIGNATURE_SEND # source_ip:120.0.52.187 # dst_port:9801 ...
Port Scan
🇺🇸 OceanTreasure
tcp/1521; SCAN Suspicious inbound to Oracle SQL port 1521 @ 2025-11-11T05:04:35Z
Brute-Force
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/120.0.52.187 2025-11-04 22:03:07 /
SSH
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/18001 [srv125]
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 111) Source port: 44884 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 120.0.52.187) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 QUADEMU Abuse Dpt
[New] Noxious/Nuisible/вредоносный Host.
Port Scan Exploited Host
🇨🇭 dispaisyenterprises
Honeypot hit: Unauthorized traffic on 3306/mysqld
Port Scan
🇳🇱 bontekoe.technology
120.0.52.187 banned on rtr - Threshold reached: 3 failures
Web App Attack
🇺🇸 MPL
tcp/9092 (3 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇴 148.103.245.22
🇪🇨 200.76.114.213
🇦🇷 190.196.253.59
🇻🇪 186.95.7.118
🇬🇧 185.170.108.156
🇲🇽 177.227.107.197
🇺🇸 147.185.132.46
🇺🇸 146.190.216.59
🇧🇷 146.70.163.91
🇧🇷 138.94.38.57
🇳🇱 134.19.179.155
🇭🇰 123.58.215.196
🇺🇸 193.37.252.71
🇺🇸 172.191.239.155
🇸🇬 134.209.98.241
🇨🇳 125.66.152.250
feedback