120.0.52.250

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
189 reports
42 reporters · latest 11 months ago
ISP
China Unicom Heibei Province Network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Shijiazhuang, Hebei
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

120.0.52.250 has been reported 189 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
189 from 42 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/49667 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/6433 (3 or more attempts)
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/120.0.52.250
SSH
🇵🇱 sefinek.net
Honeypot hit: HTTP/1.1 request on 9006 GET / Accept: */*; 9006 [1] TCP
Hacking Bad Web Bot
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇩🇪 Grizzlytools
Kingcopy(AI-IDS)RouterOS: Portscanner detected.
Port Scan
🇺🇸 cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port 22 - dr
Port Scan Hacking
🇺🇸 MPL
tcp/8084 (3 or more attempts)
Port Scan
🇺🇸 MPL
tcp/37215 (3 or more attempts)
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/120.0.52.250 2025-10-12 05:10:45 /
Web App Attack
🇺🇸 drewf.ink
[20:40] Port scanning. Port(s) scanned: TCP/6379
Port Scan
🇺🇸 MPL
tcp/1200 (2 or more attempts)
Port Scan
🇺🇸 drewf.ink
[11:54] Port scanning. Port(s) scanned: TCP/2181
Port Scan
🇨🇦 Largnet SOC
120.0.52.250 triggered Icarus honeypot on port 3389. Check us out on github.
Port Scan Hacking
🇯🇵 S.O.B.A. Dev.
Web vulnerability scanning
Web Spam Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.216.150.237
🇺🇸 143.198.143.3
🇮🇳 110.227.196.17
🇬🇧 35.203.210.146
🇷🇴 2.57.121.112
🇧🇬 212.116.238.10
🇩🇪 206.189.57.162
🇧🇷 205.210.31.234
🇺🇸 205.210.31.8
🇨🇳 180.165.54.95
🇺🇸 165.154.135.73
🇺🇸 118.193.77.102
🇺🇸 67.207.83.40
🇺🇸 66.132.224.247
🇺🇸 34.174.165.213
🇺🇸 205.210.31.103
🇹🇼 198.235.24.74
🇮🇳 182.66.213.59
🇷🇺 176.124.166.29
🇦🇹 152.53.32.182
feedback