120.0.52.4

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
168 reports
39 reporters · latest 11 months ago
ISP
China Unicom Heibei Province Network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Shijiazhuang, Hebei
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

120.0.52.4 has been reported 168 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
168 from 39 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/64738
Port Scan
🇸🇬 drewf.ink
[02:49] Port scanning. Port(s) scanned: TCP/5631
Port Scan
🇳🇱 Hobby Bob
Nov 22 17:55:08 server dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=120.0.52.4, lip=X.X.X.X session=
Port Scan Hacking
🇺🇸 MPL
tcp/5552 (3 or more attempts)
Port Scan
🇫🇷 Altai
Honeypot hit: Empty payload (likely service probe); 2083 [1] TCP
Port Scan
🇺🇸 MPL
tcp/8181 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/8181
Port Scan
🇺🇸 MPL
tcp/36 (2 or more attempts)
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/120.0.52.4
SSH
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 4000
Port Scan Hacking Exploited Host
🇺🇸 cybsecaoccol
multiple malicious connection attempts on tcp port 22 - dr
DDoS Attack Port Scan Hacking Brute-Force
🇺🇸 xmission.com
Blocked by UFW (TCP on 55555) Source port: 14631 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 120.0.52.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇳🇱 bontekoe.technology
120.0.52.4 banned on rtr - Threshold reached: 3 failures
Web App Attack
🇺🇸 MPL
tcp/4064 (3 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 212.73.148.20
🇹🇭 203.156.108.110
🇳🇱 200.138.46.54
🇻🇪 190.97.237.157
🇺🇸 172.200.195.165
🇺🇸 129.121.141.232
🇳🇱 109.160.32.145
🇫🇷 91.231.89.205
🇫🇷 91.231.89.201
🇳🇱 89.255.58.44
🇰🇷 14.55.199.214
🇳🇱 9.247.136.210
🇻🇳 210.245.30.140
🇵🇭 202.69.171.60
🇳🇱 193.47.62.69
🇹🇷 193.35.155.110
🇳🇱 185.223.235.33
🇮🇳 182.78.87.2
🇳🇱 81.19.216.98
🇳🇱 77.239.124.50
feedback