120.0.52.41

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
177 reports
47 reporters · latest 11 months ago
ISP
China Unicom Heibei Province Network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Shijiazhuang, Hebei
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

120.0.52.41 has been reported 177 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
177 from 47 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 drewf.ink
[08:23] Port scanning. Port(s) scanned: TCP/8888
Port Scan
Anonymous
Port Scan Brute-Force
🇵🇱 sefinek.net
Honeypot hit: Unauthorized traffic (16 bytes of payload); 49669 [1] TCP
Port Scan
🇺🇸 MPL
tcp/5342 (3 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:59586 dst:20
Port Scan
🇯🇵 mkaraki
1764008076 # Service_probe # SIGNATURE_SEND # source_ip:120.0.52.41 # dst_port:22 ...
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 9530
Port Scan Hacking Exploited Host
🇹🇼 090410-1830
Honeypot hit: Empty payload (likely service probe); 2013 [1] TCP
Port Scan
🇺🇸 MPL
tcp/10243 (2 or more attempts)
Port Scan
🇺🇸 shabi
UFW Blocked [9869/TCP] Source: 120.0.52.41:49282 TTL: 237 Lenth: 44 TOS: 0x00
Port Scan
🇵🇱 nfsec.pl
Detected: TCP scan on port: 3389 with flags: SYN
Port Scan
🇩🇪 mittPS
2025-10-19T16:58:36.190759+02:00 immelmann sshd[423980]: error: kex_exchange_identification: Connection closed by remote host 2025-10-19T16:58:36.190803+02:00 immelmann sshd[423980]: Connection closed by 120.0.52.41 port 42302 ...
Brute-Force SSH
🇳🇱 bontekoe.technology
120.0.52.41 banned on rtr - Threshold reached: 3 failures
Web App Attack
🇳🇱 Study Bitcoin 🤗
Port probe to tcp/8 (unassigned) [srv127]
Port Scan
🇺🇸 MPL
tcp/7778 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.46.255.86
🇺🇸 172.58.144.164
🇨🇳 153.3.86.56
🇻🇳 123.31.31.125
🇨🇳 117.50.44.85
🇨🇳 116.172.201.138
🇰🇷 112.162.111.205
🇳🇱 109.160.32.171
🇺🇸 109.105.210.68
🇧🇬 79.124.58.106
🇺🇸 23.191.200.103
🇨🇳 223.88.222.18
🇺🇸 207.46.13.151
🇳🇱 195.178.110.217
🇺🇸 174.68.45.217
🇫🇮 147.185.133.27
🇺🇸 109.105.210.67
🇱🇾 102.211.7.162
🇺🇸 85.208.96.207
🇺🇸 66.132.172.200
feedback