120.0.52.44
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom Heibei Province Network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shijiazhuang, Hebei
No reports in the last 60 days
120.0.52.44 has been reported 137 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
137 from
38 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 ioexploit. |
SYN -> SYN-ACK scan
Source port: 23384
Destination port: 6667
|
Port Scan | |
| 🇺🇸 MPL |
tcp/25565 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/25565
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/120.0.52.44
2025-11-17 08:02:22 /service/logon?path=2FE64217A9C3A9F8235903EDB1A99447C9CB4D45EE36479D6C85E19B1D0FEB8F8546E2B6E693C143
2025-11-17 08:02:22 /
|
Web App Attack | |
| 🇰🇷 forgeban |
Honeypot hit: Empty payload (likely service probe); 4064 [1] TCP
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=49943 dstport=12345
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1911 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/49153 (3 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1521
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1521 (2 or more attempts)
|
Port Scan | |
| 🇯🇵 mkaraki |
1762212547 # Service_probe # SIGNATURE_SEND # source_ip:120.0.52.44 # dst_port:3389
...
|
Port Scan | |
| 🇷🇺 6o6ep |
GeoIP rejected
|
Email Spam Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/120.0.52.44
2025-10-29 01:51:10 /apple-touch-icon.png
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/2107 (3 or more attempts)
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown