120.0.52.63

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
213 reports
56 reporters · latest 11 months ago
ISP
China Unicom Heibei Province Network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Shijiazhuang, Hebei
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

120.0.52.63 has been reported 213 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
213 from 56 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇯🇵 mkaraki
1764171432 # Service_probe # SIGNATURE_SEND # source_ip:120.0.52.63 # dst_port:6007 ...
Port Scan
🇺🇸 MPL
tcp/9527
Port Scan
🇩🇪 iNetWorker
firewall-block, port(s): 5985/tcp
Port Scan
🇺🇸 MPL
tcp/9653 (2 or more attempts)
Port Scan
🇹🇼 090410-1830
Honeypot hit: HTTP/1.1 request on 49667 GET / Accept: */*; 49667 [1] TCP
Hacking Bad Web Bot
🇧🇬 pa4080
Detected by ModSecurity. Host header is an IP address, Request URI: /issues.php
Hacking Web App Attack
🇺🇸 MPL
tcp/5001 (2 or more attempts)
Port Scan
🇫🇷 Altai
Honeypot hit: Empty payload (likely service probe); 9092 [1] TCP
Port Scan
🇺🇸 drewf.ink
[08:30] Port scanning. Port(s) scanned: TCP/5984
Port Scan
🇺🇸 MPL
tcp/4300 (2 or more attempts)
Port Scan
🇬🇧 spamverify.com
Honeypot Hit: Port Scan (27017) MONGODB
Web Spam Blog Spam Bad Web Bot Web App Attack
🇯🇵 mkaraki
1761784584 # Service_probe # SIGNATURE_SEND # source_ip:120.0.52.63 # dst_port:11 ...
Port Scan
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/120.0.52.63 2025-10-26 22:28:31 /
Web App Attack
🇺🇸 MPL
tcp/20 (3 or more attempts)
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.242.226.74
🇳🇱 185.218.86.20
🇩🇪 178.128.201.30
🇳🇱 176.65.132.216
🇮🇷 130.193.77.236
🇨🇳 123.129.205.22
🇮🇳 103.110.249.45
🇩🇪 41.216.189.147
🇨🇱 34.176.99.177
🇺🇸 34.48.222.26
🇬🇧 31.14.254.51
🇦🇷 190.112.185.9
🇨🇳 183.230.54.87
🇹🇼 123.192.123.125
🇮🇷 37.148.20.61
🇨🇳 36.33.167.165
🇧🇪 35.195.41.101
🇺🇸 173.88.180.156
🇿🇦 165.73.163.152
🇺🇸 157.22.18.242
feedback