This IP address has been reported a total of
12
times from
12 distinct
sources.
120.198.51.152 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Attempt on port 1433 (MSSQL) - potential unauthorized database access attempt. Blocked by firewall ( ...
show moreAttempt on port 1433 (MSSQL) - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
show less
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 12 authentication events observe ...
show moreHoneypot Finding: credential brute-force against MSSQL on TCP/1433; 12 authentication events observed across 12 source port(s); target port(s): 1433.
show less
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 99 | Len: 44B | Wi ...
show morePort Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 99 | Len: 44B | Win: 16384(1) | F2B/ufw-honeypot@2026-10-09T00:09:40Z
show less
Blocked by UFW (TCP on 1433)
Source port: 6000
TTL: 102
Packet length: 44
TOS: 0x08
This report (fo ...
show moreBlocked by UFW (TCP on 1433)
Source port: 6000
TTL: 102
Packet length: 44
TOS: 0x08
This report (for 120.198.51.152) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
🛡️ Honeypot [bsts-tpot-hive]: MSSQL login attempt (dst port 1433/tcp, src port 8625) against a passi ...
show more🛡️ Honeypot [bsts-tpot-hive]: MSSQL login attempt (dst port 1433/tcp, src port 8625) against a passive decoy database service, using username 'sa' with an empty password. No legitimate MSSQL service is exposed here; consistent with automated credential brute-forcing.
show less
[120.198.51.152] triggered by honeypot on port [1433], Timestamp [2026-10-08T13:38:18Z] q ...
show more[120.198.51.152] triggered by honeypot on port [1433], Timestamp [2026-10-08T13:38:18Z] q V b f f t PV S E R V E R s a O S Q L - 3 2 4 6 . 8 . 1 0
show less
Possible malicious scan or exploit attempt on database services. | Port: 1433 | Proto: TCP | Locatio ...
show morePossible malicious scan or exploit attempt on database services. | Port: 1433 | Proto: TCP | Location: China, N/A
show less