JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.29.149.57

121.29.149.57 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 69%: ?

69%

ISP	China Unicom Hebei province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shijiazhuang, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.29.149.57

Whois 121.29.149.57

IP Abuse Reports for 121.29.149.57:

This IP address has been reported a total of 94 times from 36 distinct sources. 121.29.149.57 was first reported on December 1st 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-21 21:05:24 (13 hours ago)	Blocked by UFW (TCP on 49673) Source port: 24168 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 49673) Source port: 24168 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 121.29.149.57) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-06-21 11:28:22 (22 hours ago)	Honeypot hit: Large payload (1457 bytes); 1801 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 1801 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2026-06-21 06:20:13 (1 day ago)	Blocked by UFW on PL02 [12314/tcp] \| SPT: 23879 \| TTL: 228 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on PL02 [12314/tcp] \| SPT: 23879 \| TTL: 228 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sandra361	2026-06-18 11:15:04 (3 days ago)	Port scan detected: 7 attempts across 1 ports (5601). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=121 ... show more Port scan detected: 7 attempts across 1 ports (5601). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=121.29.149.57 LEN=60 TOS=0x00 PREC=0x00 TTL=42 ID=7809 DF PROTO=TCP SPT=51315 DPT=5601 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-17 10:43:30 (4 days ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 31337 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 31337 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-06-16 11:42:53 (5 days ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇩🇪 femboy.cat	2026-06-16 05:55:56 (6 days ago)	Port scan to tcp/1833 from 121.29.149.57	Brute-Force
🇬🇧 PeravixGroup	2026-06-10 17:00:12 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 RAP	2026-06-10 12:27:51 (1 week ago)	2026-06-10 12:27:51 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 RAP	2026-06-08 02:58:28 (2 weeks ago)	2026-06-08 02:58:28 UTC Unauthorized activity to TCP port 9200.	Port Scan
🇳🇵 radheykrishna.com.np	2026-06-07 23:14:26 (2 weeks ago)	Jun 8 04:59:25 kernel: [4363880.927974] [UFW BLOCK] IN=ens160 OUT= SRC=121.29.149.57 LEN=44 TOS=0x0 ... show more Jun 8 04:59:25 kernel: [4363880.927974] [UFW BLOCK] IN=ens160 OUT= SRC=121.29.149.57 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=48378 PROTO=TCP SPT=34971 DPT=995 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-07 11:16:49 (2 weeks ago)	Honeypot detection: VNC remote desktop brute-force authentication attempt on port 5900. Severity: ME ... show more Honeypot detection: VNC remote desktop brute-force authentication attempt on port 5900. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-06 15:07:08 (2 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-03 07:47:50 (2 weeks ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇷🇸 Scan	2026-06-01 09:23:19 (3 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.228.128.204

🇳🇱 195.178.110.30

🇪🇬 62.193.91.121

🇳🇴 185.12.59.118

🇨🇳 117.187.127.135

🇨🇳 117.156.118.210

🇺🇸 107.167.34.125

🇧🇷 177.87.28.127

🇺🇸 170.187.165.139

🇮🇹 83.229.8.197

🇺🇸 52.168.141.47

🇺🇦 45.11.57.172

🇸🇬 8.219.94.183

🇻🇳 2402:800:620f:2646:296f:f73b:e63b:ff52

🇰🇷 175.198.62.180

🇭🇰 152.32.214.226

🇺🇸 152.32.207.21

🇸🇦 37.125.171.46

🇧🇪 198.235.24.232

🇺🇸 195.184.76.176