121.29.84.48
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Hebei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Tianjin, Tianjin
Abuse Reports
Total reports
126 from
54 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 9 observed events targeting P0F/7800, TCP/7800.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 5599 [1] TCP
|
Port Scan | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,ndpi_tcp_issues,tcp_flow_reset,ndpi_probing_attempt
|
Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 5135
GET /
Accept: */*; 5135 [1] TCP
|
Web App Attack | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 12400
|
Port Scan Hacking Exploited Host | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 2227 [1] TCP
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇬🇧 Nov |
Unauthorized access attempt (tcp/18888)
|
Port Scan | |
| 🇺🇸 ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH | |
| 🇷🇸 Smel |
MH/MP Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 12257
GET /
Accept: */*; 12257 [1] TCP
|
Web App Attack | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| Anonymous |
Blocked by firewall on hugin [50000/tcp] | Rule: UFW | SPT: 14973 | TTL: 231 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 rscott.us |
Brute force SSH login attempts.
|
Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown