121.29.84.7
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Hebei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Tianjin, Tianjin
Abuse Reports
Total reports
85 from
32 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 11123 [1] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/9443 (2 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 5986.
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 9160 with data transfer.
Data preview: GET / HTTP/1.1
Host: 167.253.66.144:9160
Accept: */*
|
Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (3002/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 schematics.cc |
Blocked by on honeypot2 [3189/tcp] | SPT: 41514 | TTL: 239 | LEN: 44 | TOS: 0x00 • Reported by: abuse.terraforge.fun
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 3112
GET /
Accept: */*; 3112 [1] TCP
|
Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 2798 [1] TCP
|
Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 2246.
|
Port Scan Hacking | |
| 🇳🇱 DonAtari |
DShield firewall scan - TCP to port 9295
|
Brute-Force SSH | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 5432 (PostgreSQL) on a host running no such service. Automated port-scan detection at 2026-09-12T19:00:29Z.
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=64979 dstport=9653
|
Port Scan | |
| 🇺🇸 MPL |
tcp/2564 (2 or more attempts)
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/50000 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown