121.29.84.85
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom Hebei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shijiazhuang, Hebei
Abuse Reports
Total reports
18 from
12 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇳 yiyan |
Automated SSH brute-force attack trapped in endlessh tarpit. Sample log: 2026-11-09T17:13:32.901Z ACCEPT host=121.29.84.85 port=60642 fd=11 n=11/8192
|
Brute-Force SSH | |
| 🇺🇸 cazae |
Unauthorized attempt on debian [10086/tcp]
Source port: 11857
TTL: 234
Packet length: 44
TOS: 0x08
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/121.29.84.85
2026-04-13 19:13:01 http://110.242.68.4/
|
Web App Attack | |
| 🇺🇸 MPL |
tcp/2701 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/10420 (2 or more attempts)
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/121.29.84.85
2026-04-10 19:39:54 //www.so.com:443
|
Web App Attack | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇩🇪 dispaisyenterprises |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 8085 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇳🇱 Nullcore07 |
2026-03-01 12:05:43 UTC Unauthorized activity to TCP port 80. TCP connection established to port 80 (redirect=true). Banner sent; connection dropped.
|
Port Scan | |
| 🇬🇧 gbzret4d |
Honeypot [uk-production01]: HTTP/1.1 request on 1521
GET /
Accept: */*; 1521 [1] TCP
|
Hacking Bad Web Bot | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/37
|
Port Scan | |
| 🇫🇮 6kilowatti |
Blocked by UFW on koti [7003/tcp]
Source port: 13103
TTL: 226
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/121.29.84.85
2026-01-29 03:51:49 /
|
Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown