123.4.252.42

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
19% Caution
14 reports
6 reporters · latest 1 week ago
ISP
China Unicom Henan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Zhengzhou, Henan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
14 from 6 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 10 🇮🇪 Ireland 1
Most common categories Brute-Force 10 IoT Targeted 6 SSH 4 Hacking 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Vexedly
SSH brute-force against an SSH honeypot: 232 credential attempt(s) across 232 logged events. Automated report from a Cowrie sensor.
Brute-Force SSH
🇺🇸 Vexedly
SSH brute-force against an SSH honeypot: 417 credential attempt(s) across 417 logged events. Automated report from a Cowrie sensor.
Brute-Force SSH
🇺🇸 wristhulk
Honeypot: 23 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner. (2 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'admin' Password: '1234'. (6 attempts)
Brute-Force IoT Targeted
🇮🇪 RoboSOC
D-Link DSL Soap Authorization Remote Command Execution Vulnerability, PTR: hn.kd.ny.adsl.
Hacking
🇺🇸 Vexedly
SSH brute-force against an SSH honeypot: 1713 credential attempt(s) across 1713 logged events. Automated report from a Cowrie sensor.
Brute-Force SSH
🇺🇸 wristhulk
Honeypot: 144 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner. (40 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'root' Password: 'hg2x0'.
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: 20 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner.
Brute-Force IoT Targeted
🇺🇸 Vexedly
SSH brute-force against an SSH honeypot: 2 credential attempt(s) across 2 logged events. Automated report from a Cowrie sensor.
Brute-Force SSH
🇺🇸 wristhulk
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'cunmgadmin' Password: 'cunmgadmin'. (4 attempts)
Brute-Force IoT Targeted
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 123.4.252.42 to port 23 [J]
Port Scan Hacking
🇨🇿 akac
Added into the Abuse.ch URLHaus IOC database by @geenensp for distributing malware with tags: 32-bit, elf, mips, Mozi. Source: https://urlhaus.abuse.ch/url/2505425/
Hacking Exploited Host
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 203.57.6.123
🇺🇸 172.70.127.202
🇧🇬 79.124.59.78
🇧🇷 189.50.142.82
🇺🇾 186.53.32.116
🇩🇪 164.92.161.54
🇧🇷 45.180.218.121
🇳🇱 45.148.10.141
🇭🇰 5.187.38.30
🇸🇬 145.223.144.202
🇨🇳 115.231.50.242
🇷🇸 109.245.168.157
🇳🇱 185.213.174.141
🇺🇸 172.70.111.227
🇺🇸 170.106.163.48
🇸🇬 167.71.201.93
🇮🇳 156.67.110.230
🇺🇸 104.23.190.212
🇺🇸 104.22.204.31
🇷🇴 92.118.39.65
feedback