124.70.81.5
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co)
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS55990
- Domain Name
- huawei.com
- Country
- 🇨🇳 China
- City
- Beijing, Beijing
Abuse Reports
Total reports
19 from
18 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Ilop |
[hp-100] 4 unsolicited packets to honeypot ports 443,80 (OCI DShield sensor)
|
Port Scan | |
| Anonymous |
|
Web App Attack | |
| 🇨🇿 lp |
anomaly: tcp_port_scan, 3100 > threshold 500, repeats 46856 times
|
Port Scan | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 32 | Len: 60B | Win: 64240(1) | rDNS: ecs-124-70-81-5.compute.hwclouds-dns.com | F2B/ufw-honeypot@2026-11-08T17:33:29Z
|
Port Scan Hacking | |
| Anonymous |
Blocked by os-abuseipdb; 6 hits, proto=tcp, ports=18080,4443
|
Port Scan Hacking | |
| 🇳🇱 Selckie |
fail2ban: NGINX unusual impact
|
Web App Attack | |
| 🇷🇺 Agrohim |
Gate B blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇳🇱 StopAbuse |
tcp/443 tcp/80
|
Port Scan | |
| 🇵🇱 Kolobrzeg |
Repeated protocol probing of VNC relay service port (unknown commands, silent or malformed connections), blocked after repeated attempts. Last seen 2026-11-08 16:06 UTC. Automated detection. AS55990 Huawei Cloud Service data center.
|
Port Scan | |
| 🇨🇭 GAS |
|
Port Scan Web App Attack | |
| Anonymous |
Drop from IP address 124.70.81.5 to tcp-port 80
|
Port Scan | |
| 🇷🇺 6o6ep |
connection via ip or to a non-existent subdomain: GET /prod-api/basesetting/officeDocument/ingore/getHallSetting?name=real_name_place_order&p=wxmini HTTP/1.1
|
Port Scan Hacking | |
| 🇩🇪 DasDuo |
Attempt on port 80 (HTTP) - potential web application attack attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
|
Port Scan Web App Attack | |
| 🇩🇪 xavier-momain.eu |
CrowdSec ban — scenario: xavier/nftables-scan-any-port
|
Port Scan | |
| 🇺🇸 sarphim |
[Blackhive Honeypot] Web attack probe on port 80: GET /prod-api/basesetting/officeDocument/ingore/getHallSetting?name=real_name_place_order&p=wxmi...
|
Web App Attack Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown