124.94.170.244
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Liaoning province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shenyang, Liaoning
Abuse Reports
Total reports
21 from
15 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-30 08:25, Last: 2026-11-03 19:39 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 OceanTreasure |
tcp/80; Boaform admin formLogin probe: "GET /boaform/admin/formLogin?username=ec8&psd=ec8" @ 2026-10-28T21:06:25Z
|
IoT Targeted Web App Attack | |
| 🇺🇸 RAP |
2026-10-28 19:27:06 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-20 19:36, Last: 2026-10-28 06:39 UTC. Triggers: unknown.
|
Port Scan | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇸🇪 warriors |
|
Exploited Host | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 23 proto 6 detection dark_ip
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-22 21:06:13 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-22 08:17:14 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 601 malicious events (exploit_attempt, port_scan, ssh_activity, ssh_bruteforce) detected.
|
Port Scan Hacking Brute-Force SSH | |
| 🇩🇪 LoakyDE |
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=8080
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:41729 dst:23
|
Port Scan | |
| 🇸🇪 warriors |
Telnet honeypot observed this address advertised as a potential malware payload host in 2 compromise sessions from 1 source IP. Transfer methods: curl, wget. Observed ports: 51983. Requested paths: /i. Payload hosting was not independently verified.
|
Exploited Host | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 41729
TTL: 52
Packet length: 40
TOS: 0x00
This report (for 124.94.170.244) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇸🇪 warriors |
Telnet honeypot observed this address advertised as a potential malware payload host in 46 compromise sessions from 1 source IP. Transfer methods: curl, wget. Observed ports: 51983. Requested paths: /i. Payload hosting was not independently verified.
|
Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown