125.35.0.129
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Department of Publicity of the Central Committee of the CPC
- Usage Type
- Fixed Line ISP
- ASN
- AS4808
- Domain Name
- bta.net.cn
- Country
- 🇨🇳 China
- City
- Beijing, Beijing
Abuse Reports
Total reports
72 from
37 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-28 06:39, Last: 2026-10-30 10:52 UTC. Triggers: unknown.
|
Port Scan | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-10-16 11:54, Last: 2026-10-23 08:11 UTC. Triggers: unknown.
|
Port Scan | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Large payload (1457 bytes); 4533 [1] TCP
|
Bad Web Bot | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 20201 [1] TCP
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 58603 [1] TCP
|
Hacking | |
| 🇺🇸 dotnetdork |
SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot.
|
Brute-Force SSH | |
| 🇳🇱 donarev419 |
Connection to port 6502 with data transfer.
Data preview: USER anonymous
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 12297
GET /
Accept: */*; 12297 [1] TCP
|
Web App Attack | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 1521 (Oracle) on a host running no such service. Automated port-scan detection at 2026-10-05T03:03:00Z.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/44400
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 3085
GET /
Accept: */*; 3085 [1] TCP
|
Web App Attack | |
| 🇺🇸 micropedro |
3 incidents: malicious activity. First: 2026-09-29 18:52, Last: 2026-10-02 11:28 UTC. Triggers: unknown.
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 7130 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 9115 [1] TCP
|
Port Scan | |
| 🇺🇸 OceanTreasure |
tcp/2079; Unsolicited SYN to a port that has never been offered on this address (closed, no service ever) @ 2026-09-29T20:01:40Z
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown