125.38.12.63
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom Tianjin province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Tianjin, Tianjin
Abuse Reports
Total reports
23 from
10 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 sandra361 |
Port scan detected: 7 packets across 1 port (5000). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=125.38.12.63 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=48980 DF PROTO=TCP SPT=55420 DPT=5000 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 1416 with data transfer.
Data preview: USER anonymous
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/1433
|
Port Scan | |
| 🇭🇰 sandra361 |
Port scan detected: 7 packets across 1 port (12300). | Evidence: REAPER_TARPIT: IN=eth0 SRC=125.38.12.63 LEN=40 TOS=0x14 PREC=0x00 TTL=45 ID=65002 DF PROTO=TCP SPT=57351 DPT=12300 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 12084 [1] TCP
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
VoIP Port Scan proto:UDP src:26808 dst:5060
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 15001.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 9093.
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/125.38.12.63
2025-03-01 20:32:49 /
|
Web App Attack | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/21 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/22222
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown