125.41.6.204

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
22% Elevated
18 reports
9 reporters · latest 1 month ago
ISP
China Unicom Henan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Zhengzhou, Henan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇦🇷 Argentina 1 🇨🇭 Switzerland 1
Most common categories Port Scan 6 Brute-Force 2 Hacking 2 IoT Targeted 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇷 Bruno
Port Scanner: 125.41.6.204
Port Scan
🇩🇪 Kitki30.com
Entered Telnet Tarpit (endlessh, server 2). Log: 2026-10-09T01:09:10.843Z ACCEPT host=::ffff:125.41.6.204 port=59596 fd=12 n=11/4096
IoT Targeted Port Scan Brute-Force
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇺🇸 RAP
2026-10-08 19:06:14 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇨🇭 cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port 23 - sch
Port Scan Hacking
Anonymous
denied Telnet access attempt. destination port 23.
Port Scan Brute-Force
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 125.41.6.204 to port 23 [J]
Port Scan Hacking
🇨🇿 akac
Added into the Abuse.ch URLHaus IOC database by @tammeto for distributing malware with tags: Mozi. Source: https://urlhaus.abuse.ch/url/2435152/
Hacking Exploited Host
🇨🇿 akac
Added into the Abuse.ch URLHaus IOC database by @geenensp for distributing malware with tags: 32-bit, elf, mips, Mozi. Source: https://urlhaus.abuse.ch/url/2434990/
Hacking Exploited Host
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 125.41.6.204 to port 23 [J]
Port Scan Hacking
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 125.41.6.204 to port 23 [J]
Port Scan Hacking
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 125.41.6.204 to port 8080 [J]
Port Scan Hacking
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 125.41.6.204 to port 23 [J]
Port Scan Hacking
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 125.41.6.204 to port 23 [J]
Port Scan Hacking
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 125.41.6.204 to port 23 [J]
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 167.249.241.183
🇬🇧 144.126.233.148
🇰🇷 121.157.136.85
🇮🇳 117.215.247.136
🇨🇦 85.217.149.52
🇷🇴 81.181.129.218
🇺🇸 54.87.23.97
🇳🇱 34.90.74.15
🇺🇸 185.215.221.99
🇺🇸 146.190.48.172
🇨🇦 142.228.231.79
🇧🇷 138.59.233.94
🇫🇮 122.8.45.142
🇿🇦 105.224.222.249
🇵🇰 103.229.253.72
🇩🇪 92.118.13.233
feedback