129.28.29.71

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
24% Elevated
51 reports
30 reporters · latest 1 month ago
ISP
Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS45090
Domain Name
tencentcloud.com
Country
🇨🇳 China
City
Chengdu, Sichuan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
51 from 30 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 8 🇦🇹 Austria 2 🇨🇦 Canada 1
Most common categories Port Scan 9 Brute-Force 4 Open Proxy 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇭🇰 sandra361
Port scan detected: 9 attempts across 1 port (20359). | Evidence: REAPER_TARPIT: IN=eth0 SRC=129.28.29.71 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=1980 DF PROTO=TCP SPT=62090 DPT=20359 WINDOW=0 RES=0x00 RST URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 9 attempts across 1 port (16433). | Evidence: REAPER_TARPIT: IN=eth0 SRC=129.28.29.71 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=61345 DF PROTO=TCP SPT=63556 DPT=16433 WINDOW=65392 RES=0x00 ACK FIN URGP=0
Port Scan
🇭🇰 鹏鹏
monitor: on ser162528253480 | port: 23072 | ttl: 111 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇭🇰 sandra361
Port scan detected: 9 attempts across 1 port (5685). | Evidence: REAPER_TARPIT: IN=eth0 SRC=129.28.29.71 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=23452 DF PROTO=TCP SPT=49643 DPT=5685 WINDOW=65392 RES=0x00 ACK FIN URGP=0
Port Scan
🇸🇬 drewf.ink
[09:57] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as user3:p***3
Open Proxy
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipify.org:443
Open Proxy Port Scan
🇭🇰 sandra361
Port scan detected: 8 attempts across 1 port (23). | Evidence: REAPER_TARPIT: IN=eth0 SRC=129.28.29.71 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=51158 DF PROTO=TCP SPT=56373 DPT=23 WINDOW=0 RES=0x00 RST URGP=0
Port Scan
Anonymous
135/tcp (1 or more attempts)
Port Scan
Anonymous
2691/tcp,2686/tcp,2688/tcp,2685/tcp,2687/tcp,2689/tcp (6 or more attempts)
Port Scan
🇨🇦 smick
Brute-force attack.
Brute-Force
🇦🇹 CTK
Customer Site (WELS SM)
Brute-Force
🇭🇰 CyberFox
5985/tcp (1 or more attempts)
Port Scan
🇨🇳 leonfetter
Dasheng Security: 1 failed logons in 1440 minutes
Brute-Force
🇦🇹 CTK
Customer Site (Grieskirchen FP)
Brute-Force
🇺🇸 drewf.ink
[17:53] Attempted to relay through an open SOCKS5 proxy (CONNECT to api.ipify.org:443), authenticating as bb:**
Open Proxy

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇲 103.83.189.37
🇫🇷 89.116.26.71
🇲🇿 197.158.51.192
🇧🇷 179.48.18.42
🇧🇷 177.136.35.161
🇬🇧 104.194.141.138
🇰🇷 101.33.68.140
🇺🇸 66.153.166.110
🇬🇧 46.101.8.16
🇨🇳 43.137.6.52
🇧🇪 34.52.152.34
🇰🇷 175.213.188.236
🇺🇸 162.216.149.54
🇦🇺 158.173.123.30
🇭🇰 156.225.1.40
🇺🇸 103.203.58.4
🇮🇩 101.128.108.21
🇮🇹 83.224.141.142
🇧🇬 79.124.58.70
🇳🇱 45.148.10.151
feedback