129.28.58.6

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
69% Elevated
25 reports
20 reporters · latest 10 hours ago
ISP
Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS45090
Domain Name
tencentcloud.com
Country
🇨🇳 China
City
Chengdu, Sichuan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇭🇰 Hong Kong 7 🇩🇪 Germany 4 🇺🇸 United States of America 4
Most common categories Port Scan 19 Hacking 8 Brute-Force 5 Web App Attack 1 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 HamSammich
Automated sensor: 2 MSSQL connection/probe attempts over the last 24h (latest 2026-11-08T22:56Z).
Port Scan Hacking
🇺🇸 OceanTreasure
tcp/1433; SCAN Suspicious inbound to MSSQL port 1433 @ 2026-11-07T19:12:56Z
Port Scan
🇺🇸 MPL
tcp/1433
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to MSSQL port 1433
Port Scan Hacking
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇺🇸 donarev419
Connection to port 1433 with data transfer. Data preview: 
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 1433.
Port Scan Hacking
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [GEO] (Database/Cache Attack)
Hacking Brute-Force
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: MSSQL Login Attempt (1433/tcp)
Port Scan Hacking
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇭🇰 sandra361
Port scan detected: 5 attempts across 1 port (24269). | Evidence: REAPER_TARPIT: IN=eth0 SRC=129.28.58.6 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=8508 DF PROTO=TCP SPT=56264 DPT=24269 WINDOW=0 RES=0x00 RST URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 9 attempts across 1 port (19731). | Evidence: REAPER_TARPIT: IN=eth0 SRC=129.28.58.6 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=35463 DF PROTO=TCP SPT=57662 DPT=19731 WINDOW=65535 RES=0x00 ACK FIN URGP=0
Port Scan
🇭🇰 sandra361
Port scan detected: 9 attempts across 1 port (5680). | Evidence: REAPER_TARPIT: IN=eth0 SRC=129.28.58.6 LEN=40 TOS=0x14 PREC=0x00 TTL=112 ID=59629 DF PROTO=TCP SPT=54703 DPT=5680 WINDOW=65535 RES=0x00 ACK FIN URGP=0
Port Scan
🇭🇰 CyberFox
29758/tcp,29760/tcp (2 or more attempts)
Port Scan
🇯🇵 demonsword
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: api.ipify.org:443
Open Proxy Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 220.141.236.33
🇵🇱 188.117.185.155
🇺🇸 138.68.16.163
🇸🇬 67.213.122.211
🇺🇸 34.169.153.94
🇧🇪 34.140.69.197
🇿🇦 4.168.232.22
🇨🇳 220.202.112.35
🇳🇱 195.178.110.30
🇳🇱 193.47.62.69
🇧🇷 179.110.148.10
🇺🇸 172.249.84.45
🇰🇿 147.30.93.27
🇩🇪 134.122.73.1
🇦🇺 120.23.154.149
🇳🇱 109.160.32.127
🇷🇴 92.118.39.77
🇨🇦 85.217.149.13
🇷🇺 82.147.85.103
🇧🇬 79.124.56.254
feedback