14.127.30.93
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Guangdong province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Shenzhen, Guangdong
Abuse Reports
Total reports
76 from
68 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 benjensen |
SSH honeypot — automated credential stuffing and scanning detected by Cowrie honeypot
|
Brute-Force SSH | |
| 🇬🇧 Spriing Master |
Fail2Ban sshd: repeated failed or abusive connections
|
Brute-Force SSH | |
| 🇫🇮 teohumble1 |
TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["ssh-bruteforce". Unsolicited attack on a decoy host.
|
Port Scan | |
| 🇩🇪 jjjjj |
|
Brute-Force SSH | |
| 🇺🇸 IndigoRidge |
Knock-Knock SSH honeypot activity; time=2026-11-15 05:52:11; username=root
|
Brute-Force SSH | |
| 🇬🇧 Dario MB |
|
Brute-Force SSH | |
| 🇨🇭 ale |
SSH auth scanning - multiple failed logins
|
Brute-Force SSH | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: SSH (1 total hits)
|
Brute-Force SSH | |
| 🇫🇷 uthul |
T-Pot honeypot: 11 hits on ports [22] (automated)
|
Port Scan Brute-Force SSH | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/ssh-bf - events: 6
|
SSH Brute-Force | |
| 🇫🇮 vereinshosting |
Invalid user dev from 14.127.30.93 port 11013
|
Brute-Force SSH | |
| 🇦🇹 Pingger Shikkoken |
|
Hacking Brute-Force SSH | |
| 🇧🇷 helix |
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
|
Brute-Force SSH | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇰🇷 2048 |
SSH authentication attempts on edge02 (port 22)
Credential Samples (ID:PW): root:qweQWE123!@#
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown