182.125.97.28
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom Henan province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Xinxiang, Henan
No reports in the last 60 days
182.125.97.28 has been reported 46 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
46 from
31 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇺🇸 RAP |
2026-08-08 02:27:03 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Aug 8 03:16) SRC=182.125.97.28 LEN=60 TTL=41 ID=63383 DF TCP DPT=23 WINDOW=65535 SYN
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| 🇩🇪 DasDuo |
Attempt on port 23 (Telnet) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp/23 (8 or more attempts)
|
Port Scan | |
| 🇺🇸 RAP |
2026-08-07 21:21:40 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-08-07 21:20:12 | LAST=2026-08-07 21:20:12. Last seen 2026-08-07 21:20:12.
|
Port Scan | |
| Anonymous |
1786097575 - 08/07/2026 12:12:55 Host: 182.125.97.28/182.125.97.28 Port: 23 TCP Blocked
...
|
Port Scan | |
| 🇦🇹 Pingger Shikkoken |
|
Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:5456 dst:23
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (6 or more attempts)
|
Port Scan | |
| 🇩🇪 centurion |
Unauthorized attempt on lab [23/tcp]
Source port: 5474
TTL: 50
Packet length: 60
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan IoT Targeted Brute-Force | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack | |
| 🇺🇸 RAP |
2026-08-07 00:27:01 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown