AbuseIPDB » 202.117.56.252

202.117.56.252 was found in our database!

This IP was reported 179 times. Confidence of Abuse is 100%: ?

100%
ISP China Education and Research Network
Usage Type University/College/School
ASN AS4538
Hostname(s) 0h.xjtu.edu.cn
Domain Name cernet.edu.cn
Country ๐Ÿ‡จ๐Ÿ‡ณ China
City Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 202.117.56.252:

This IP address has been reported a total of 179 times from 96 distinct sources. 202.117.56.252 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=50851 dstport=8080
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช andorin
Port Scan Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ drewf.ink
[03:11] Attempted telnet login on port 23 with username 
Brute-Force Exploited Host
๐Ÿ‡ฉ๐Ÿ‡ช zupan
Port Scan IoT Targeted
๐Ÿ‡ฌ๐Ÿ‡ง knock
Knock-Knock honeypot brute-force: Telnet (216 total hits)
Brute-Force
๐Ÿ‡ง๐Ÿ‡ช sauron-le-noir
scan port : 23 from Chine at Fri Jun 19 03:08:27 2026
Port Scan
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-06-19 00:59:48 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=35317 dstport=2323
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ ShadowWhisperer
TELNET credential attempt.
Brute-Force IoT Targeted
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ VMHeaven.io
Blocked by UFW [52869/tcp] Source port: 49571 TTL: 42 Packet length: 40
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท TheHoneyPotter
Hacking Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-06-18 21:40:52 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/23 (3 or more attempts)
Port Scan

Showing 1 to 15 of 179 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡จ๐Ÿ‡ณ 183.233.85.194
๐Ÿ‡จ๐Ÿ‡ณ 180.102.110.167
๐Ÿ‡ฉ๐Ÿ‡ช 47.245.135.164
๐Ÿ‡ฌ๐Ÿ‡ง 35.203.211.176
๐Ÿ‡ฉ๐Ÿ‡ช 2.27.20.149
๐Ÿ‡บ๐Ÿ‡ธ 2001:470:2cc:1::29d
๐Ÿ‡ง๐Ÿ‡ท 205.210.31.236
๐Ÿ‡จ๐Ÿ‡ฑ 200.89.69.247
๐Ÿ‡ณ๐Ÿ‡ฑ 185.223.235.21
๐Ÿ‡ฎ๐Ÿ‡ณ 182.79.218.164
๐Ÿ‡จ๐Ÿ‡ณ 175.175.154.87
๐Ÿ‡บ๐Ÿ‡ธ 154.3.224.218
๐Ÿ‡จ๐Ÿ‡ณ 139.170.73.54
๐Ÿ‡จ๐Ÿ‡ณ 129.211.218.71
๐Ÿ‡ญ๐Ÿ‡ฐ 124.156.138.249
๐Ÿ‡จ๐Ÿ‡ณ 120.48.124.81
๐Ÿ‡บ๐Ÿ‡ธ 104.21.35.98
๐Ÿ‡จ๐Ÿ‡ณ 101.52.130.122
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.236