JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 219.130.135.122

219.130.135.122 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 100%: ?

100%

ISP	JIANGMEN HUAYUAN TRAINING CENTER
Usage Type	Fixed Line ISP
ASN	AS136199
Domain Name	gddc.com.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 219.130.135.122

Whois 219.130.135.122

IP Abuse Reports for 219.130.135.122:

This IP address has been reported a total of 41 times from 26 distinct sources. 219.130.135.122 was first reported on July 7th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 dyln	2026-07-25 13:05:24 (20 hours ago)	Dyls honeypot brute-force: SMB (2 total hits)	Brute-Force
🇺🇸 drewf.ink	2026-07-25 05:03:42 (1 day ago)	[05:03] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): PC NETWORK PROGRAM 1.0, LANMAN1.0, ... show more [05:03] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): PC NETWORK PROGRAM 1.0, LANMAN1.0, Windows for Workgroups 3.1a, LM1.2X002, LANMAN2.1, NT LM 0.12 show less	Hacking Exploited Host
Anonymous	2026-07-23 16:01:43 (2 days ago)	2026-07-23T18:01:42.340011+02:00 vps kernel: [1193358.927620] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-07-23T18:01:42.340011+02:00 vps kernel: [1193358.927620] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=219.130.135.122 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=108 ID=31140 DF PROTO=TCP SPT=61011 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 sthoyer.de	2026-07-23 14:00:54 (2 days ago)	Jul 23 16:00:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 23 16:00:53 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=219.130.135.122 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=6691 DF PROTO=TCP SPT=59322 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 Little Iguana	2026-07-23 13:58:56 (2 days ago)	trying to access non-authorized port	Port Scan
🇫🇷 Entalpi.net	2026-07-23 01:32:55 (3 days ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇫🇷 EvoX	2026-07-23 00:10:28 (3 days ago)	🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 58206) to a pas ... show more 🛡️ Honeypot [bsts-tpot-hive]: Unsolicited SMB connection (dst port 445/tcp, src port 58206) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities). show less	Hacking
🇫🇷 thecocasio	2026-07-22 01:26:27 (4 days ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-07-22T01:26:27Z. show less	Port Scan
Anonymous	2026-07-21 02:13:11 (5 days ago)	Unauthorized access (445/tcp/microsoft-ds)	Port Scan
🇺🇸 cwytech	2026-07-20 17:59:10 (5 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/global-exclusion-high.	Hacking
🇫🇷 sthoyer.de	2026-07-20 03:11:58 (6 days ago)	Jul 20 05:11:57 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 20 05:11:57 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=219.130.135.122 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=22232 DF PROTO=TCP SPT=54947 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 drewf.ink	2026-07-19 22:33:00 (6 days ago)	[22:33] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1. ... show more [22:33] Triggered SMB honeypot. Type: NetBIOS + SMB1. Dialect(s): LANMAN1.0, LM1.2X002, NT LANMAN 1.0, NT LM 0.12 show less	Hacking Exploited Host
🇫🇷 sthoyer.de	2026-07-19 21:11:19 (6 days ago)	Jul 19 23:11:17 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 19 23:11:17 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=219.130.135.122 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=18163 DF PROTO=TCP SPT=6898 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 sthoyer.de	2026-07-19 20:10:23 (6 days ago)	Jul 19 22:10:22 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 19 22:10:22 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=219.130.135.122 DST=173.212.223.67 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=7032 DF PROTO=TCP SPT=61565 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 geeek	2026-07-19 18:43:31 (6 days ago)	Port scanning: 445 TCP Blocked	Port Scan

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.180.141.9

🇺🇸 162.216.150.107

🇸🇬 103.13.207.88

🇷🇺 91.146.24.164

🇸🇬 172.217.97.27

🇺🇸 170.106.140.110

🇨🇳 123.145.5.139

🇺🇸 107.2.22.2

🇺🇸 100.26.102.117

🇭🇺 89.134.194.9

🇫🇮 80.223.167.240

🇳🇱 77.239.124.250

🇺🇸 35.245.88.20

🇺🇸 20.168.121.119

🇨🇳 14.111.106.124

🇺🇸 4.227.177.11

🇩🇪 4.184.121.217

🇶🇦 2600:1900:4260:40e::129

🇮🇳 182.79.218.101

🇸🇬 172.253.211.94