37.0.12.49
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ESTNOC-GLOBAL
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS206804
- Domain Name
- estnoc.ee
- Country
- 🇲🇾 Malaysia
- City
- Johor Bahru, Johor
Abuse Reports
Total reports
21 from
9 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇭🇰 azminawwar |
[37.0.12.49] triggered by honeypot on port [3306], Timestamp [2026-11-11T22:03:42Z](no payload)
|
Port Scan Hacking | |
| 🇸🇬 drewf.ink |
[21:08] Connected to MySQL honeypot
|
Brute-Force Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic on 3306/mysqld
|
Port Scan | |
| 🇺🇸 Kurtbaby |
|
Brute-Force VPN IP Hacking | |
| 🇭🇰 CyberFox |
5432/tcp (1 or more attempts)
|
Port Scan | |
| 🇸🇬 drewf.ink |
[15:47] Connected to PostgreSQL honeypot
|
Brute-Force Hacking | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [5433/tcp]
Source port: 49539
TTL: 55
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇭🇰 sandra361 |
Port scan detected: 11 packets across 1 port (5433). | Evidence: REAPER_TARPIT: IN=eth0 SRC=37.0.12.49 LEN=60 TOS=0x14 PREC=0x00 TTL=55 ID=25913 DF PROTO=TCP SPT=56902 DPT=5433 WINDOW=32485 RES=0x00 ACK PSH URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1472 bytes); 10000 [1] TCP
|
Hacking | |
| 🇭🇰 sandra361 |
Port scan detected: 9 packets across 1 port (7000). | Evidence: REAPER_TARPIT: IN=eth0 SRC=37.0.12.49 LEN=76 TOS=0x14 PREC=0x00 TTL=55 ID=6118 DF PROTO=TCP SPT=55864 DPT=7000 WINDOW=32485 RES=0x00 ACK PSH URGP=0
|
Port Scan | |
| Anonymous |
Blocked by UFW (TCP on 7001)
Source port: 37181
TTL: 48
Packet length: 52
TOS: 0x14
This report (for 37.0.12.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [27018/tcp]
Source port: 43222
TTL: 55
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [2628/tcp]
Source port: 47309
TTL: 55
Packet length: 52
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇸🇬 drewf.ink |
[11:11] Sent Redis command: NONEXISTENT
|
Hacking | |
| 🇭🇰 sandra361 |
Port scan detected: 6 packets across 1 port (9093). | Evidence: REAPER_TARPIT: IN=eth0 SRC=37.0.12.49 LEN=52 TOS=0x14 PREC=0x00 TTL=55 ID=15258 DF PROTO=TCP SPT=40966 DPT=9093 WINDOW=32485 RES=0x00 ACK RST URGP=0
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown