42.52.205.201
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- UNICOM Liaoning Province Network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shenyang, Liaoning
Abuse Reports
Total reports
15 from
14 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇸🇪 warriors |
Telnet honeypot observed this address advertised as a potential malware payload host in 24 compromise sessions from 1 source IP. Transfer methods: curl, wget. Observed ports: 34992. Requested paths: /i. Payload hosting was not independently verified.
|
Exploited Host | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 42.52.205.201 to port 23 (ger-02) [TELNET]
|
Exploited Host | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:13920 dst:23
|
Port Scan | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| 🇩🇪 Kejult |
Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.
|
Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:13920 dst:23
|
Port Scan | |
| 🇸🇪 SkyDancer |
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
|
Hacking Brute-Force SSH | |
| 🇺🇸 factor1 |
CrowdSec at atlas Reports Abuse
|
Web App Attack | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇳🇱 StopAbuse |
tcp/23
|
Port Scan Exploited Host | |
| 🇫🇷 Security_Whaller |
Malicious activity detected on Honeypot.
|
Brute-Force Hacking Web App Attack | |
| 🇳🇵 radheykrishna.com.np |
Sep 15 04:54:38 kernel: [3143579.840658] [UFW BLOCK] IN=ens160 OUT= SRC=42.52.205.201 LEN=40 TOS=0x00 PREC=0x20 TTL=49 ID=54802 PROTO=TCP SPT=13920 DPT=23 WINDOW=3449 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown