58.252.229.107
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Guangdong province network
- Usage Type
- Fixed Line ISP
- ASN
- AS17816
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Sanzao, Guangdong
Abuse Reports
Total reports
24 from
23 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 3rdKey |
OpenCanary honeypot hit on port 1433 (no legitimate service runs there); logtype 9001. Automated report.
|
Port Scan Hacking | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 113 | Len: 52B | Win: 64240(1) | F2B/ufw-honeypot@2026-10-26T11:36:59Z
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: credential brute-force against MSSQL on TCP/1433; 3 authentication events observed across 3 source port(s); target port(s): 1433.
|
Brute-Force | |
| 🇺🇸 azminawwar |
[58.252.229.107] triggered by honeypot on port [1433], Timestamp [2026-08-12T20:31:27Z](no payload)
|
Port Scan Hacking | |
| 🇨🇦 Arpan Sen |
Network port/address scan: probed 1 distinct port(s) across 12 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 1433
|
Port Scan Hacking Exploited Host | |
| 🇵🇱 sefinek.net |
Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Brute-Force | |
| 🇩🇪 DasDuo |
Attempt on port 1433 (MSSQL) - potential unauthorized database access attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
|
Port Scan Hacking Exploited Host | |
| 🇫🇷 Hiigara |
connection attempt : 58.252.229.107 on port : tcp/1433 (MSSQL)
|
Port Scan | |
| 🇳🇱 StopAbuse |
tcp/1433
|
Port Scan | |
| 🇫🇮 iamxorum |
|
Port Scan | |
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 24105
TTL: 113
Packet length: 52
TOS: 0x0A
This report (for 58.252.229.107) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| 🇺🇸 drewf.ink |
[15:31] Port scanning. Port(s) scanned: TCP/1433
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown