58.38.2.74
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Shanghai province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4812
- Domain Name
- online.sh.cn
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
67 from
50 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Mailguard-FRD |
1794707962 - 11/15/2026 02:59:22 Host: 58.38.2.74/58.38.2.74 Port: 445 TCP Blocked
...
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-13 21:57:51 UTC Unauthorized activity to TCP port 1433. SQL
|
Port Scan | |
| 🇰🇷 ian ian |
Unsolicited TCP SYN to closed port(s) 1433 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-13T21:24:22Z UTC, blocked by firewall.
|
Port Scan Hacking | |
| 🇺🇸 RAP |
2026-11-13 18:31:30 UTC Unauthorized activity to TCP port 1433. SQL
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-13 14:23:23 UTC Unauthorized activity to TCP port 1433. SQL
|
Port Scan | |
| 🇫🇷 noi |
honeypot proto=TCP dpt=1433 flags=SYN hits=1 window=1h
|
Port Scan | |
| 🇫🇷 cereal57 |
Unsolicited connection to a honeypot (dionaea, port 445). Automated scan/probe.
|
Port Scan | |
| 🇧🇷 chronos |
MSSQL: Connection attempt to the database service. Port scanning activity detected. | Port: 1433 | Proto: TCP | AS: AS4812 China Telecom (Group) | Location: China, Shanghai (~5km)
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 1433 proto 6 detection dark_ip
|
Port Scan | |
| Anonymous |
Network service scanning detected by FortiGate; source quarantined.
|
Port Scan | |
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇳🇱 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 240 | Len: 44B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-11T23:46:20Z
|
Port Scan Hacking | |
| 🇫🇷 JohnAtlas |
Honeypot: connection attempt to unused port(s) 445/tcp on a server where these services do not exist. Automated firewall trap.
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
|
Port Scan | |
| 🇺🇸 scharsey |
Honeypot: 4 MSSQL events
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown