59.52.100.166

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
25% Elevated
83 reports
32 reporters · latest 2 weeks ago
ISP
CHINANET Jiangxi province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
online.jx.cn
Country
🇨🇳 China
City
Nanchang, Jiangxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
83 from 32 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 1 🇫🇷 France 1 🇲🇳 Mongolia 1
Most common categories Hacking 3 Port Scan 2 Bad Web Bot 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 xmission.com
Blocked by UFW (TCP on 64700) Source port: 15323 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 59.52.100.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇳🇱 tr1n
Bad Web Bot
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 2114 GET / Accept: */*; 2114 [1] TCP
Hacking Bad Web Bot
Anonymous
denied traffic to a honeypot network. destination port 14100.
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 9207 [1] TCP
Hacking
🇦🇺 LiftUp Hosting
Honeypot hit: Unauthorized connection attempt detected on 23/TELNET
Hacking Port Scan
🇺🇸 Axel
Blocked by UFW on LAXHH [98/tcp] | SPT: 27989 | TTL: 234 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 9924 [1] TCP
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 2112.
Port Scan Hacking
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-08-29T06:36:16.000Z through 2026-08-29T06:36:16.000Z.
Port Scan
🇮🇩 David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 MPL
tcp/12281 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/15672
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 2080.
Port Scan Hacking
🇩🇪 crnpekgoz
[PortScan] Risk=100 ASN=4134 (portscan) Port=3389 HoneypotTrap=true | Reported by WardenIPS: https://github.com/msncakma/WardenIPS
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 103.159.199.43
🇵🇱 91.246.213.111
🇭🇺 91.219.236.101
🇷🇴 80.94.92.234
🇺🇸 66.132.186.212
🇮🇩 43.157.201.49
🇰🇷 220.116.117.213
🇫🇮 170.168.28.103
🇨🇳 119.45.221.24
🇨🇦 99.236.164.96
🇺🇸 65.49.20.69
🇺🇸 64.62.197.71
🇺🇸 48.216.209.252
🇵🇱 45.138.12.16
🇨🇦 179.194.31.72
🇺🇸 104.131.120.251
🇻🇳 103.176.146.10
🇴🇲 5.37.102.130
🇺🇸 216.198.224.167
🇨🇦 184.148.115.212
feedback