59.52.100.6
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Jiangxi province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- online.jx.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
94 from
34 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 9247
GET /
Accept: */*; 9247 [1] TCP
|
Web App Attack | |
| 🇺🇸 SX Communications |
Blocked abusive HTTP application-layer DoS / botnet traffic from 59.52.100.6: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇮🇩 securejdprop |
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET CINS Active Threat Intelligence Poor Reputation IP group 117).
|
Hacking Web App Attack | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2535.
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (10019/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 8085 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to Oracle SQL port 1521) detectado de 59.52.100.6
|
Port Scan Brute-Force SSH | |
| 🇺🇸 sandra361 |
Port scan detected: 5 attempts across 1 port (10193). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=59.52.100.6 LEN=40 TOS=0x00 PREC=0x00 TTL=38 ID=24177 DF PROTO=TCP SPT=16020 DPT=10193 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 12137 [1] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/88 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/13228 (2 or more attempts)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 6667.
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [6009/tcp] | SPT: 58512 | TTL: 236 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/27017
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown