59.52.102.243

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
39% Elevated
98 reports
31 reporters · latest 1 week ago
ISP
CHINANET Jiangxi province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
online.jx.cn
Country
🇨🇳 China
City
Nanchang, Jiangxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
98 from 31 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 13 🇩🇪 Germany 5 🇭🇰 Hong Kong 2
Most common categories Port Scan 24 Hacking 4 Web App Attack 1 Brute-Force 1 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a honeypot network. destination port 37778.
Port Scan Hacking
🇩🇪 Skyrider
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot Web App Attack
🇳🇱 ByeByte API
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 4911. Single burst at 2026-10-07 05:41 UTC.
Port Scan
🇦🇺 PetePK
Probed 1 time(s): TCP/9320
Port Scan
🇭🇰 sandra361
Port scan detected: 8 attempts across 1 port (21). | Evidence: REAPER_TARPIT: IN=eth0 SRC=59.52.102.243 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=22738 DF PROTO=TCP SPT=37739 DPT=21 WINDOW=29200 RES=0x00 ACK FIN URGP=0
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 3784 [1] TCP
Port Scan
🇺🇸 MPL
tcp/16662 (2 or more attempts)
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:14337 dst:21
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 16993) Source port: 10400 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 59.52.102.243) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇺🇸 xmission.com
Blocked by UFW (TCP on 7999) Source port: 60425 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 59.52.102.243) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 60030) Source port: 33459 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 59.52.102.243) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 OceanTreasure
tcp/8092; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-30T00:52:26Z
Port Scan
🇺🇸 OceanTreasure
tcp/8320; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-28T12:36:28Z
Port Scan
🇺🇸 MPL
tcp/7091
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 185.61.218.231
🇦🇷 181.13.142.66
🇫🇮 104.245.241.37
🇳🇱 77.239.124.130
🇧🇪 35.210.29.187
🇧🇪 35.187.35.191
🇷🇴 2.57.121.112
🇵🇱 172.64.200.26
🇸🇬 47.79.202.10
🇳🇱 45.148.10.141
🇺🇸 40.124.116.122
🇮🇳 203.129.225.146
🇺🇸 172.110.223.182
🇺🇸 172.56.204.151
🇺🇸 98.80.4.58
🇺🇸 50.91.165.60
🇨🇳 36.138.73.51
🇧🇪 35.210.13.125
🇺🇸 34.58.31.23
🇯🇵 216.226.78.30
feedback