59.52.102.85

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
21% Elevated
70 reports
23 reporters · latest 1 week ago
ISP
CHINANET Jiangxi province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
online.jx.cn
Country
🇨🇳 China
City
Nanchang, Jiangxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
70 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇺🇸 United States of America 2 🇹🇷 Turkey 1
Most common categories Port Scan 4 Hacking 2 Exploited Host 1 FTP Brute-Force 1 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a honeypot network. destination port 2228.
Port Scan Hacking
🇺🇸 1gz
Bad Web Bot
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: FTP Probe (1024/tcp) [non-standard port]
FTP Brute-Force Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 8009
Port Scan Hacking Exploited Host
Anonymous
denied traffic to a non-approved destination port. destination port 3306.
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 5236 [1] TCP
Hacking
🇺🇸 MPL
tcp/60021
Port Scan
🇺🇸 Axel
Blocked by UFW on LAXHH [53/tcp] | SPT: 20612 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇮 6kilowatti
Port Scan
Anonymous
Honeypot hit: Unauthorized traffic (4 bytes of payload); 9000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇺🇸 donarev419
Connection to port 8030 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:8030 Accept: */*
Port Scan Hacking
🇬🇧 PeravixGroup
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇺🇸 MPL
tcp/7000 (2 or more attempts)
Port Scan
🇩🇪 Justin F. | AS204464
Honeypot [nx-infrastructure]: Empty payload (likely service probe); 5342 [1] TCP Reported by: Justin F.
Port Scan
🇩🇪 Justin F. | AS204464
Honeypot [nx-infrastructure]: HTTP/1.1 request on 9191 GET / Accept: */*; 9191 [1] TCP Reported by: Justin F.
Hacking Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 203.159.90.15
🇪🇹 196.191.142.67
🇳🇱 195.178.110.149
🇺🇸 193.36.224.175
🇺🇸 193.36.224.160
🇺🇸 162.216.149.123
🇦🇺 101.0.105.22
🇳🇱 64.205.72.7
🇨🇿 46.135.45.59
🇧🇪 35.210.6.222
🇵🇭 202.69.171.60
🇺🇸 193.36.224.181
🇳🇱 185.223.235.51
🇩🇪 154.195.120.33
🇰🇷 112.187.204.188
🇵🇭 64.81.72.109
🇸🇬 47.79.126.65
🇳🇱 45.82.66.90
🇺🇸 20.168.116.252
🇺🇸 209.159.223.165
feedback