JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 59.52.103.154

59.52.103.154 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 51%: ?

51%

ISP	CHINANET Jiangxi province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	online.jx.cn
Country	🇨🇳 China
City	Nanchang, Jiangxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 59.52.103.154

Whois 59.52.103.154

IP Abuse Reports for 59.52.103.154:

This IP address has been reported a total of 74 times from 26 distinct sources. 59.52.103.154 was first reported on August 23rd 2022, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Duggy_Tuxy🧱	2026-06-21 04:54:39 (17 hours ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇺🇸 Axel	2026-06-21 04:25:44 (17 hours ago)	Blocked by UFW on LAXHH [9051/tcp] \| SPT: 56256 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9051/tcp] \| SPT: 56256 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-20 06:42:36 (1 day ago)	Blocked by UFW (TCP on 16012) Source port: 64583 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 16012) Source port: 64583 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 59.52.103.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-06-20 04:05:59 (1 day ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇺🇸 Cyber Crusader	2026-06-19 08:47:13 (2 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-06-18 12:43:55 (3 days ago)	Blocked by UFW (TCP on 1443) Source port: 35978 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1443) Source port: 35978 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 59.52.103.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Luhte	2026-06-18 02:02:48 (3 days ago)	Unsolicited TCP connection from 59.52.103.154 to port 0 at 2026-06-18T02:02:48Z. Source IP completed ... show more Unsolicited TCP connection from 59.52.103.154 to port 0 at 2026-06-18T02:02:48Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring. show less	Port Scan Hacking
🇫🇷 Soncraft	2026-06-16 17:47:15 (5 days ago)	Blocked by UFW on Jellyfin [5555/tcp] Source port: 22670 TTL: 238 Packet length: 44 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [5555/tcp] Source port: 22670 TTL: 238 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-16 09:01:40 (5 days ago)	Blocked by UFW on LAXHH [9295/tcp] \| SPT: 37325 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9295/tcp] \| SPT: 37325 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-15 23:18:43 (5 days ago)	59.52.103.154 - - [16/Jun/2026:01:18:40 +0200] "GET /assets/images/icon-vpnweb.ico HTTP/1.1" 404 528 ... show more 59.52.103.154 - - [16/Jun/2026:01:18:40 +0200] "GET /assets/images/icon-vpnweb.ico HTTP/1.1" 404 528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" ... show less	Web App Attack
🇬🇧 PeravixGroup	2026-05-29 06:39:07 (3 weeks ago)	Honeypot detection: OS command injection in HTTP parameters on port 9042. Severity: MEDIUM. Aaran.cl ... show more Honeypot detection: OS command injection in HTTP parameters on port 9042. Severity: MEDIUM. Aaran.cloud show less	Hacking Web App Attack
🇺🇸 MPL	2026-04-21 12:08:50 (2 months ago)	tcp/12226 (2 or more attempts)	Port Scan
🇫🇮 6kilowatti	2026-04-15 06:12:50 (2 months ago)	2026-04-15T09:12:49.518098+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-04-15T09:12:49.518098+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=59.52.103.154 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=23695 PROTO=TCP SPT=47147 DPT=8181 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-04-15 06:09:41 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 xmission.com	2026-04-12 02:27:41 (2 months ago)	Blocked by UFW (TCP on 2182) Source port: 32999 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2182) Source port: 32999 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 59.52.103.154) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.190.24.225

🇩🇪 155.117.127.214

🇨🇳 140.206.195.247

🇺🇸 54.221.167.61

🇷🇺 46.191.197.143

🇺🇸 45.156.129.174

🇩🇪 31.76.100.132

🇺🇸 13.220.229.206

🇨🇱 201.239.180.192

🇺🇸 147.185.132.237

🇺🇸 54.162.73.125

🇱🇹 45.227.254.170

🇧🇷 45.182.16.191

🇺🇸 44.41.27.208

🇺🇸 43.153.13.30

🇮🇳 182.79.86.30

🇺🇸 170.205.30.7

🇲🇦 160.176.77.184

🇹🇼 125.227.245.10

🇮🇳 124.253.225.15