59.52.103.89
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET Jiangxi province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- online.jx.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
81 from
35 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 4190 [1] TCP
|
Hacking | |
| Anonymous |
denied traffic to a honeypot network. destination port 11211.
|
Port Scan Hacking | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 7 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2128)
Source port: 48109
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 59.52.103.89) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| Anonymous |
Reported by RattusGuard: Honeypot: docker emulator (port 2376/tcp)
|
Port Scan Hacking | |
| 🇺🇸 sandra361 |
Port scan detected: 5 attempts across 1 port (10080). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=59.52.103.89 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=46917 DF PROTO=TCP SPT=19238 DPT=10080 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 2348.
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 100 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/2798
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 1031.
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/5601
|
Port Scan | |
| 🇺🇸 MPL |
tcp/6379 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/10801 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1947 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown