59.52.176.42
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Jiangxi province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- online.jx.cn
- Country
- 🇨🇳 China
- City
- Nanchang, Jiangxi
Abuse Reports
Total reports
76 from
30 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a non-approved destination port. destination port 50001.
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-10 15:39:10 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 MPL |
tcp/51005
|
Port Scan | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [5004/tcp]
Source port: 45655
TTL: 232
Packet length: 44
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 5900 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 12348 [1] TCP
|
Hacking | |
| Anonymous |
Unauthorized connection to SSH port 22
|
Port Scan SSH | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 6005
|
Port Scan Hacking Exploited Host | |
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/59.52.176.42
2026-01-23 13:52:04 /
|
Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 12400 [1] TCP
|
Port Scan | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/59.52.176.42
2025-12-25 19:39:26 /favicon.ico
|
Web App Attack | |
| 🇧🇷 SOC Blue Team |
IPs get by Hunting on SIEM
|
Phishing Web Spam Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown