JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 60.13.6.252

60.13.6.252 was found in our database!

This IP was reported 202 times. Confidence of Abuse is 30%: ?

30%

ISP	China Unicom Gansu province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Lanzhou, Gansu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 60.13.6.252

Whois 60.13.6.252

IP Abuse Reports for 60.13.6.252:

This IP address has been reported a total of 202 times from 59 distinct sources. 60.13.6.252 was first reported on January 7th 2021, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-06-24 17:23:52 (2 days ago)	Blocked by UFW (TCP on 1989) Source port: 50631 TTL: 233 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1989) Source port: 50631 TTL: 233 Packet length: 44 TOS: 0x00 This report (for 60.13.6.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-22 09:31:58 (4 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-08 20:06:05 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-30 15:51:38 (3 weeks ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-29 19:27:38 (4 weeks ago)	Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. A ... show more Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud show less	DDoS Attack Hacking
🇫🇷 centurion	2026-05-28 18:24:05 (4 weeks ago)	Blocked by UFW on dc00 [8880/tcp] Source port: 22849 TTL: 236 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on dc00 [8880/tcp] Source port: 22849 TTL: 236 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-05-27 18:55:56 (4 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-05-27 17:26:42 (4 weeks ago)	tcp/2078 (3 or more attempts)	Port Scan
Anonymous	2026-04-22 02:02:02 (2 months ago)	Port Scanner	Port Scan
🇺🇸 LSPCCU	2026-04-20 02:27:01 (2 months ago)	TSEC Honeypot Network report. Threat score: 60/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 60/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 60. show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇸🇪 donarev419	2026-04-20 00:23:56 (2 months ago)	Connection to port 18852 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:18852 ... show more Connection to port 18852 with data transfer. Data preview: GET / HTTP/1.1 Host: 51.21.134.169:18852 Accept: / show less	Port Scan Hacking
🇺🇸 MPL	2026-04-14 22:56:44 (2 months ago)	tcp/6379	Port Scan
🇺🇸 MPL	2026-04-14 16:41:40 (2 months ago)	tcp/11211 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-04-14 09:07:38 (2 months ago)	Blocked by UFW (TCP on 12281) Source port: 48862 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 12281) Source port: 48862 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 60.13.6.252) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-04-11 01:57:43 (2 months ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 1102 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 1102 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 202 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 103.143.239.193

🇵🇰 103.72.1.183

🇺🇸 40.119.24.130

🇬🇧 2a06:4884:5000::69

🇳🇱 195.178.110.232

🇧🇷 187.45.117.131

🇺🇸 66.132.186.223

🇪🇸 45.134.91.146

🇧🇷 38.196.177.41

🇬🇧 35.203.211.242

🇧🇪 34.34.178.22

🇰🇷 14.32.231.200

🇷🇴 2.57.121.25

🇮🇳 223.228.151.58

🇺🇸 216.25.89.83

🇲🇽 187.191.48.4

🇲🇾 160.187.211.96

🇵🇰 160.187.180.175

🇺🇦 159.224.67.241

🇵🇱 144.31.0.90