61.153.252.254
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Yiwu Zhizhidao textile machinery Co.,ltd
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- hz.zj.cn
- Country
- 🇨🇳 China
- City
- Yiwu, Zhejiang
No reports in the last 60 days
61.153.252.254 has been reported 51 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
51 from
3 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) without login credentials
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic on 3306/mysqld
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) with credentials sa:1234asdf!@#$
|
Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) without login credentials
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) with credentials sa:abc@12345
|
Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) with credentials sa:elancer
|
Brute-Force | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/61.153.252.254
|
Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) with credentials sa:123abc@
|
Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) without login credentials
|
Port Scan | |
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-30): ET SCAN Suspicious inbound to MSSQL port 1433. Observed events: 10
|
Port Scan SSH | |
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-29): ET SCAN Suspicious inbound to mySQL port 3306. Observed events: 10
|
Port Scan SSH | |
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-28): ET SCAN Suspicious inbound to mySQL port 3306. Observed events: 10
|
Port Scan SSH | |
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-27): ET SCAN Suspicious inbound to mySQL port 3306. Observed events: 10
|
Port Scan SSH | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) without login credentials
|
Port Scan | |
| 🇮🇳 Varun Ramsisaria |
IPFire IPS Alert (2026-03-26): ET SCAN Suspicious inbound to mySQL port 3306. Observed events: 10
|
Port Scan SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown