61.52.1.72

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
46% Elevated
15 reports
11 reporters · latest 1 week ago
ISP
China Unicom Henan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Zhengzhou, Henan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
15 from 11 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 3 🇺🇸 United States of America 3
Most common categories Port Scan 13 Brute-Force 5 Hacking 3 SSH 2 IoT Targeted 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
Anonymous
Unauthorized access (23/tcp/telnet) Targeted IoT device:Unknown (Probability:High)
Port Scan IoT Targeted
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇩🇪 KPS
PortscanT
Port Scan
🇺🇸 HamSammich
Automated sensor: 53 port 32858, port 32972, port 33478, port 33590, port 35034, port 35124, port 35186, port 35232, port 38994, port 39274, port 40334, port 40414 connection/probe attempts over the last 24h (latest 2026-10-24T00:25Z).
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:18778 dst:23
Port Scan
🇺🇸 HamSammich
Automated sensor: 42 port 32792, port 33346, port 34106, port 34308, port 34712, port 34946, port 37560, port 38360, port 39790, port 39902, port 41772, port 42340 connection/probe attempts over the last 24h (latest 2026-10-22T22:46Z).
Port Scan Brute-Force
🇺🇸 HamSammich
Automated sensor: 2 port 46234, port 59298 connection/probe attempts over the last 24h (latest 2026-10-21T22:58Z).
Port Scan Brute-Force
🇪🇸 raiolanetworks.com
Honeypot detection: SSH/Telnet brute-force. 4 events observed. Reported automatically from a honeypot sensor.
Brute-Force SSH
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:18778 dst:23
Port Scan
Anonymous
Blocked by UFW (TCP on 23) Source port: 18778 TTL: 54 Packet length: 40 TOS: 0x14 This report (for 61.52.1.72) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇩🇪 genokrad
Unauthorized connection attempt on TCP/23 (Telnet)
Port Scan
🇫🇷 uthul
T-Pot honeypot: 279 hits on ports [23] (automated)
Port Scan Brute-Force SSH
🇿🇦 IrisFlower
Unauthorized connection attempt detected from IP address 61.52.1.72 to port 23 [J]
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 204.76.203.40
🇺🇸 193.202.86.208
🇧🇷 181.218.172.74
🇺🇸 172.236.112.138
🇺🇸 89.222.92.0
🇪🇸 46.6.124.199
🇮🇩 43.133.145.83
🇧🇪 35.210.237.229
🇺🇸 3.83.99.96
🇧🇪 198.235.24.147
🇺🇸 195.184.76.20
🇵🇪 190.223.36.108
🇲🇾 180.75.236.110
🇦🇺 170.64.134.89
🇺🇸 162.216.149.46
🇺🇸 152.32.236.116
🇯🇵 139.162.72.202
🇳🇱 109.160.32.162
🇺🇸 103.215.74.112
🇺🇸 65.49.1.122
feedback