AbuseIPDB » 116.139.202.15
116.139.202.15
This IP was reported 7 times. Confidence of
Abuse
is 0% : ?
ISP
China United Network Communications Corporation Limited
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳
China
City
Shenyang, Liaoning
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 116.139.202.15 :
This IP address has been reported a total of
7
times from
6 distinct
sources.
116.139.202.15 was first reported on
March 24th 2021 , and the most recent report was
5 years ago
Old Reports:
The most recent abuse report for this IP address is from
5 years ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
2021-04-11 12:42:20
(5 years ago)
Repeating Hacking Attempt
Brute-Force
🇻🇳
thachpham
2021-04-11 01:45:59
(5 years ago)
(ftpd) Failed FTP login from 116.139.202.15 (CN/China/-): 10 in the last 3600 secs
FTP Brute-Force
Brute-Force
🇳🇱
wlt-blocker
2021-03-24 11:09:46
(5 years ago)
Attempts to login to FTP server with wrong username and/or password
FTP Brute-Force
🇳🇱
EGP Abuse Dept
2021-03-24 09:50:00
(5 years ago)
Unauthorized connection to FTP port 21
Port Scan
Hacking
🇲🇩
iHost
2021-03-24 09:41:09
(5 years ago)
*Port Scan* detected from 116.139.202.15 (CN/China/-). 3 hits in the last 216 seconds; Ports: *; Dir ...
show more
*Port Scan* detected from 116.139.202.15 (CN/China/-). 3 hits in the last 216 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Mar 24 15:41:02 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=116.139.202.15 DST=31.131.1.70 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=51472 DF PROTO=TCP SPT=58350 DPT=1433 WINDOW=64800 RES=0x00 SYN URGP=0
Mar 24 15:41:03 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=116.139.202.15 DST=31.131.1.70 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=51473 DF PROTO=TCP SPT=58350 DPT=1433 WINDOW=64800 RES=0x00 SYN URGP=0
Mar 24 15:41:05 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=116.139.202.15 DST=31.131.1.70 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=51475 DF PROTO=TCP SPT=58350 DPT=1433 WINDOW=64800 RES=0x00 SYN URGP=0
show less
Port Scan
🇲🇩
iHost
2021-03-24 09:08:49
(5 years ago)
*Port Scan* detected from 116.139.202.15 (CN/China/-). 3 hits in the last 80 seconds; Ports: *; Dire ...
show more
*Port Scan* detected from 116.139.202.15 (CN/China/-). 3 hits in the last 80 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Mar 24 15:08:42 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=116.139.202.15 DST=31.131.1.100 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=34151 DF PROTO=TCP SPT=49612 DPT=1433 WINDOW=64800 RES=0x00 SYN URGP=0
Mar 24 15:08:43 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=116.139.202.15 DST=31.131.1.100 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=34152 DF PROTO=TCP SPT=49612 DPT=1433 WINDOW=64800 RES=0x00 SYN URGP=0
Mar 24 15:08:46 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=116.139.202.15 DST=31.131.1.100 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=34153 DF PROTO=TCP SPT=49612 DPT=1433 WINDOW=64800 RES=0x00 SYN URGP=0
show less
Port Scan
🇳🇱
nick
2021-03-24 09:07:08
(5 years ago)
Mar 24 13:06:59 hemera proftpd[19378]: 0.0.0.0 (116.139.202.15[116.139.202.15]) - USER anonymous: no ...
show more
Mar 24 13:06:59 hemera proftpd[19378]: 0.0.0.0 (116.139.202.15[116.139.202.15]) - USER anonymous: no such user found from 116.139.202.15 [116.139.202.15] to 5.2.65.207:21
Mar 24 13:07:02 hemera proftpd[19385]: 0.0.0.0 (116.139.202.15[116.139.202.15]) - USER www: no such user found from 116.139.202.15 [116.139.202.15] to 5.2.65.207:21
Mar 24 13:07:04 hemera proftpd[19400]: 0.0.0.0 (116.139.202.15[116.139.202.15]) - USER ypd: no such user found from 116.139.202.15 [116.139.202.15] to 5.2.65.207:21
Mar 24 13:07:06 hemera proftpd[19407]: 0.0.0.0 (116.139.202.15[116.139.202.15]) - USER www: no such user found from 116.139.202.15 [116.139.202.15] to 5.2.65.207:21
Mar 24 13:07:08 hemera proftpd[19414]: 0.0.0.0 (116.139.202.15[116.139.202.15]) - USER www: no such user found from 116.139.202.15 [116.139.202.15] to 5.2.65.207:21
show less
FTP Brute-Force
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: