JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.140.30.26

116.140.30.26 was found in our database!

This IP was reported 889 times. Confidence of Abuse is 85%: ?

85%

ISP	China United Network Communications Corporation Limited
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.140.30.26

Whois 116.140.30.26

IP Abuse Reports for 116.140.30.26:

This IP address has been reported a total of 889 times from 122 distinct sources. 116.140.30.26 was first reported on December 28th 2022, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 kalaukan	2026-08-21 02:48:05 (15 hours ago)	Honeypot observed 490 unauthorized events; sensors=OpenCanary; destination_ports=1433; observation_w ... show more Honeypot observed 490 unauthorized events; sensors=OpenCanary; destination_ports=1433; observation_window=2026-08-21T02:48:05.856125+00:00..2026-08-21T02:53:18.342790+00:00. show less	Port Scan
🇺🇸 micropedro	2026-08-20 10:38:12 (1 day ago)	3 incidents: database attack (MSSQL/MySQL). First: 2026-06-27 04:53, Last: 2026-08-20 06:38 UTC. Tri ... show more 3 incidents: database attack (MSSQL/MySQL). First: 2026-06-27 04:53, Last: 2026-08-20 06:38 UTC. Triggers: non-public-port,firewall-database,unknown. show less	Port Scan Hacking
Anonymous	2026-08-19 23:19:02 (1 day ago)	Repeated unauthorized connection attempts to restricted service observed.	Port Scan Hacking SQL Injection Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-19 07:42:37 (2 days ago)	Blocked by UFW (TCP on 1433) Source port: 63048 TTL: 114 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 63048 TTL: 114 Packet length: 52 TOS: 0x08 This report (for 116.140.30.26) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Honeypot-EU-Fru	2026-08-18 23:54:19 (2 days ago)	1787097258 - 08/19/2026 01:54:18 Host: 116.140.30.26/116.140.30.26 Port: 1433 TCP Blocked ...	Port Scan
🇦🇪 abusiveIntelligence	2026-08-18 01:40:00 (3 days ago)	Microsoft SQL Server Authentication Brute-force Attempt	Brute-Force
🇨🇦 celestialcity	2026-08-15 04:34:02 (6 days ago)	Blocked by UFW on celestialcityna [1433/tcp] \| SPT: 61940 \| TTL: 103 \| LEN: 52 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityna [1433/tcp] \| SPT: 61940 \| TTL: 103 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 diego	2026-08-14 09:20:12 (1 week ago)	[rede-164-29] 08/14/2026-06:20:12.332068, 116.140.30.26, Protocol: 6, ET SCAN Suspicious inbound to ... show more [rede-164-29] 08/14/2026-06:20:12.332068, 116.140.30.26, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
🇵🇱 sefinek.net	2026-08-13 00:04:37 (1 week ago)	Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefi ... show more Honeypot hit: MSSQL traffic (on 1433) without login credentials Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇧🇷 diego	2026-08-12 03:26:14 (1 week ago)	[rede-44-49] 08/12/2026-00:26:14.167582, 116.140.30.26, Protocol: 6, ET SCAN Suspicious inbound to M ... show more [rede-44-49] 08/12/2026-00:26:14.167582, 116.140.30.26, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433 show less	Hacking
Anonymous	2026-08-09 07:56:47 (1 week ago)	RdpGuard detected brute-force attempt on MS-SQL	Brute-Force
🇺🇸 xmission.com	2026-08-08 09:30:45 (1 week ago)	Blocked by UFW (TCP on 1433) Source port: 62281 TTL: 114 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 62281 TTL: 114 Packet length: 52 TOS: 0x08 This report (for 116.140.30.26) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 HostFission	2026-08-07 06:42:46 (2 weeks ago)	PSAD port scan detected	Port Scan
🇺🇸 xmission.com	2026-08-07 01:02:38 (2 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 60480 TTL: 114 Packet length: 52 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 60480 TTL: 114 Packet length: 52 TOS: 0x08 This report (for 116.140.30.26) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 EvoX	2026-08-03 05:56:53 (2 weeks ago)	🛡️ Honeypot [bsts-tpot-hive]: MSSQL protocol traffic (dst port 1433/tcp, src port 60945) against a p ... show more 🛡️ Honeypot [bsts-tpot-hive]: MSSQL protocol traffic (dst port 1433/tcp, src port 60945) against a passive decoy database service, no login credentials supplied. Consistent with service fingerprinting/scanning. show less	Port Scan

Showing 1 to 15 of 889 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.195.110

🇹🇼 59.126.0.81

🇺🇸 34.68.26.0

🇧🇷 205.210.31.244

🇧🇷 205.210.31.223

🇦🇷 186.128.168.77

🇺🇸 172.238.188.122

🇻🇳 171.231.188.81

🇧🇬 79.124.62.230

🇱🇺 64.89.160.201

🇯🇵 34.97.178.238

🇸🇪 4.223.171.219

🇺🇸 2607:f8b0:400e:c07::12e

🇩🇪 167.94.145.18

🇸🇬 101.47.156.21

🇩🇪 95.85.226.199

🇩🇪 51.75.146.215

🇳🇱 31.14.32.7

🇨🇳 27.11.198.89

🇦🇷 200.69.35.17