116.148.95.25

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
44% Elevated
21 reports
9 reporters ยท latest 16 hours ago
ISP
China United Network Communications Corporation Limited
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
๐Ÿ‡จ๐Ÿ‡ณ China
City
Hangzhou, Zhejiang
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 9 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 2 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 2 ๐Ÿ‡ฒ๐Ÿ‡ณ Mongolia 1
Most common categories Port Scan 6 Hacking 3 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช EGP Abuse Dept
Scanning for port/service exploits on tpc-052.mach3builders.nl
Port Scan Hacking
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 8870 [1] TCP
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ sumnone
Port probing on unauthorized port 12409
Port Scan Hacking Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 10133) Source port: 27113 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 116.148.95.25) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (27777/tcp) [non-standard port]
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 211.
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
๐Ÿ‡ง๐Ÿ‡พ StatsMe
2025-11-04T12:16:45.532381+0300 ET SCAN NMAP -sS window 1024
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
๐Ÿ‡ง๐Ÿ‡พ StatsMe
2025-10-06T00:46:07.063740+0300 GPL DNS named version attempt
Hacking Exploited Host Web App Attack
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ ipblock.com
IPBlock protected site ID [4055-d][s=06]. Exploit request, vulnerability scanner.
Hacking Bad Web Bot Web App Attack
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/554 (2 or more attempts)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ต๐Ÿ‡ฑ 176.53.159.199
๐Ÿ‡ฒ๐Ÿ‡ฝ 187.235.67.234
๐Ÿ‡ณ๐Ÿ‡ฑ 172.211.56.214
๐Ÿ‡จ๐Ÿ‡ณ 113.108.144.34
๐Ÿ‡ฉ๐Ÿ‡ช 109.160.32.115
๐Ÿ‡บ๐Ÿ‡ธ 72.63.209.202
๐Ÿ‡ฎ๐Ÿ‡ณ 59.179.31.238
๐Ÿ‡ฐ๐Ÿ‡ท 43.108.80.78
๐Ÿ‡ง๐Ÿ‡ท 16.5.0.204
๐Ÿ‡บ๐Ÿ‡ธ 4.150.201.26
๐Ÿ‡ง๐Ÿ‡ท 201.33.169.180
๐Ÿ‡จ๐Ÿ‡ด 186.148.179.45
๐Ÿ‡บ๐Ÿ‡ธ 107.150.105.153
๐Ÿ‡ซ๐Ÿ‡ท 85.217.140.22
๐Ÿ‡บ๐Ÿ‡ธ 74.7.175.135
๐Ÿ‡ฌ๐Ÿ‡ง 5.226.140.38
๐Ÿ‡ฆ๐Ÿ‡ช 5.107.223.233
๐Ÿ‡ฎ๐Ÿ‡ณ 122.174.141.222
๐Ÿ‡บ๐Ÿ‡ธ 103.143.231.24
๐Ÿ‡บ๐Ÿ‡ธ 83.142.52.170