116.172.201.3
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China United Network Communications Corporation Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Lhasa, Tibet
Abuse Reports
Total reports
38 from
16 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a honeypot network. destination port 1066.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2049.
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 5701.
|
Port Scan Hacking | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 8085.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 10000 [1] TCP
|
Port Scan | |
| 🇺🇸 MPL |
tcp/20440
|
Port Scan | |
| Anonymous |
...
|
Bad Web Bot | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 14905
GET /
Accept: */*; 14905 [1] TCP
|
Web App Attack | |
| 🇺🇸 donarev419 |
Connection to port 5988 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| 🇫🇷 TheHoneyPotter |
Honeypot [fc-honeypot]: Large payload (1457 bytes); 3522 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Bad Web Bot | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| 🇬🇧 PeravixGroup |
Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud
|
DDoS Attack Hacking | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| Anonymous |
PROTO=TCP DPT=12211
|
Port Scan Hacking | |
| Anonymous |
Unauthorized connection attempt
|
Port Scan Hacking Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown