116.172.248.129

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
41 reports
22 reporters · latest 17 hours ago
ISP
China United Network Communications Corporation Limited
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Lhasa, Tibet
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 1 🇲🇳 Mongolia 1 🇳🇱 Netherlands 1
Most common categories Bad Web Bot 3 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 sefinek.net
Honeypot hit: Large payload (1457 bytes); 9971 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 20061 [1] TCP
Port Scan
🇳🇱 Maurice
Honeypot hit: Large payload (1457 bytes); 1952 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Bad Web Bot
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Large payload (1457 bytes); 1717 [1] TCP
Bad Web Bot
🇳🇱 donarev419
Connection to port 8567 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155:8567 Accept: */*
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 9042.
Port Scan Hacking
🇺🇸 donarev419
Connection to port 10286 with data transfer. Data preview: �
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 6007.
Port Scan Hacking
🇮🇩 David Koswari
REQ_BLOCKED_ACL
DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇩🇪 _ArminS_
SP-Scan 22473:49156 detected 2026.07.09 12:55:30 blocked until 2026.08.28 05:58:17
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇫🇷 Sklurk
Web App Attack
Web App Attack
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 136.70.38.83
🇨🇳 122.14.226.61
🇰🇭 103.118.46.156
🇧🇩 103.41.245.221
🇳🇱 91.226.227.109
🇳🇱 77.239.124.64
🇳🇱 77.67.26.174
🇳🇱 35.204.169.220
🇺🇸 3.216.86.144
🇳🇱 195.178.110.232
🇹🇷 185.231.227.89
🇷🇺 185.90.101.64
🇺🇸 69.253.41.36
🇺🇸 45.79.207.111
🇳🇱 35.204.214.111
🇺🇸 212.87.219.98
🇺🇸 205.210.31.81
🇷🇺 154.83.196.237
🇨🇳 112.86.156.251
🇬🇧 92.16.241.159
feedback