116.172.248.2

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
16% Caution
52 reports
23 reporters · latest 2 weeks ago
ISP
China United Network Communications Corporation Limited
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Lhasa, Tibet
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
52 from 23 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇲🇳 Mongolia 1 🇹🇷 Turkey 1
Most common categories Port Scan 3 Hacking 1 Web App Attack 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (10122/tcp) [non-standard port]
Web App Attack
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 6501 [1] TCP
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 9333.
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 2000.
Port Scan
🇳🇱 overture.bar
Blocked by UFW on NsmallFE [13666/tcp] | SPT: 38226 | TTL: 231 | LEN: 44 | TOS: 0x00
Port Scan
🇺🇸 donarev419
Connection to port 7065 with data transfer. Data preview: �
Port Scan Hacking
🇩🇪 dispaisyenterprises
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 10000 GET / Accept: */*; 10000 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Hacking Bad Web Bot
Anonymous
denied traffic to a honeypot network. destination port 16102.
Port Scan Hacking
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 1998 [1] TCP
Port Scan
🇺🇸 donarev419
Connection to port 9998 with data transfer. Data preview: GET / HTTP/1.1 Host: 107.175.212.44:9998 Accept: */*
Port Scan Hacking
🇺🇸 NXTwoThou
POP3
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 1338 [1] TCP
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇪 212.129.78.253
🇲🇳 202.70.37.20
🇦🇷 181.174.139.42
🇺🇸 142.173.166.74
🇨🇳 58.23.76.57
🇲🇾 49.124.155.176
🇲🇾 49.124.151.81
🇳🇱 45.148.10.157
🇺🇸 35.237.94.18
🇺🇸 206.189.203.70
🇨🇱 201.186.252.81
🇭🇳 181.115.59.232
🇵🇪 179.6.161.160
🇺🇸 173.61.180.94
🇩🇪 167.94.146.55
🇩🇪 165.227.144.7
🇩🇰 154.14.31.34
🇩🇪 150.241.115.69
🇺🇸 147.185.132.88
🇺🇸 147.78.180.12
feedback