116.172.249.21
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China United Network Communications Corporation Limited
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Lhasa, Tibet
Abuse Reports
Total reports
58 from
20 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (10015/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/2118
|
Port Scan | |
| 🇺🇸 MPL |
tcp/12323
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 3004.
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 33444 [1] TCP
|
Port Scan | |
| 🇨🇭 backslash |
block ruleset 39D9DF3582BC0B50B0A9559A2D05D44391E672DC
|
Bad Web Bot | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: FTP Probe (1186/tcp) [non-standard port]
|
FTP Brute-Force Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 5597
GET /
Accept: */*; 5597 [1] TCP
|
Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 5984 [1] TCP
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 5 attempts across 1 port (5566). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=116.172.249.21 LEN=40 TOS=0x00 PREC=0x00 TTL=35 ID=27447 DF PROTO=TCP SPT=8684 DPT=5566 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇺🇸 MPL |
tcp/22222
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 1188
GET /
Accept: */*; 1188 [1] TCP
|
Web App Attack | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 6666.
|
Port Scan | |
| 🇩🇪 femboy.cat |
Port scan to tcp/16030 from 116.172.249.21
|
Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 15038 [1] TCP
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown