JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.196.122.207

116.196.122.207

Neutral Activity

76 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Beijing Jingdong 360 Degree E-commerce Co., Ltd.

Usage Type

Fixed Line ISP

ASN

AS23724

Domain Name

jd.com

Country

🇨🇳 China

City

Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

116.196.122.207 has been reported 76 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 116.196.122.207:

This IP address has been reported a total of 76 times from 45 distinct sources. 116.196.122.207 was first reported on March 10th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ISPLtd	2023-04-02 12:13:28 (3 years ago)	Apr 2 09:13:24 SRC=116.196.122.207 PROTO=TCP SPT=39270 DPT=81 SYN Apr 2 09:13:26 SRC=116.196.122.2 ... show more Apr 2 09:13:24 SRC=116.196.122.207 PROTO=TCP SPT=39270 DPT=81 SYN Apr 2 09:13:26 SRC=116.196.122.207 PROTO=TCP SPT=38092 DPT=8000 SYN Apr 2 09:13:27 SRC=116.196.122.207 PROTO=TCP SPT=38092 DPT=8000 ... show less	Port Scan
🇹🇭 Sawasdee	2023-04-02 12:09:14 (3 years ago)	Port Scan ...	Port Scan
🇭🇺 DumaNet	2023-04-02 06:19:05 (3 years ago)	Blocked for port scanning. Time: Sun Apr 2. 06:50:52 2023 +0200 IP: 116.196.122.207 (CN/China/-) ... show more Blocked for port scanning. Time: Sun Apr 2. 06:50:52 2023 +0200 IP: 116.196.122.207 (CN/China/-) Sample of block hits: Apr 2 06:50:35 iron kernel: [5597093.444099] Firewall: TCP_IN Blocked IN=ens3 OUT= MAC= SRC=116.196.122.207 DST=[removed] LEN=60 TOS=0x08 PREC=0x20 TTL=39 ID=54472 DF PROTO=TCP SPT=51878 DPT=81 WINDOW=28200 RES=0x00 SYN URGP=0 Apr 2 06:50:35 iron kernel: [5597093.574302] Firewall: TCP_IN Blocked IN=ens3 OUT= MAC= SRC=116.196.122.207 DST=[removed] LEN=60 TOS=0x08 PREC=0x20 TTL=39 ID=29467 DF PROTO=TCP SPT=36578 DPT=3000 WINDOW=28200 RES=0x00 SYN URGP=0 Apr 2 06:50:36 iron kernel: [5597094.564017] Firewall: TCP_IN Blocked IN=ens3 OUT= MAC= SRC=116.196.122.207 DST=[removed] LEN=60 TOS=0x08 PREC=0x20 TTL=39 ID=5610 DF PROTO=TCP SPT=56866 DPT=8000 WINDOW=28200 RES=0x00 SYN URGP=0 Apr 2 06:50:37 iron kernel: [5597095.566310] Firewall: TCP_IN Blocked IN=ens3 OUT= MAC= SRC=116.196.122.207 DST=[removed] LEN=60 TOS=0x08 PREC=0x20 TTL=39 ID=5611 DF PROTO=TCP SPT=56866 DPT=8000 WINDOW show less	Port Scan
🇨🇳 ThreatBook.io	2023-04-02 00:09:04 (3 years ago)	ThreatBook Intelligence: IDC,Spam more details on https://threatbook.io/ip/116.196.122.207	Web App Attack
🇸🇪 mr_whitehat	2023-04-01 23:38:31 (3 years ago)	Probed for vulnerable web application: request line: /phpmyadmin/scripts/setup.php (Possible exploit ... show more Probed for vulnerable web application: request line: /phpmyadmin/scripts/setup.php (Possible exploit:PHPMyadmin installation) show less	Web App Attack
Anonymous	2023-04-01 11:02:20 (3 years ago)	116.196.122.207 [redacted] - [01/Apr/2023:13:02:18 +0200] "GET /phpMyAdmin/scripts/setup.php HTTP/1. ... show more 116.196.122.207 [redacted] - [01/Apr/2023:13:02:18 +0200] "GET /phpMyAdmin/scripts/setup.php HTTP/1.0" 301 0 "-" "-" show less	Hacking Web App Attack
🇵🇱 mkey	2023-04-01 06:00:13 (3 years ago)	Multiple ports scan. (12 probes unauthorized connection)	Port Scan
🇺🇸 MPL	2023-04-01 00:09:34 (3 years ago)	tcp port scan (36 or more attempts)	Port Scan
🇺🇸 MPL	2023-03-31 17:31:35 (3 years ago)	tcp port scan (16 or more attempts)	Port Scan
🇩🇪 DAILYKANBAN.COM	2023-03-31 13:19:24 (3 years ago)	Port Scan detected from 116.196.122.207 (CN/China/-). 9 hits in the last 141 seconds; Ports: ; Di ... show more Port Scan* detected from 116.196.122.207 (CN/China/-). 9 hits in the last 141 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Mar 31 13:19:14 albert kernel: Firewall: TCP_IN Blocked* IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=116.196.122.207 DST=79.143.187.84 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=43847 DF PROTO=TCP SPT=34410 DPT=81 WINDOW=28200 RES=0x00 SYN URGP=0 Mar 31 13:19:15 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=116.196.122.207 DST=79.143.187.84 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=43848 DF PROTO=TCP SPT=34410 DPT=81 WINDOW=28200 RES=0x00 SYN URGP=0 Mar 31 13:19:15 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:08:e3:ff:fd:90:08:00 SRC=116.196.122.207 DST=79.143.187.84 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=14578 DF PROTO=TCP SPT=36832 DPT=3000 WINDOW=28200 RES=0x00 SYN URGP=0 Mar 31 13:19:16 albert kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=00:50:56:3c:27:b4:00:0 show less	Port Scan
🇵🇱 mkey	2023-03-31 05:58:37 (3 years ago)	Multiple ports scan. (8 probes unauthorized connection)	Port Scan
🇨🇦 legitssl	2023-03-31 03:33:57 (3 years ago)	116.196.122.207 - - [30/Mar/2023:23:33:56 -0400] "GET http://167.99.182.52:80/phpMyAdmin/scripts/set ... show more 116.196.122.207 - - [30/Mar/2023:23:33:56 -0400] "GET http://167.99.182.52:80/phpMyAdmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 116.196.122.207 - - [30/Mar/2023:23:33:56 -0400] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 116.196.122.207 - - [30/Mar/2023:23:33:56 -0400] "GET http://167.99.182.52:80/phpMyAdmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 116.196.122.207 - - [30/Mar/2023:23:33:56 -0400] "GET http://167.99.182.52:80/phpmyadmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" 116.196.122.207 - - [30/Mar/2023:23:33:56 -0400] "GET http://167.99.182.52:80/phpMyAdmin/scripts/setup.php HTTP/1.0" 302 145 "-" "-" ... show less	Hacking Web App Attack
🇩🇪 Linux-Tech	2023-03-30 15:53:11 (3 years ago)	116.196.122.207 - - [30/Mar/2023:17:53:10 +0200] "GET http://173.212.244.83:80/phpMyAdmin/scripts/se ... show more 116.196.122.207 - - [30/Mar/2023:17:53:10 +0200] "GET http://173.212.244.83:80/phpMyAdmin/scripts/setup.php HTTP/1.0" 301 162 "-" "-" 116.196.122.207 - - [30/Mar/2023:17:53:10 +0200] "GET http://173.212.244.83:80/phpmyadmin/scripts/setup.php HTTP/1.0" 301 162 "-" "-" show less	Port Scan Bad Web Bot Web App Attack
🇩🇪 ps-center	2023-03-30 08:48:47 (3 years ago)	ABV: Web Attack GET http://88.198.5.249:80/phpmyadmin/scripts/setup.php	Web Spam Hacking Bad Web Bot Web App Attack
🇷🇸 Smel	2023-03-30 04:00:08 (3 years ago)	MH/MP Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 76 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 79.137.76.231

🇻🇪 201.249.71.251

🇩🇪 179.61.251.198

🇮🇩 103.164.105.171

🇺🇦 91.236.224.37

🇺🇦 91.208.194.40

🇺🇸 43.130.26.3

🇨🇳 39.64.104.205

🇦🇺 34.126.200.194

🇺🇸 18.215.151.183

🇹🇼 220.132.149.61

🇫🇷 185.177.72.9

🇺🇸 179.61.137.23

🇨🇳 144.123.77.226

🇨🇳 139.170.73.218

🇫🇷 91.196.152.90

🇱🇹 84.32.244.107

🇧🇬 45.66.44.29

🇨🇦 34.118.171.52

🇺🇸 18.190.15.50