116.62.238.196

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
79% Critical
65 reports
15 reporters · latest 10 hours ago
ISP
Aliyun Computing Co., LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS37963
Domain Name
alibabacloud.com
Country
🇨🇳 China
City
Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
65 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 34 🇬🇧 United Kingdom of Great Britain and Northern Ireland 11 🇺🇸 United States of America 11
Most common categories Port Scan 57 Brute-Force 22 SSH 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Blocked by UFW (TCP on 2) Source port: 44976 TTL: 58 Packet length: 60 TOS: 0x14 This report (for 116.62.238.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 sandra361
Port scan detected: 12 packets across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=116.62.238.196 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=5760 DF PROTO=TCP SPT=49078 DPT=22 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
🇭🇰 sandra361
Brute-force detected: 6 packets across 1 port (22). | Evidence: REAPER_TARPIT: IN=eth0 SRC=116.62.238.196 LEN=52 TOS=0x14 PREC=0x00 TTL=50 ID=20892 DF PROTO=TCP SPT=60026 DPT=22 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Brute-Force
Anonymous
Port Scan Brute-Force
🇫🇷 uthul
T-Pot honeypot: 3 hits on ports [2] (automated)
Port Scan
🇫🇷 Little Iguana
trying to access non-authorized port
Port Scan
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-11-06T12:40:53.000Z through 2026-11-06T12:40:53.000Z.
Port Scan
🇬🇧 sandra361
Port scan detected: 8 packets across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=116.62.238.196 LEN=52 TOS=0x00 PREC=0x00 TTL=47 ID=35891 DF PROTO=TCP SPT=47722 DPT=22 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
Anonymous
Port Scan Brute-Force
🇺🇸 sandra361
Port scan detected: 12 attempts across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=116.62.238.196 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=50000 DF PROTO=TCP SPT=47788 DPT=22 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
Anonymous
Port Scan Brute-Force
🇭🇰 sandra361
Port scan detected: 15 attempts across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=eth0 SRC=116.62.238.196 LEN=52 TOS=0x14 PREC=0x00 TTL=48 ID=43123 DF PROTO=TCP SPT=36218 DPT=22 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
🇬🇧 sandra361
Port scan detected: 12 attempts across 2 ports (2, 22). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=116.62.238.196 LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=25182 DF PROTO=TCP SPT=33620 DPT=22 WINDOW=64240 RES=0x00 ACK PSH URGP=0
Port Scan
🇫🇷 uthul
T-Pot honeypot: 3 hits on ports [2] (automated)
Port Scan
🇺🇸 Aurealize
Port Scan

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 220.116.117.213
🇧🇷 186.238.178.6
🇺🇸 166.62.41.190
🇳🇱 159.65.205.217
🇬🇧 31.14.254.6
🇮🇪 18.201.30.24
🇺🇸 2a03:2880:f816:4a::
🇬🇧 192.248.150.180
🇺🇸 162.216.149.196
🇺🇸 129.121.75.215
🇧🇭 109.63.118.181
🇮🇪 54.195.162.7
🇩🇪 40.99.157.50
🇫🇷 34.155.180.119
🇮🇳 14.141.53.42
🇫🇷 2001:41d0:33d:9200::40c
🇨🇳 223.198.164.208
🇹🇳 197.5.145.114
🇮🇳 103.70.40.36
🇿🇦 102.220.149.113
feedback