JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.62.66.165

116.62.66.165 was found in our database!

This IP was reported 185 times. Confidence of Abuse is 48%: ?

48%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.62.66.165

Whois 116.62.66.165

IP Abuse Reports for 116.62.66.165:

This IP address has been reported a total of 185 times from 55 distinct sources. 116.62.66.165 was first reported on February 23rd 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 acadeova	2026-07-18 03:58:06 (22 hours ago)	Blocked by UFW on vps2 [3333/tcp] Source port: 47081 TTL: 241 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on vps2 [3333/tcp] Source port: 47081 TTL: 241 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 VentryShield	2026-07-17 11:48:17 (1 day ago)	p0t honeypot: unknown connection on port 636/tcp, 88 bytes received from client	Port Scan
🇭🇰 sandra361	2026-07-17 09:53:22 (1 day ago)	Port scan detected: 8 attempts across 1 port (2381). \| Evidence: GHOST_SCAN: IN=eth0 SRC=116.62.66.1 ... show more Port scan detected: 8 attempts across 1 port (2381). \| Evidence: GHOST_SCAN: IN=eth0 SRC=116.62.66.165 LEN=60 TOS=0x14 PREC=0x00 TTL=49 ID=1045 DF PROTO=TCP SPT=55044 DPT=2381 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇫🇷 dusfor72	2026-07-09 19:01:08 (1 week ago)	aggressive portscan ...	Port Scan
🇫🇷 masterguru	2026-07-07 06:13:08 (1 week ago)	Port Scan detected from 116.62.66.165 (CN/China/-). 11 hits in the last 25 seconds (0-131)	Port Scan
🇨🇦 Blinker73	2026-07-01 05:07:07 (2 weeks ago)	2026-07-01T01:06 kernel: OUT= SRC=116.62.66.165 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=46418 PRO ... show more 2026-07-01T01:06 kernel: OUT= SRC=116.62.66.165 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=46418 PROTO=TCP SPT=42411 DPT=9918 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-01T01:07 kernel: OUT= SRC=116.62.66.165 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=37768 PROTO=TCP SPT=42411 DPT=10087 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-01T01:07 kernel: OUT= SRC=116.62.66.165 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=41436 PROTO=TCP SPT=42411 DPT=8212 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇬🇧 PeravixGroup	2026-06-14 02:37:36 (1 month ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 ISPLtd	2026-06-10 02:07:02 (1 month ago)	Jun 9 23:06:59 116.62.66.165 TCP SPT=57216 DPT=60607 SYN Jun 9 23:06:59 116.62.66.165 TCP SPT=5721 ... show more Jun 9 23:06:59 116.62.66.165 TCP SPT=57216 DPT=60607 SYN Jun 9 23:06:59 116.62.66.165 TCP SPT=57216 DPT=25553 SYN Jun 9 23:07:00 116.62.66.165 TCP SPT=57216 DPT=12934 ... show less	Port Scan
🇫🇷 masterguru	2026-06-07 10:10:48 (1 month ago)	Port Scan detected from 116.62.66.165 (CN/China/-). 11 hits in the last 30 seconds (0-143)	Port Scan
🇨🇦 polycoda	2026-06-02 22:51:49 (1 month ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇦🇺 LiftUp Hosting	2026-06-02 03:16:03 (1 month ago)	Honeypot hit: HTTP request on 11001	Hacking Bad Web Bot
🇹🇷 Threat.live	2026-06-01 20:40:02 (1 month ago)	Suspicious Connection Attempts	Brute-Force
Anonymous	2026-06-01 10:47:11 (1 month ago)	Jun 1 06:47:09 localhost kernel: [108656148.491594] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jun 1 06:47:09 localhost kernel: [108656148.491594] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.62.66.165 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=51710 PROTO=TCP SPT=50828 DPT=6690 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 1 06:47:09 localhost kernel: [108656148.491612] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.62.66.165 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=51710 PROTO=TCP SPT=50828 DPT=6690 SEQ=2377233314 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 1 06:47:11 localhost kernel: [108656150.087989] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.62.66.165 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=51598 PROTO=TCP SPT=50828 DPT=4900 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 1 06:47:11 localhost kernel: [108656150.088014] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=116.62.66.165 DST=[mungedIP2] LEN=40 TOS=0 show less	Port Scan
🇫🇷 Fasetech	2026-05-30 07:18:59 (1 month ago)	SecLedge detected suspicious activity. Score: 3108.48. Sensor: T-Pot.	Brute-Force
🇬🇧 PeravixGroup	2026-05-30 06:01:02 (1 month ago)	Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ... show more Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud show less	Port Scan

Showing 1 to 15 of 185 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.41.109

🇬🇧 193.46.0.183

🇮🇩 163.7.9.84

🇮🇩 103.253.245.222

🇧🇪 35.190.221.154

🇭🇰 23.140.244.235

🇹🇼 198.235.24.58

🇲🇦 196.114.180.242

🇬🇧 195.96.139.159

🇬🇧 193.46.0.120

🇲🇽 189.201.89.12

🇩🇪 167.94.146.47

🇨🇳 119.36.193.230

🇭🇰 119.28.9.170

🇩🇪 104.28.197.15

🇮🇳 103.59.202.213

🇺🇸 98.255.10.31

🇳🇱 81.171.72.93

🇱🇹 81.30.98.144

🇺🇸 64.23.229.250