116.91.115.166

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
34% Elevated
22 reports
18 reporters · latest 1 day ago
ISP
GMO Internet,Inc.
Usage Type
Fixed Line ISP
ASN
AS2519
Domain Name
gmo.jp
Country
🇯🇵 Japan
City
Tokyo, Tokyo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇩🇪 Germany 4 🇹🇷 Turkey 3
Most common categories Port Scan 14 Hacking 6 Web App Attack 3 Exploited Host 2 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-11-10 07:20, Last: 2026-11-13 08:09 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
4 incidents: malicious activity. First: 2026-10-20 19:36, Last: 2026-10-29 08:21 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-10-11 09:53, Last: 2026-10-19 18:46 UTC. Triggers: unknown.
Port Scan
🇺🇸 micropedro
3 incidents: malicious activity. First: 2026-09-24 10:15, Last: 2026-10-05 07:29 UTC. Triggers: unknown.
Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: HTTP/1.0 request on 8188 GET /; 8188 [1] TCP
Hacking Bad Web Bot
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (8000/tcp)
Web App Attack
Anonymous
PROTO=TCP DPT=8000
Port Scan Hacking
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: HTTP/1.0 request on 9090 GET /; 9090 [1] TCP
Web App Attack
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.0 request on 3333 GET /; 3333 [1] TCP
Hacking Bad Web Bot
🇩🇪 EinfxchFinn
Unauthorized connection attempt to port 3333 from 116.91.115.166
Port Scan
🇨🇦 Arpan Sen
Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
Port Scan
🇺🇸 micropedro
3 incidents: port scanning. First: 2026-09-19 09:40, Last: 2026-09-22 20:19 UTC. Triggers: non-public-port,firewall-tcp,unknown.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 9090.
Port Scan Hacking
🇩🇪 Admins@Storch
IPS:drop <match> dstport=4000
Brute-Force Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇯🇵 189.81.214.149
🇺🇸 137.184.155.25
🇺🇸 135.222.174.121
🇺🇸 134.209.117.89
🇸🇬 114.119.154.186
🇺🇸 104.168.67.144
🇩🇪 69.5.169.104
🇺🇸 45.146.55.225
🇩🇪 193.124.20.252
🇺🇸 192.253.209.123
🇺🇸 192.241.135.210
🇲🇽 189.224.43.153
🇲🇽 187.190.35.163
🇲🇽 187.188.64.40
🇺🇸 136.60.164.62
🇨🇳 120.86.180.143
🇳🇱 109.160.32.147
🇿🇦 102.66.181.23
🇳🇱 64.205.72.206
🇮🇩 43.165.198.144
feedback