117.72.109.89

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
84% Critical
20 reports
18 reporters · latest 59 minutes ago
ISP
Beijing Jingdong 360 Degree E-commerce Co., Ltd.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS141679
Domain Name
jd.com
Country
🇨🇳 China
City
Tianjin, Tianjin
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 18 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇦🇹 Austria 2 🇫🇷 France 2
Most common categories SSH 12 Port Scan 11 Brute-Force 10 Hacking 5 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 SecondBanana
2026-11-13T09:48:50.721500+00:00 thecount sshd[543780]: banner exchange: Connection from 117.72.109.89 port 26042: invalid format ...
Brute-Force SSH
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇩🇪 thefaxe
Brute-Force SSH
🇫🇷 nandadytm
[2026-11-13 08:04:24] Banned 117.72.109.89 after 3 attempts: Portscan probe on TCP port 22
Port Scan
🇩🇪 MaxS
SSH brute force, banned by fail2ban
Brute-Force SSH
🇳🇱 EGP Abuse Dept
Unauthorized connection to SSH port 22
Port Scan Hacking SSH
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇫🇷 ISPLtd
Nov 5 16:48:44 117.72.109.89 TCP SPT=30545 DPT=2222 SYN Nov 5 16:48:45 117.72.109.89 TCP SPT=30545 DPT=2222 SYN ...
Port Scan SSH
🇮🇹 ipald
MIoT SecOps: Touched the SSH honeypot
Port Scan Brute-Force SSH
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-11-04 UTC.
Brute-Force Exploited Host
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇺🇸 MPL
tcp ports: 2222,22 (10 or more attempts)
Port Scan
🇩🇪 formality
Invalid user NL5xUDpV2xRa from 117.72.109.89 port 33108
Brute-Force SSH
🇵🇱 Kotiacat_one
2026-11-02T13:32:35.439294+03:00 node-pl-2 sshd-session[45480]: Invalid user NL5xUDpV2xRa from 117.72.109.89 port 62285 ...
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 109.160.32.176
🇫🇮 80.223.201.173
🇬🇧 35.203.211.225
🇻🇪 200.35.109.130
🇩🇪 172.70.248.119
🇩🇪 172.70.248.118
🇺🇸 146.190.74.75
🇨🇳 106.75.31.194
🇺🇸 65.35.219.169
🇳🇱 45.148.10.157
🇷🇴 2.57.122.150
🇵🇹 109.49.219.99
feedback