JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.72.13.101

117.72.13.101 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 95%: ?

95%

ISP	Beijing Jingdong 360 Degree E-commerce Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS141679
Domain Name	jd.com
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.72.13.101

Whois 117.72.13.101

IP Abuse Reports for 117.72.13.101:

This IP address has been reported a total of 85 times from 45 distinct sources. 117.72.13.101 was first reported on April 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-30 08:05:12 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇦🇹 Pingger Shikkoken	2026-05-25 17:51:06 (1 week ago)	2026-05-25T17:51:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-05-25T17:51:06+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=117.72.13.101 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=37750 DF PROTO=TCP SPT=47808 DPT=6379 WINDOW=28200 RES=0x00 SYN URGP=0 show less	Hacking
🇩🇪 kingjan1999	2026-05-25 15:48:20 (1 week ago)	Blocked by UFW [6379/tcp] \| SPT: 52848 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sef ... show more Blocked by UFW [6379/tcp] \| SPT: 52848 \| TTL: 50 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 Yachiyo Runami	2026-05-25 13:06:23 (1 week ago)	Port Scan on Honeypot \| Ports: 6379/Redis \| Proto: TCP(1) \| Flags: all SYN \| TTL: 44 \| Len: 60B \| Wi ... show more Port Scan on Honeypot \| Ports: 6379/Redis \| Proto: TCP(1) \| Flags: all SYN \| TTL: 44 \| Len: 60B \| Win: 28200(1) \| F2B/ufw-honeypot@2026-05-25T13:06:22Z show less	Port Scan Hacking
🇹🇷 SeczarSecureOps	2026-05-25 05:39:21 (1 week ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Redis (15 events i ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — Redis (15 events in 10min) at 2026-05-25 05:39 show less	Web App Attack
🇳🇴 tmiland	2026-05-25 04:29:46 (1 week ago)	Suricata Detected 4 attacks from 117.72.13.101.; ET CINS Active Threat Intelligence Poor Reputation ... show more Suricata Detected 4 attacks from 117.72.13.101.; ET CINS Active Threat Intelligence Poor Reputation IP group 164; IP: 117.72.13.101; Ports: 51132; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2 show less	Brute-Force
🇩🇪 genokrad	2026-05-25 00:18:29 (2 weeks ago)	Unauthorized connection attempt on TCP/6379 (Redis)	Port Scan
Anonymous	2026-05-24 18:28:32 (2 weeks ago)	2026-05-24T19:28:31.496406+01:00 vps kernel: [41387488.029005] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-05-24T19:28:31.496406+01:00 vps kernel: [41387488.029005] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=117.72.13.101 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=16382 DF PROTO=TCP SPT=49082 DPT=6379 WINDOW=28200 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 cheatmaster.store	2026-05-24 17:47:39 (2 weeks ago)	Automatic firewall detection. Attacker IP: 117.72.13.101 Country: CN City: Tianjin ORG: AS141679 Ch ... show more Automatic firewall detection. Attacker IP: 117.72.13.101 Country: CN City: Tianjin ORG: AS141679 China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch UFW LOGS: May 24 17:46:35 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=117.72.13.101 DST=SERVER_IP_HIDDEN LEN=60 TOS=0x08 PREC=0x20 TTL=48 ID=43686 DF PROTO=TCP SPT=59744 DPT=6379 WINDOW=28200 RES=0x00 SYN URGP=0 Server IP hidden for privacy. Detected repeated unauthorized connection attempts and firewall blocks. show less	Port Scan Hacking Brute-Force SSH
🇩🇪 guldkage	2026-05-24 17:09:04 (2 weeks ago)	Unauthorized connection attempt detected from IP address 117.72.13.101 to port 6379 (ger-02) [REDIS]	Exploited Host
🇳🇱 ByeByte API	2026-05-24 16:40:05 (2 weeks ago)	Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 202 ... show more Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 6379. Single burst at 2026-05-24 16:40 UTC. show less	Port Scan
🇳🇱 ByeByte API	2026-05-24 16:40:05 (2 weeks ago)	byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-05-24T16:40:05Z. Source port 44694. TCP ... show more byebyte.space auth: TCP packet to port 6379 (Redis) at 2026-05-24T16:40:05Z. Source port 44694. TCP flags: SYN. Packet: 60B, TTL 44, window 28200, IP id 44081. Single packet, dropped at firewall. p0f: OS Linux 3.11 and newer (exact match), 20 hops, link generic tunnel or VPN. show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-05-24 15:10:46 (2 weeks ago)	2026-05-24T15:10:46+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-05-24T15:10:46+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=117.72.13.101 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=44260 DF PROTO=TCP SPT=59614 DPT=6379 WINDOW=28200 RES=0x00 SYN URGP=0 show less	Hacking
🇫🇮 iamxorum	2026-05-24 02:11:22 (2 weeks ago)	2026-05-24T02:11:21.656358+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-05-24T02:11:21.656358+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=117.72.13.101 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=44555 DF PROTO=TCP SPT=39666 DPT=6379 WINDOW=28200 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇿 lp	2026-05-23 20:20:25 (2 weeks ago)	anomaly: tcp_port_scan, 501 > threshold 500, repeats 56038 times	Port Scan

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.52

🇺🇸 205.210.31.57

🇹🇼 198.235.24.110

🇬🇧 185.125.188.59

🇵🇾 181.127.209.151

🇲🇾 165.154.147.69

🇸🇦 154.205.134.214

🇷🇺 147.45.48.17

🇮🇳 125.19.160.206

🇺🇸 107.172.195.33

🇺🇸 100.29.192.71

🇮🇱 91.135.107.152

🇺🇸 72.167.50.103

🇸🇬 43.156.201.48

🇩🇪 35.246.214.54

🇺🇸 216.25.89.128

🇺🇸 209.222.101.194

🇲🇽 187.251.123.104

🇺🇸 147.185.132.238

🇧🇷 138.99.80.102