120.25.201.166
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Aliyun Computing Co., LTD
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS37963
- Domain Name
- alibabacloud.com
- Country
- 🇨🇳 China
- City
- Shenzhen, Guangdong
Abuse Reports
Total reports
10 from
9 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇦 Arpan Sen |
Network port/address scan: probed 1 distinct port(s) across 64 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor.
|
Port Scan | |
| 🇮🇳 Mr.Singh |
NFT blocked 120.25.201.166 on 01-Nov-2026..
|
Port Scan Brute-Force | |
| 🇭🇰 mutebot.net |
SRC=120.25.201.166, PROTO=TCP, SPT=40122, DPT=3389
|
Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [3389/tcp]
Source port: 55733
TTL: 237
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇮🇩 Indobsd |
|
Port Scan Web App Attack SSH | |
| Anonymous |
2026-10-31 07:29:59 warning[1758448]: host unknown[120.25.201.166]: unauthorized access attempted: tcp/3389
|
Port Scan Brute-Force | |
| 🇭🇰 mutebot.net |
SRC=120.25.201.166, PROTO=TCP, SPT=51043, DPT=3389
|
Port Scan | |
| 🇰🇷 ds2bkp |
|
Port Scan | |
| 🇵🇱 mkey |
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=3389 | HITS=2 | IPSET=ADD | FIRST=2026-10-30 07:59:38 | LAST=2026-10-30 07:59:50. Last seen 2026-10-30 07:59:51.
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=4; port 3389 proto 6 detection honeypot_tcp; port 3389 proto 6 detection honeypot_tcp; port 3389 proto 6 detection honeypot_tcp; port 3389 proto 6 detection honeypot_tcp
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown