JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 139.170.72.182

139.170.72.182 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 55%: ?

55%

ISP	China Unicom Qinghai province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 139.170.72.182

Whois 139.170.72.182

IP Abuse Reports for 139.170.72.182:

This IP address has been reported a total of 18 times from 13 distinct sources. 139.170.72.182 was first reported on June 5th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-09 15:41:33 (5 hours ago)	PROTO=TCP DPT=3389	Port Scan Hacking
🇧🇾 StatsMe	2026-07-02 00:51:41 (1 week ago)	2026-07-01T21:01:30.651366+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇬🇧 Nov	2026-06-27 22:13:16 (1 week ago)	Unauthorized access attempt (tcp/12366)	Port Scan
🇺🇸 drewf.ink	2026-06-27 12:17:14 (1 week ago)	[12:17] Port scanning. Port(s) scanned: TCP/8080	Port Scan
🇸🇪 donarev419	2026-06-25 03:40:34 (2 weeks ago)	Connection to port 8030 with data transfer. Data preview: �	Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-23 03:58:10 (2 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 _ArminS_	2026-06-21 08:42:45 (2 weeks ago)	SP-Scan 31636:8000 detected 2026.06.21 10:42:45 blocked until 2026.08.10 03:45:32	Port Scan
🇬🇧 PeravixGroup	2026-06-21 04:37:43 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: CR ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: CRITICAL. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 xmission.com	2026-06-17 05:25:37 (3 weeks ago)	Blocked by UFW (TCP on 777) Source port: 23845 TTL: 237 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 777) Source port: 23845 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 139.170.72.182) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-15 01:55:47 (3 weeks ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇩🇪 dispaisyenterprises	2026-06-14 20:33:49 (3 weeks ago)	Honeypot [fra-de-honeypot]: Large payload (1457 bytes); 25282 [1] TCP Reported by DisPaisy Enterpris ... show more Honeypot [fra-de-honeypot]: Large payload (1457 bytes); 25282 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇯🇵 mkaraki	2026-06-14 12:30:03 (3 weeks ago)	1781440196 # Service_probe # SIGNATURE_SEND # source_ip:139.170.72.182 # dst_port:9005 ...	Port Scan
🇺🇸 MPL	2026-06-13 18:44:08 (3 weeks ago)	tcp/10171 (2 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-06-10 02:32:29 (4 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 AS213449.net	2026-06-09 00:03:42 (1 month ago)	06/09/2026-02:03:38.713129 src=139.170.72.182 dst=89.144.63.223:1521 proto=6 msg=ET SCAN Suspicious ... show more 06/09/2026-02:03:38.713129 src=139.170.72.182 dst=89.144.63.223:1521 proto=6 msg=ET SCAN Suspicious inbound to Oracle SQL port 1521 show less	SQL Injection

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.127

🇬🇧 195.96.139.66

🇺🇸 185.223.152.213

🇩🇪 167.94.146.43

🇮🇳 134.209.144.242

🇨🇳 118.196.34.237

🇨🇳 116.179.37.40

🇮🇳 103.171.169.185

🇸🇬 68.183.234.194

🇰🇷 222.239.251.12

🇺🇸 216.25.89.72

🇷🇴 193.46.255.86

🇬🇧 185.247.137.42

🇵🇱 176.53.159.198

🇷🇺 154.90.70.254

🇨🇳 116.179.37.38

🇸🇬 103.187.146.90

🇦🇪 95.182.94.67

🇧🇬 78.128.114.58

🇸🇬 47.82.54.27