139.212.71.168
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom Jilin province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Changchun, Jilin
Abuse Reports
Total reports
67 from
24 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 mashamal |
Port Scanning
...
|
Port Scan | |
| 🇺🇸 MPL |
tcp/32400
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 1957 [1] TCP
|
Hacking | |
| 🇺🇸 sandra361 |
Port scan detected: 5 attempts across 1 port (47111). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=139.212.71.168 LEN=40 TOS=0x00 PREC=0x00 TTL=36 ID=12215 DF PROTO=TCP SPT=24154 DPT=47111 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 2091 [1] TCP
|
Port Scan | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 44444.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/7537
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 1006.
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇩🇪 dispaisyenterprises |
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 16661 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇺🇸 sukka |
VLESS Client trying to do VPN Domain-Fronting with Cloudflare CDN via a WebSocket Tunnel
|
Hacking Web App Attack | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: HTTP/1.1 request on 3005
GET /
Accept: */*; 3005 [1] TCP
|
Hacking Bad Web Bot | |
| 🇺🇸 MPL |
tcp/9200
|
Port Scan | |
| 🇧🇾 StatsMe |
2026-06-20T12:20:07.572890+0300
ET SCAN NMAP -sS window 1024
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2197)
Source port: 23159
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 139.212.71.168) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown