This IP address has been reported a total of
14
times from
10 distinct
sources.
201.3.239.32 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 6
reports;
Canada
with 2
reports;
Germany
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
11
times;
Port Scan
5
times;
Hacking
4
times;
IoT Targeted
1
time;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unsolicited TCP connection from 201.3.239.32 to port 0 at 2026-10-18T20:02:04Z. Source IP completed ...
show moreUnsolicited TCP connection from 201.3.239.32 to port 0 at 2026-10-18T20:02:04Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 3389 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 3389 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-10-18T19:23:50Z to 2026-10-18T19:23:50Z UTC.
2026-10-18T19:23:50Z tcp/3389 data: \x03\x00\x003.\xfd\x00\x00\x00\x00\x00Cookie: mstshash=[redacted] \x01\x00\x08\x00\x02\x00\x00\x00 (non-printable bytes hex-escaped)
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
Unsolicited TCP connection from 201.3.239.32 to port 0 at 2026-10-18T19:15:48Z. Source IP completed ...
show moreUnsolicited TCP connection from 201.3.239.32 to port 0 at 2026-10-18T19:15:48Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
OpenCanary honeypot hit on port 3389 (no legitimate service runs there); logtype 14001. Automated re ...
show moreOpenCanary honeypot hit on port 3389 (no legitimate service runs there); logtype 14001. Automated report.
show less
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 6 application-level events across ...
show moreHoneypot Finding: repeated TCP service probing on TCP/3389 (RDP); 6 application-level events across 3 source port(s). Sensor(s): RDPHoneypot.
show less
Port Scan
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
