218.72.138.66
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET-ZJ Jinhua node network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- hz.zj.cn
- Country
- 🇨🇳 China
- City
- Hangzhou, Zhejiang
Abuse Reports
Total reports
26 from
19 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/1433
|
Port Scan | |
| 🇳🇱 i-turnradio.nl |
2026-10-03 04:20:02 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 445.
|
Port Scan | |
| 🇸🇬 drewf.ink |
[14:22] Sent a legacy SMB1 negotiation (Type: SMB1, Dialect(s): NT LM 0.12) - no SMB2 support signaled
|
Hacking | |
| 🇺🇸 Bankbook8585 |
T-Pot honeypot | Dionaea honeypot: smbd
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 32530
TTL: 240
Packet length: 40
TOS: 0x08
This report (for 218.72.138.66) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 Admins@Storch |
IPS:drop <match> dstport=445
|
Brute-Force Exploited Host | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 29101
TTL: 240
Packet length: 40
TOS: 0x08
This report (for 218.72.138.66) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 sthoyer.de |
|
Port Scan | |
| Anonymous |
denied SMB access attempt. destination port 445.
|
Port Scan Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 29035
TTL: 240
Packet length: 40
TOS: 0x08
This report (for 218.72.138.66) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇧🇷 chronos |
Possible malicious scan or exploit attempt on database services. | Port: 1433 | Proto: TCP | Location: China, Hangzhou
|
Port Scan Exploited Host SQL Injection Hacking | |
| 🇭🇰 mutebot.net |
SRC=218.72.138.66, PROTO=TCP, SPT=32604, DPT=445
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (2 or more attempts)
|
Port Scan | |
| 🇳🇱 StopAbuse |
tcp/445
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown