43.248.109.16
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- UNICOM yunnan Province Network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Kunming, Yunnan
No reports in the last 60 days
43.248.109.16 has been reported 125 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
125 from
43 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇺 punctualsuspension968 |
blocked by ufw on TCP 3306
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/10451 (2 or more attempts)
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aaran.cloud
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/2089
|
Port Scan | |
| 🇺🇸 MPL |
tcp/3306
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 9387 [1] TCP
|
Hacking | |
| 🇺🇸 MPL |
tcp/1500
|
Port Scan | |
| 🇸🇪 donarev419 |
Connection to port 3103 with data transfer.
Data preview: GET / HTTP/1.1
Host: 51.21.134.169:3103
Accept: */*
|
Port Scan Hacking | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 43.248.109.16 to port 20185 [SYD]
|
Port Scan | |
| 🇦🇺 trentwiles.com |
Unauthorized connection attempt detected from IP address 43.248.109.16 to port 20034 [SYD]
|
Port Scan | |
| Anonymous |
CrowdSec ban: crowdsecurity/ssh-refused-conn
|
Hacking | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/43.248.109.16
2026-05-18 04:01:08 //cn.bing.com:443
|
Web App Attack | |
| 🇬🇧 PeravixGroup |
Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown