43.251.207.166
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- United Information Highway Co.,Ltd.
- Usage Type
- Fixed Line ISP
- ASN
- AS38794
- Domain Name
- uih.co.th
- Country
- 🇹🇭 Thailand
- City
- Bangkok, Bangkok
Abuse Reports
Total reports
49 from
40 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 somosbr |
[2026-11-14T11:32:21Z] Unsolicited scan from 43.251.207.166 to port 1187/tcp
|
Port Scan | |
| 🇩🇪 ITSNF |
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=1095,1443,2800,6666
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 36 application-level events across 4 target ports and 36 source port(s). Ports: 2399/service, 3784/service, 6580/service, 7778/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 18 application-level events across 2 target ports and 18 source port(s). Ports: 1259/service, 2222/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇹🇭 Sawasdee |
Port Scan
...
|
Port Scan | |
| Anonymous |
|
Port Scan | |
| 🇨🇿 kronos |
IDS: FlowIntel scan-like source | SID:9900001 | session_sigs:266 | alerts5m:829
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 18 application-level events across 2 target ports and 18 source port(s). Ports: 6005/service, 10082/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇨🇿 david1117 |
Blocked by os-abuseipdb; 7 hits, proto=tcp, ports=1035,15660,903,9220
|
Port Scan Hacking | |
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port scan
|
Port Scan | |
| Anonymous |
Drop from IP address 43.251.207.166 to tcp-port 9898
|
Port Scan | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇮🇹 [email protected] |
43.251.207.166 - - [31/Jul/2026:06:49:36 +0200] "GET / HTTP/1.1" 403 5199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36"
|
Web App Attack Hacking | |
| 🇫🇷 EDSL |
[gps.edsl.fr] Blocked by SysWarden Firewall (Mail Service Attack Port 993)
|
Brute-Force Email Spam Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown