50.116.2.172
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Linode
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS63949
- Hostname(s)
- us-west-90.boron.li.prod.binaryedge.ninja
- Domain Name
- linode.com
- Country
- 🇺🇸 United States of America
- City
- Fremont, California
Abuse Reports
Total reports
79 from
36 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/3388 (3 or more attempts)
|
Port Scan | |
| 🇭🇰 sandra361 |
Port scan detected: 228 packets across 1 port (18765). | Evidence: REAPER_TARPIT: IN=eth0 SRC=50.116.2.172 LEN=372 TOS=0x14 PREC=0x00 TTL=49 ID=14034 DF PROTO=TCP SPT=56400 DPT=18765 WINDOW=64240 RES=0x00 ACK PSH URGP=0
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 9070)
Source port: 56433
TTL: 244
Packet length: 44
TOS: 0x00
This report (for 50.116.2.172) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 9030)
Source port: 54355
TTL: 245
Packet length: 44
TOS: 0x00
This report (for 50.116.2.172) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8800 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8553 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8099
|
Port Scan | |
| 🇺🇸 Axel |
Atom Honypot: 4 connections to client:rdp (tcp/3389), probe:rdp-cookie (tcp/3389), rdp (tcp/3389) observed by 1 honeypot sensor between 2026-11-08 04:39 UTC and 2026-11-08 04:39 UTC.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/3322 (2 or more attempts)
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 38 payload-bearing connection/event(s), 4519 payload byte(s) total, maximum payload 2380 byte(s). Target port(s): 2105.
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp ports: 2105,2224 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 2095,2105 (3 or more attempts)
|
Port Scan | |
| 🇺🇸 etu brutus |
50.116.2.172 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | |
| Anonymous |
Blocked by firewall on hugin [2056/tcp] | Rule: UFW | SPT: 40477 | TTL: 240 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 shabi |
UFW Blocked [1977/TCP]
Source: 50.116.2.172:42336
TTL: 242
Lenth: 44
TOS: 0x00
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown