AbuseIPDB » 61.158.168.57

Enter an IP Address, Domain Name, or Subnet:

e.g.   54.198.54.179, microsoft.com, or 5.188.10.0/23

61.158.168.57 was found in our database!

This IP was reported 82 times. Confidence of Abuse is 45%: ?

45%
ISP China Unicom Henan Province Network
Usage Type Unknown
Hostname(s) 57.168.158.61.ha.cnc
Domain Name chinaunicom.com
Country China
City Zhengzhou, Henan

Spot an error? IP info including ISP, Usage Type, and Location provided by IP2Location. Contact them to update it!

IP Abuse Reports for 61.158.168.57:

This IP address has been reported a total of 82 times from 11 distinct sources. 61.158.168.57 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter Date Comment Categories
andrew.stream
[portscan] tcp/1433 [MsSQL]

*(RWIN=1024)(11:09)
Port Scan Hacking SQL Injection Brute-Force Exploited Host
Anonymous
Portscan or hack attempt detected by psad/fwsnort
Port Scan Hacking
secureshock.nl
Hit our honeypot for 36837 times at 1433/TCP -- Resubmit, still active.
Port Scan
secureshock.nl
Hit our honeypot for 34211 times at 1433/TCP -- Resubmit, still active.
Port Scan
andrew.stream
[portscan] tcp/1433 [MsSQL]

*(RWIN=1024)(11:12)
Port Scan Hacking SQL Injection Brute-Force Exploited Host
secureshock.nl
Hit our honeypot for 31414 times at 1433/TCP -- Resubmit, still active.
Port Scan
secureshock.nl
Hit our honeypot for 28627 times at 1433/TCP -- Resubmit, still active.
Port Scan
secureshock.nl
Hit our honeypot for 25846 times at 1433/TCP -- Resubmit, still active.
Port Scan
Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
andrew.stream
[portscan] tcp/1433 [MsSQL]

*(RWIN=1024)(08:54)
Port Scan Hacking SQL Injection Brute-Force Exploited Host
andrew.stream
[portscan] tcp/1433 [MsSQL]

*(RWIN=1024)(11:19)
Port Scan Hacking SQL Injection Brute-Force Exploited Host
secureshock.nl
Hit our honeypot for 25799 times at 1433/TCP -- Resubmit, still active.
Port Scan
secureshock.nl
Hit our honeypot for 25591 times at 1433/TCP -- Resubmit, still active.
Port Scan
Anonymous
port scan and connect, tcp 1433 (ms-sql-s)
Port Scan
secureshock.nl
Hit our honeypot for 24873 times at 1433/TCP -- Resubmit, still active.
Port Scan

Showing 1 to 15 of 82 reports


Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership.

Recently Reported IPs:

** This Document Provided By AbuseIPDB **
Source: https://www.abuseipdb.com/check/61.158.168.57