AbuseIPDB » 139.170.72.21

139.170.72.21
Recent Activity This IP has received recent abuse reports, which causes the score to increase.
48 reports found in our database
62% Elevated
Abuse confidence score ?
ISP
China Unicom Qinghai province network
Usage Type
Fixed Line ISP
ASN
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Xining, Qinghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 139.170.72.21:

This IP address has been reported a total of 48 times from 22 distinct sources. 139.170.72.21 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 9 reports; Germany with 7 reports; Mongolia with 4 reports. The most common categories in these recent reports were: Port Scan 21 times; Hacking 6 times; Web App Attack 4 times; Brute-Force 2 times; Bad Web Bot 1 time; Other 2 times.

Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Skyrider
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot Web App Attack
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=41770 dstport=1443
Port Scan
🇺🇸 MPL
tcp/4155 (2 or more attempts)
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 MPL
tcp/3002
Port Scan
🇺🇸 MPL
tcp/5678
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 7946 [1] TCP
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 4443.
Port Scan Hacking
🇧🇷 noconex
Port Scan Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 5937 [1] TCP
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 49154 [1] TCP
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 22222.
Port Scan Hacking
🇺🇸 sukka
VLESS Client trying to do VPN Domain-Fronting with Cloudflare CDN via a WebSocket Tunnel
Hacking Web App Attack
🇺🇸 xmission.com
Port Scan
🇺🇸 MPL
tcp/40001
Port Scan

Showing 1 to 15 of 48 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.173
🇨🇴 191.95.144.106
🇨🇴 186.169.80.18
🇺🇸 162.216.149.110
🇨🇳 118.178.186.103
🇨🇳 115.190.244.156
🇮🇩 103.148.208.146
🇳🇱 94.154.43.140
🇩🇪 64.226.110.44
🇳🇱 45.148.10.240
🇬🇧 35.203.211.95
🇨🇳 8.134.203.138
🇷🇺 195.19.125.51
🇧🇷 190.115.84.25
🇺🇸 172.253.85.85
🇺🇸 162.216.150.235
🇩🇪 130.12.180.194
🇸🇬 114.119.154.211
🇳🇱 91.92.42.204
🇱🇹 62.60.130.242