118.81.195.59
IPv4AS4837 · CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN · 118.80.0.0/15 · CN registry
Observed 11 times. Targeted ports: 3389. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 118.81.195.59 | ip | honeypot, historical | 2026-10-09 21:09:58 | |
Honeypot infrastructure watch: Observed 11 times. Targeted ports: 3389. Country: China. Alert categories: Generic Protocol Command Decode. Signatures: SURICATA Applayer Mismatch protocol both directions, SURICATA TLS invalid record type. | ||||
Passive DNS relationships
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| 59.195.81.118.adsl-pool.sx.cn | 118.81.195.59 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
Record details
A · First seen Oct 2026
Network ownership
BGP origin and registry data from Team Cymru.
CHINA169-Backbone - CHINA UNICOM China169 Backbone, CN
Registry country is RIR assignment data, not IP geolocation.
Checked 10/9/2026, 9:10:38 PM
Popularity
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Popularity data is temporarily unavailable.
Internet exposure
Current scanner state. Times mean last observed open, not open now.
The last good scanner snapshot is stale; a refresh is queued.
| Port | Transport | Service | Product | Last observed open |
|---|
Public preview is limited to five services and excludes banners.
Search full Exposure dataTake this investigation further
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence. Eligible logged-in entity visits cost 1 CTIDAO, including pivots, refreshes and returns.