103.216.99.170

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
80% Critical
27 reports
19 reporters · latest 2 days ago
ISP
SPARKLINE NETWORK
Usage Type
Fixed Line ISP
ASN
AS151690
Domain Name
nixi.in
Country
🇮🇳 India
City
Udaipur, Tripura
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 19 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇫🇷 France 4 🇳🇱 Netherlands 4
Most common categories Port Scan 24 Hacking 6 SSH 2 Brute-Force 1 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (92 distinct dst hosts)
Port Scan
🇨🇭 Elysium Security
Mass port scanning on a whole network
Port Scan
Anonymous
Web application attack detected.
Web App Attack
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (71 distinct dst hosts)
Port Scan
🇹🇭 Sawasdee
Unwanted checking 80 or 443 port ...
Bad Web Bot
Anonymous
MikroTik Enterprise Honeypot
Port Scan
🇩🇪 KPS
PortscanT
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:53675 dst:23
Port Scan
🇺🇸 RAP
2026-10-31 20:32:07 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇳🇱 ByeByte API
byebyte.space auth: TCP packet to port 23 (telnet) at 2026-10-31T19:34:54Z. Source port 47143. TCP flags: SYN. Packet: 60B, TTL 51, window 5840, IP id 45904. Single packet, dropped at firewall. p0f: OS Linux 2.4.x-2.6.x (generic match), 13 hops.
Port Scan
🇳🇱 ByeByte API
Port scan from this IP. Firewall dropped every packet. Targeted TCP ports: 23. Single burst at 2026-10-31 19:34 UTC.
Port Scan
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇪🇸 raiolanetworks.com
Honeypot detection: SSH/Telnet brute-force. 3 events observed. Reported automatically from a honeypot sensor.
Brute-Force SSH
🇳🇵 radheykrishna.com.np
Oct 31 16:07:28 kernel: [2347354.009315] [UFW BLOCK] IN=ens160 OUT= SRC=103.216.99.170 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=37001 DF PROTO=TCP SPT=56005 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0 ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 223.107.72.234
🇺🇸 216.24.219.5
🇺🇸 216.24.219.3
🇺🇸 193.36.224.24
🇵🇱 172.64.200.119
🇵🇱 172.64.200.87
🇺🇸 136.144.19.176
🇺🇸 136.144.19.44
🇺🇸 136.144.19.42
🇺🇸 136.144.19.5
🇺🇦 109.200.250.76
🇳🇱 86.38.187.205
🇺🇸 107.150.104.229
🇭🇰 103.218.242.13
🇺🇸 64.144.28.61
🇦🇺 16.179.118.61
feedback