114.217.103.58

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
96% Critical
22 reports
20 reporters · latest 5 hours ago
ISP
Chinanet Jiangsu Province Network
Usage Type
Fixed Line ISP
ASN
AS140292
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Nanjing, Jiangsu
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 7 🇦🇹 Austria 1
Most common categories Port Scan 21 Hacking 6 Brute-Force 3 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇵🇱 bart@
Automated scan detection against redacted protected targets. Hits=1; port 1433 proto 6 detection honeypot_tcp
Port Scan
🇩🇪 KPS
Portscan-T
Port Scan
🇮🇹 Fusty
Unauthorized attempt on (TCP on port 1433). Source port: 44230 TTL: 232 Packet length: 44 Timestamp: 2026-11-11 20:11:13
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 236 | Len: 44B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-11T17:01:43Z
Port Scan Hacking
🇦🇹 joe-abuse
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (1433/tcp); first 2026-11-11 10:18:10 UTC, last 2026-11-11 10:18:10 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan
Anonymous
ET SCAN Suspicious inbound to MSSQL port 1433
Port Scan
🇮🇳 Mr.Singh
NFT blocked 114.217.103.58 on 11-Nov-2026..
Port Scan Brute-Force
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇺🇸 MPL
tcp/1433 (2 or more attempts)
Port Scan
🇩🇪 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 1433/MSSQL | Proto: TCP(1) | Flags: all SYN | TTL: 238 | Len: 44B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-06T07:22:34Z
Port Scan Hacking
🇩🇪 _ArminS_
SP-Scan 43563:1433 detected 2026.11.05 16:44:13 blocked until 2026.12.25 09:47:00
Port Scan
🇰🇷 ian ian
Unsolicited TCP SYN to closed port(s) 1433 (1 attempt(s)) on a host that serves no such service; first seen 2026-11-05T12:31:24Z UTC, blocked by firewall.
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 1433
Port Scan Hacking Exploited Host
🇩🇪 goodbytes
Suricata IDS, web server and web honeypot logs on our public servers, UTC. 2026-11-03 23:21:18 to 2026-11-03 23:21:18: 1 alerts. Evidence: 2026-11-03 23:21:18 IDS: ET SCAN Suspicious inbound to MSSQL port 1433 (TCP/1433)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 220.179.87.203
🇻🇪 190.103.28.110
🇵🇰 175.107.212.37
🇳🇱 109.160.32.147
🇺🇸 72.211.57.168
🇺🇸 34.106.221.180
🇨🇦 20.116.34.103
🇷🇴 2.57.121.25
🇬🇧 2.57.17.247
🇬🇧 2.57.17.246
🇺🇸 98.174.60.201
🇳🇱 80.82.77.139
🇳🇱 77.67.26.238
🇷🇺 31.173.67.123
🇷🇴 2.57.122.150
🇬🇧 2.57.17.240
🇮🇳 202.8.117.140
🇨🇴 181.78.83.133
🇧🇷 177.23.149.195
🇭🇰 152.32.225.35
feedback