JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 171.104.81.249

171.104.81.249 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 96%: ?

96%

ISP	CHINANET GUANGXI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanning, Guangxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 171.104.81.249

Whois 171.104.81.249

IP Abuse Reports for 171.104.81.249:

This IP address has been reported a total of 42 times from 21 distinct sources. 171.104.81.249 was first reported on June 19th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇭 Sawasdee	2026-07-18 12:24:09 (9 hours ago)	Port Scan ...	Port Scan
🇺🇸 MPL	2026-07-18 10:41:57 (11 hours ago)	tcp/2992 (2 or more attempts)	Port Scan
🇺🇸 sandra361	2026-07-18 07:05:44 (15 hours ago)	Port scan detected: 6 attempts across 1 port (2062). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=171.10 ... show more Port scan detected: 6 attempts across 1 port (2062). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=171.104.81.249 LEN=40 TOS=0x00 PREC=0x00 TTL=36 ID=50527 DF PROTO=TCP SPT=45204 DPT=2062 WINDOW=29200 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇧🇾 StatsMe	2026-07-18 00:44:18 (21 hours ago)	2026-07-17T23:22:32.452839+0300 ET SCAN NMAP -sS window 1024	Port Scan
🇩🇪 David Ferneding	2026-07-17 11:11:38 (1 day ago)	Blocked by UFW (TCP on 3050) Source port: 48022 TTL: 235 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 3050) Source port: 48022 TTL: 235 Packet length: 44 TOS: 0x00 This report (for 171.104.81.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 donarev419	2026-07-17 08:29:48 (1 day ago)	Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:80 Acc ... show more Connection to port 80 with data transfer. Data preview: GET / HTTP/1.1 Host: 67.215.244.172:80 Accept: / show less	Port Scan Hacking
🇺🇸 Axel	2026-07-15 15:52:11 (3 days ago)	Blocked by UFW on LAXHH [7687/tcp] \| SPT: 26158 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [7687/tcp] \| SPT: 26158 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-15 03:21:37 (3 days ago)	Blocked by UFW on LAXHH [2013/tcp] \| SPT: 48118 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2013/tcp] \| SPT: 48118 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-07-13 23:26:06 (4 days ago)	Blocked by UFW (TCP on 4880) Source port: 47401 TTL: 237 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 4880) Source port: 47401 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 171.104.81.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 BIV	2026-07-13 07:43:33 (5 days ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 11084. Automated t ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 11084. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇩🇪 femboy.cat	2026-07-13 03:36:02 (5 days ago)	Port scan to tcp/5342 from 171.104.81.249	Brute-Force
🇺🇸 donarev419	2026-07-11 07:43:15 (1 week ago)	Connection to port 1188 with data transfer. Data preview: �	Port Scan Hacking
🇺🇸 xmission.com	2026-07-10 09:25:03 (1 week ago)	Blocked by UFW (TCP on 2124) Source port: 60724 TTL: 235 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 2124) Source port: 60724 TTL: 235 Packet length: 44 TOS: 0x08 This report (for 171.104.81.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-07-10 00:03:52 (1 week ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (53 bytes of payload); 8554 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (53 bytes of payload); 8554 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Axel	2026-07-09 15:09:20 (1 week ago)	Blocked by UFW on LAXHH [2086/tcp] \| SPT: 55108 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2086/tcp] \| SPT: 55108 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 129.225.33.53

🇺🇸 192.169.201.223

🇨🇳 125.124.226.217

🇺🇸 92.204.138.58

🇩🇪 69.5.169.14

🇳🇱 45.148.10.152

🇬🇧 35.203.210.207

🇨🇳 219.145.39.164

🇦🇺 203.196.42.114

🇭🇰 185.242.232.164

🇳🇱 185.223.235.15

🇺🇸 147.185.132.109

🇻🇳 116.99.171.3

🇨🇦 85.217.149.57

🇳🇱 34.90.66.217

🇷🇴 2.57.121.25

🇧🇪 198.235.24.167

🇷🇺 193.232.179.136

🇺🇸 98.247.220.108

🇦🇪 92.99.43.23