JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 171.214.45.4

171.214.45.4 was found in our database!

This IP was reported 405 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	sctel.com.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 171.214.45.4

Whois 171.214.45.4

IP Abuse Reports for 171.214.45.4:

This IP address has been reported a total of 405 times from 174 distinct sources. 171.214.45.4 was first reported on May 22nd 2025, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 JPPO	2026-06-20 08:52:40 (18 hours ago)	Multiport scan 8 ports : 53(x8) 123(x4) 161(x6) 500(x8) 1194(x6) 1701(x3) 1900(x4) 5060(x5)	Port Scan
Anonymous	2026-06-19 05:05:02 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇩🇪 ghostwarriors	2026-06-18 12:20:27 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 Marc	2026-06-18 09:50:58 (2 days ago)	2026-06-18T11:50:57.128310+02:00 mx1 postfix/submission-relay/smtpd[2067787]: improper command pipel ... show more 2026-06-18T11:50:57.128310+02:00 mx1 postfix/submission-relay/smtpd[2067787]: improper command pipelining after CONNECT from unknown[171.214.45.4]: EHLO 2026-06-18T11:50:57.583840+02:00 mx1 postfix/submission-relay/smtpd[2067787]: improper command pipelining after CONNECT from unknown[171.214.45.4]: HELP 2026-06-18T11:50:58.048235+02:00 mx1 postfix/submission-relay/smtpd[2067787]: improper command pipelining after CONNECT from unknown[171.214.45.4]: GET / HTTP/1.0 show less	Brute-Force Email Spam
🇨🇦 Blinker73	2026-06-18 09:43:04 (2 days ago)	2026-06-18T05:43 kernel: OUT= SRC=171.214.45.4 LEN=44 TOS=0x00 PREC=0x00 TTL=29 ID=49566 PROTO ... show more 2026-06-18T05:43 kernel: OUT= SRC=171.214.45.4 LEN=44 TOS=0x00 PREC=0x00 TTL=29 ID=49566 PROTO=TCP SPT=47609 DPT=1723 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-18T05:43 kernel: OUT= SRC=171.214.45.4 LEN=44 TOS=0x00 PREC=0x00 TTL=14 ID=61771 PROTO=TCP SPT=47609 DPT=995 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-18T05:43 kernel: OUT= SRC=171.214.45.4 LEN=44 TOS=0x00 PREC=0x00 TTL=13 ID=40142 PROTO=TCP SPT=47611 DPT=1723 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇩🇪 IP Analyzer	2026-06-18 07:00:00 (2 days ago)	Unauthorized connection attempt from IP address 171.214.45.4 on Port 110(POP3)	Port Scan
🇩🇪 IP Analyzer	2026-06-18 06:31:30 (2 days ago)	Unauthorized connection attempt from IP address 171.214.45.4	Brute-Force
🇧🇷 opastorello	2026-06-16 10:52:42 (4 days ago)	T-Pot honeypot: 37 hits in 15min on port(s) 1467 (P0f/Suricata/Honeytrap). Port scan / unsolicited c ... show more T-Pot honeypot: 37 hits in 15min on port(s) 1467 (P0f/Suricata/Honeytrap). Port scan / unsolicited connection. Automated report. show less	Port Scan
🇳🇴 tmiland	2026-06-14 18:33:19 (6 days ago)	Suricata Detected 10 attacks from 171.214.45.4.; GPL DNS named version attempt; IP: 171.214.45.4; Po ... show more Suricata Detected 10 attacks from 171.214.45.4.; GPL DNS named version attempt; IP: 171.214.45.4; Ports: 50782; Direction: to_server; Trigger: DNS; Category: Attempted Information Leak; Severity: 2 show less	Brute-Force
🇪🇸 masterguru	2026-06-13 02:27:43 (1 week ago)	Port Scan detected from 171.214.45.4 (CN/China/-). 11 hits in the last 125 seconds (0-122)	Port Scan
🇮🇹 eliosbrocchi	2026-06-11 19:07:13 (1 week ago)	2026-06-11T21:06:51.130377+02:00 thunderchild sshd[1891688]: refused connect from 171.214.45.4 (171. ... show more 2026-06-11T21:06:51.130377+02:00 thunderchild sshd[1891688]: refused connect from 171.214.45.4 (171.214.45.4) 2026-06-11T21:06:56.724385+02:00 thunderchild sshd[1891702]: refused connect from 171.214.45.4 (171.214.45.4) 2026-06-11T21:07:02.057247+02:00 thunderchild sshd[1891714]: refused connect from 171.214.45.4 (171.214.45.4) 2026-06-11T21:07:07.365969+02:00 thunderchild sshd[1891726]: refused connect from 171.214.45.4 (171.214.45.4) 2026-06-11T21:07:12.735906+02:00 thunderchild sshd[1891742]: refused connect from 171.214.45.4 (171.214.45.4) ... show less	VPN IP
🇺🇸 Nova Reed	2026-06-11 18:08:06 (1 week ago)	Jun 12 02:07:24 racknerd-df72780 kernel: [5562894.705593] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:9 ... show more Jun 12 02:07:24 racknerd-df72780 kernel: [5562894.705593] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=171.214.45.4 DST=67.215.241.238 LEN=44 TOS=0x08 PREC=0x20 TTL=33 ID=6034 PROTO=TCP SPT=60325 DPT=5432 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 12 02:07:44 racknerd-df72780 kernel: [5562914.697902] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=171.214.45.4 DST=67.215.241.238 LEN=44 TOS=0x08 PREC=0x20 TTL=32 ID=43906 PROTO=TCP SPT=60325 DPT=8093 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 12 02:08:05 racknerd-df72780 kernel: [5562935.034342] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=171.214.45.4 DST=67.215.241.238 LEN=44 TOS=0x08 PREC=0x20 TTL=33 ID=32286 PROTO=TCP SPT=60325 DPT=8600 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Brute-Force SSH
🇩🇪 AS213449.net	2026-06-11 05:49:04 (1 week ago)	06/11/2026-07:48:51.198343 src=171.214.45.4 dst=89.144.63.119:3306 proto=6 msg=ET SCAN Suspicious in ... show more 06/11/2026-07:48:51.198343 src=171.214.45.4 dst=89.144.63.119:3306 proto=6 msg=ET SCAN Suspicious inbound to mySQL port 3306 show less	SQL Injection
🇺🇸 NXTwoThou	2026-06-11 05:44:59 (1 week ago)	IMAP	Port Scan
🇩🇪 AS213449.net	2026-06-11 04:02:01 (1 week ago)	06/11/2026-06:01:57.851957 src=171.214.45.4 dst=89.144.63.21:1433 proto=6 msg=ET SCAN Suspicious inb ... show more 06/11/2026-06:01:57.851957 src=171.214.45.4 dst=89.144.63.21:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection

Showing 1 to 15 of 405 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 43.240.64.77

🇩🇪 212.227.31.187

🇰🇷 211.223.107.86

🇺🇸 205.210.31.77

🇺🇸 205.210.31.76

🇺🇸 205.210.31.75

🇪🇹 196.189.126.10

🇬🇹 190.115.3.71

🇲🇽 187.191.48.23

🇨🇳 175.30.48.29

🇮🇩 163.7.4.169

🇺🇸 162.216.149.108

🇮🇩 157.15.78.122

🇷🇴 141.98.83.48

🇮🇩 103.156.164.115

🇳🇱 89.21.67.186

🇺🇸 66.132.195.25

🇸🇬 47.128.115.66

🇺🇸 44.233.19.43

🇹🇷 37.148.209.106