AbuseIPDB » 182.103.209.249
182.103.209.249 was found in our database!
This IP was reported 60 times. Confidence of Abuse is 100%: ?
| ISP | CHINANET JIANGXI PROVINCE NETWORK |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS4134 |
| Domain Name | bta.net.cn |
| Country | 🇨🇳 China |
| City | Nanchang, Jiangxi |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 182.103.209.249:
This IP address has been reported a total of 60 times from 36 distinct sources. 182.103.209.249 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:36998 dst:23
|
Port Scan | ||
| 🇩🇪 DasDuo |
|
Port Scan Hacking Brute-Force | ||
| 🇳🇱 soverin |
Network scan on port 23
|
Email Spam | ||
| 🇦🇹 centurion |
|
Port Scan IoT Targeted Brute-Force | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
| 🇺🇸 IndigoRidge |
Knock-Knock TNET honeypot activity; time=2026-07-24 05:28:18; username=useradmin
|
Brute-Force | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:44274 dst:23
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/23 (2 or more attempts)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-07-23 05:17:30 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇦🇷 Bruno |
Port Scanner: 182.103.209.249
|
Port Scan | ||
| 🇺🇸 RAP |
2026-07-23 01:48:50 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/23 (4 or more attempts)
|
Port Scan | ||
| 🇺🇸 RAP |
2026-07-22 22:50:21 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
| 🇺🇸 drewf.ink |
[17:33] Attempted telnet login with credentials admin:i****r
|
Brute-Force Exploited Host |
Showing 1 to 15 of 60 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩