AbuseIPDB » 183.132.91.2
183.132.91.2
This IP was reported 7 times. Confidence of
Abuse
is 48% : ?
ISP
CHINANET-ZJ Ningbo node network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
hz.zj.cn
Country
🇨🇳
China
City
Shanghai, Shanghai
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 183.132.91.2 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
183.132.91.2 was first reported on
July 18th 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-07-20 17:43:35
(2 days ago)
PROTO=TCP DPT=23
Port Scan
Hacking
🇫🇷
security.rdmc.fr
2026-07-20 15:08:04
(2 days ago)
Port Scan Attack proto:TCP src:52075 dst:23
Port Scan
🇺🇸
pcprincipal8752
2026-07-20 14:59:51
(2 days ago)
NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable | 2) system | 3) shell | 4) sh | 5) linuxshell | ...
show more
NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable | 2) system | 3) shell | 4) sh | 5) linuxshell | 6) ping ;sh | 7) /bin/busybox | 8) iptables -F | 9) /bin/busybox echo > /tmp/.fxcat && sh /tmp/.fxcat && cd /tmp/ | 10) /bin/busybox echo > /var/.fxcat && sh /var/.fxcat && cd /var/ | 11) /bin/busybox echo > /var/run/.fxcat && sh /var/run/.fxcat && cd /var/run/ | 12) /bin/busybox echo > /var/tmp/.fxcat && sh /var/tmp/.fxcat && cd /var/tmp/ | 13) /bin/busybox echo > /dev/.fxcat && sh /dev/.fxcat && cd /dev/ | 14) /bin/busybox echo > /dev/shm/.fxcat && sh /dev/shm/.fxcat && cd /dev/shm/ | 15) /bin/busybox echo > /etc/.fxcat && sh /etc/.fxcat && cd /etc/ | 16) /bin/busybox echo > /mnt/.fxcat && sh /mnt/.fxcat && cd /mnt/ | 17) /bin/busybox echo > /usr/.fxcat && sh /usr/.fxcat && cd /usr/ | 18) /bin/busybox echo > /boot/.fxcat && sh /boot/.fxcat && cd /boot/ | 19) /bin/busybox echo > /home/.fxcat && sh /home/.fxcat && cd /home/ | 20) for pid in /proc/[0-9]*; do pid_num="${pid##*/}"; if [ -r "$pid/maps" ]; then sus
show less
Brute-Force
🇵🇱
mkey
2026-07-20 14:40:04
(2 days ago)
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show more
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-07-20 16:37:15 | LAST=2026-07-20 16:37:16. Last seen 2026-07-20 16:37:16.
show less
Port Scan
🇺🇸
cybsecaoccol
2026-07-20 13:35:05
(2 days ago)
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan
Hacking
🇺🇸
MPL
2026-07-18 21:52:11
(4 days ago)
tcp/23 (2 or more attempts)
Port Scan
2026-07-18 21:33:16
(4 days ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: