JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

183.155.106.31

Recent Activity

Abuse confidence score ?

58% Elevated

12 reports

11 reporters · latest 2 days ago

ISP	CHINANET-ZJ Jinhua node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 183.155.106.31

Export CSV

This IP address has been reported a total of 12 times from 11 distinct sources. 183.155.106.31 was first reported on September 29th 2026, and the most recent report was 2 days ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; Poland with 2 reports; Germany with 1 report. The most common categories in these recent reports were: Port Scan 10 times; Brute-Force 4 times; Hacking 4 times; IoT Targeted 3 times; Exploited Host 1 time; Other 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 genjikai666	2026-10-08 00:30:56 (2 days ago)	Automated honeypot & gateway log: Honeypot intrusion on port 2223: executed 22 malicious commands (e ... show more Automated honeypot & gateway log: Honeypot intrusion on port 2223: executed 22 malicious commands (enable, system...). Detected on honeypot/firewall sensors. show less	Port Scan Brute-Force Exploited Host IoT Targeted
Anonymous	2026-10-06 05:01:23 (4 days ago)	2026-10-06 05:01:13 warning[7998420]: host unknown[183.155.106.31]: unauthorized telnet ac ... show more 2026-10-06 05:01:13 warning[7998420]: host unknown[183.155.106.31]: unauthorized telnet access attempted: tcp/23 show less	Port Scan Brute-Force
🇺🇸 MPL	2026-10-05 23:13:23 (4 days ago)	tcp/23 (6 or more attempts)	Port Scan
🇵🇱 mkey	2026-10-04 18:50:02 (6 days ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-10-04 20:47:32 \| LAST=2026-10-04 20:47:33. Last seen 2026-10-04 20:47:33. show less	Port Scan
Anonymous	2026-10-04 17:49:07 (6 days ago)	Oct 3 20:04:41 localhost kernel: [119417352.378896] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Oct 3 20:04:41 localhost kernel: [119417352.378896] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=183.155.106.31 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=46 ID=6695 DF PROTO=TCP SPT=56683 DPT=23 WINDOW=28880 RES=0x00 SYN URGP=0 Oct 3 20:04:41 localhost kernel: [119417352.378936] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=183.155.106.31 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=46 ID=6695 DF PROTO=TCP SPT=56683 DPT=23 SEQ=3556235324 ACK=0 WINDOW=28880 RES=0x00 SYN URGP=0 OPT (020405A40402080A2522C21B0000000001030306) Oct 4 13:49:06 localhost kernel: [119481216.428790] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=183.155.106.31 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=46 ID=59123 DF PROTO=TCP SPT=41557 DPT=23 WINDOW=28880 RES=0x00 SYN URGP=0 Oct 4 13:49:06 localhost kernel: [119481216.428817] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:0 show less	Port Scan
🇵🇱 mkey	2026-10-04 15:55:02 (6 days ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-10-04 17:53:24 \| LAST=2026-10-04 17:53:25. Last seen 2026-10-04 17:53:25. show less	Port Scan
🇳🇱 EGP Abuse Dept	2026-10-04 02:49:38 (6 days ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 RAP	2026-10-02 22:46:51 (1 week ago)	2026-10-02 22:46:51 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-10-01 09:06:02 (1 week ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET	Hacking IoT Targeted Port Scan
🇺🇸 pablo	2026-10-01 03:00:07 (1 week ago)	SSH honeypot (Cowrie) recorded 28 events over 1m. Activity: SSH connection to honeypot; SSH credenti ... show more SSH honeypot (Cowrie) recorded 28 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; post-auth command execution; root credential accepted. Usernames tried: default, root. Passwords tried: 1cDuLJ7c, star123. Commands: enable \| system \| shell Wazuh rules: 100100,100101,100103,100106. show less	Hacking Brute-Force SSH
Anonymous	2026-09-30 04:07:11 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking
🇺🇸 ajcyberdefense	2026-09-29 21:28:07 (1 week ago)	Cowrie honeypot: TELNET brute-force login, then ran commands and wrote files to disk. 2 sessions 202 ... show more Cowrie honeypot: TELNET brute-force login, then ran commands and wrote files to disk. 2 sessions 2026-09-29 21:27 to 2026-09-29 21:28 UTC. show less	Brute-Force IoT Targeted

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇩 102.223.209.43

🇩🇪 35.242.253.35

🇦🇺 14.102.84.100

🇧🇪 198.235.24.170

🇵🇱 194.180.49.121

🇪🇨 186.68.83.105

🇮🇩 161.248.226.30

🇫🇷 137.74.44.39

🇨🇳 116.132.255.127

🇳🇱 109.160.32.32

🇧🇩 103.159.2.113

🇨🇳 47.95.234.23

🇺🇦 31.43.239.9

🇳🇱 2400:cb00:555:1000:ef0f:b889:fd5b:d2c

🇰🇷 221.165.6.102

🇨🇳 116.132.219.4

🇨🇦 85.217.149.55

🇸🇬 34.126.85.220

🇨🇳 14.155.241.203

🇳🇱 2400:cb00:20:1000:6580:fc1e:1d0f:5056