JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 183.159.106.40

183.159.106.40 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 67%: ?

67%

ISP	CHINANET-ZJ Hangzhou node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Shaoxing, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 183.159.106.40

Whois 183.159.106.40

IP Abuse Reports for 183.159.106.40:

This IP address has been reported a total of 15 times from 12 distinct sources. 183.159.106.40 was first reported on July 20th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-23 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 Admins@FBN	2026-07-23 08:31:25 (1 week ago)	FW-PortScan: Traffic Blocked srcport=49039 dstport=23	Port Scan
🇫🇷 security.rdmc.fr	2026-07-22 10:22:39 (1 week ago)	Port Scan Attack proto:TCP src:46908 dst:23	Port Scan
🇮🇳 Parth Maniar	2026-07-22 05:13:22 (1 week ago)	This IP address carried out 2 port scanning attempts on 21-07-2026. For more information or to repor ... show more This IP address carried out 2 port scanning attempts on 21-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇦🇹 urnilxfgbez	2026-07-21 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2026-07-21 14:15:39 (1 week ago)	2026-07-21 14:15:39 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 sthoyer.de	2026-07-21 00:22:16 (1 week ago)	Jul 21 02:22:15 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more Jul 21 02:22:15 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=183.159.106.40 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=17389 DF PROTO=TCP SPT=39749 DPT=23 WINDOW=28880 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 pcprincipal8752	2026-07-20 23:54:33 (1 week ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) ping ;sh \| 7) /bin/busybox \| 8) iptables -F \| 9) /bin/busybox echo > /tmp/.fxcat && sh /tmp/.fxcat && cd /tmp/ \| 10) /bin/busybox echo > /var/.fxcat && sh /var/.fxcat && cd /var/ \| 11) /bin/busybox echo > /var/run/.fxcat && sh /var/run/.fxcat && cd /var/run/ \| 12) /bin/busybox echo > /var/tmp/.fxcat && sh /var/tmp/.fxcat && cd /var/tmp/ \| 13) /bin/busybox echo > /dev/.fxcat && sh /dev/.fxcat && cd /dev/ \| 14) /bin/busybox echo > /dev/shm/.fxcat && sh /dev/shm/.fxcat && cd /dev/shm/ \| 15) /bin/busybox echo > /etc/.fxcat && sh /etc/.fxcat && cd /etc/ \| 16) /bin/busybox echo > /mnt/.fxcat && sh /mnt/.fxcat && cd /mnt/ \| 17) /bin/busybox echo > /usr/.fxcat && sh /usr/.fxcat && cd /usr/ \| 18) /bin/busybox echo > /boot/.fxcat && sh /boot/.fxcat && cd /boot/ \| 19) /bin/busybox echo > /home/.fxcat && sh /home/.fxcat && cd /home/ \| 20) for pid in /proc/[0-9]; do pid_num="${pid##/}"; if [ -r "$pid/maps" ]; then sus show less	Brute-Force
🇩🇪 Admins@FBN	2026-07-20 23:33:14 (1 week ago)	FW-PortScan: Traffic Blocked srcport=38887 dstport=23	Port Scan
🇳🇱 knock	2026-07-20 20:23:55 (1 week ago)	Knock-Knock honeypot brute-force: Telnet (9 total hits)	Brute-Force
🇫🇷 security.rdmc.fr	2026-07-20 19:31:55 (1 week ago)	Port Scan Attack proto:TCP src:45203 dst:23	Port Scan
Anonymous	2026-07-20 18:22:07 (1 week ago)	Unauthorized connection to Telnet port 23	Port Scan
🇫🇮 6kilowatti	2026-07-20 15:58:49 (1 week ago)	2026-07-20T18:58:48.394791+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2 ... show more 2026-07-20T18:58:48.394791+03:00 oh6ah kernel: [UFW BLOCK] IN=enp2s0 OUT= MAC=00:26:18:a8:d6:75:2e:2d:5e:71:aa:73:08:00 SRC=183.159.106.40 DST=192.168.0.102 LEN=60 TOS=0x18 PREC=0x20 TTL=50 ID=22853 DF PROTO=TCP SPT=45869 DPT=23 WINDOW=28880 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 iamxorum	2026-07-20 15:10:37 (1 week ago)	2026-07-20T15:10:37.071043+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2: ... show more 2026-07-20T15:10:37.071043+00:00 XRM-01 kernel: [TELNET-TRAP] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=183.159.106.40 DST=46.62.222.43 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=33310 DF PROTO=TCP SPT=44744 DPT=23 WINDOW=28880 RES=0x00 SYN URGP=0 ... show less	Port Scan IoT Targeted
Anonymous	2026-07-20 14:19:14 (1 week ago)	denied traffic to a honeypot network. destination port 23.	Port Scan Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 138.246.253.7

🇨🇳 106.12.149.123

🇩🇪 31.76.57.198

🇺🇸 199.101.196.107

🇧🇪 198.235.24.246

🇺🇸 184.105.139.67

🇨🇳 180.76.195.169

🇺🇸 172.172.131.149

🇹🇭 171.4.248.182

🇺🇸 169.228.66.212

🇺🇸 165.154.182.30

🇻🇪 154.216.254.24

🇫🇮 147.185.133.226

🇺🇸 142.111.152.191

🇳🇱 138.226.239.12

🇺🇸 136.66.183.204

🇻🇳 116.110.210.225

🇨🇳 116.62.152.62

🇨🇳 114.220.238.224

🇨🇳 111.176.101.236