49.71.101.99
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET jiangsu province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Nanjing, Jiangsu
Abuse Reports
Total reports
37 from
29 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-18 04:31:25 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 KPS |
PortscanT
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 17 hits on ports [5555] (automated)
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-18 00:51:33 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇦🇺 FEWA |
Fail2Ban Ban Triggered
|
Hacking Brute-Force | |
| 🇳🇱 Tsumugi Kotobuki |
Telnet Brute-Force | Events: 1 | Ports: 23/Telnet | Auth: password(1x) | F2B/telnet-honeypot-bruteforce@2026-10-17T16:13:39Z
|
Brute-Force | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 RAP |
2026-10-16 14:02:48 UTC Unauthorized activity to TCP port 8080. Web App
|
Port Scan Web App Attack | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged,ndpi_tcp_issues,ndpi_probing_attempt
|
Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:16463 dst:23
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-16 05:49:00 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 jonahtebaa |
SSH tarpit capture
|
Port Scan Brute-Force SSH | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-15 UTC.
|
Exploited Host | |
| 🇺🇸 sargetun |
Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.
|
Brute-Force SSH Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown