61.160.29.230
Classification: Malicious
61.160.29.230 is a malicious IP address in Nanjing, CN. 20 sightings from 6 threat sources (Mail Spammer, IMAP Attacker), last seen 2026-10-17.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-01-07 09:37:12 | 2026-10-17 21:36:25 | attacker malicious-activity | |
| Mail Spammer | Blocklist.de | 2023-07-18 03:31:20 | 2023-10-25 02:53:08 | malicious-activity | |
| IMAP Attacker | Blocklist.de | 2023-07-18 03:25:41 | 2023-10-25 02:41:01 | malicious-activity | |
| Malicious Host | HoneyDB | 2023-01-07 00:00:00 | 2023-10-08 00:00:00 | malicious-activity | |
| Malicious URL | Hybrid-Analysis | 2023-08-28 00:15:04 | 2023-08-28 00:15:04 | ||
| Mail Spammer | Abuseat.org | 2023-01-07 09:37:12 | 2023-01-07 09:37:12 | ||
| Bruteforce | Maltiverse | 2022-10-09 12:33:26 | 2023-01-07 09:21:39 | malicious-activity | |
| SSH Attacker | Maltiverse | 2022-10-10 08:30:05 | 2023-01-07 07:59:55 | malicious-activity | |
| Mail Spammer | Maltiverse | 2022-10-10 13:10:37 | 2023-01-07 00:25:25 | malicious-activity | |
| HTTP Scrapper | Maltiverse | 2022-11-14 05:04:02 | 2023-01-05 19:47:05 | anomalous-activity | |
| Hacking | Maltiverse | 2022-10-10 12:00:25 | 2023-01-03 16:15:23 | malicious-activity | |
| Malicious Host | Maltiverse | 2022-10-27 09:46:33 | 2023-01-03 01:19:02 | compromised malicious-activity | |
| Port Scanner | Maltiverse | 2022-10-09 21:30:29 | 2022-12-30 05:07:27 | anomalous-activity | |
| IMAP Attacker | Maltiverse | 2022-10-17 10:06:16 | 2022-12-23 05:00:38 | malicious-activity | |
| HTTP Attacker | Maltiverse | 2022-10-10 13:10:37 | 2022-12-23 05:00:38 | malicious-activity | |
| FTP Attacker | Maltiverse | 2022-10-20 11:10:38 | 2022-12-06 10:10:42 | malicious-activity | |
| Phishing | Maltiverse | 2022-11-28 20:25:08 | 2022-11-28 20:25:08 | malicious-activity | |
| DDoS attack | Maltiverse | 2022-10-30 05:19:42 | 2022-10-30 05:19:42 | malicious-activity | |
| SSH Attacker | Blocklist.de | 2022-07-29 02:10:44 | 2022-07-29 02:10:44 | malicious-activity |
Tags
mail spam attacker imap pop3 sasl bot ssh bruteforceWhois information
- AS name
- AS4134 CHINANET jiangsu province network
- AS registry
- apnic
- AS date
- 2000-10-11 00:00:00
- AS CIDR
- 61.160.0.0/16
- CIDR
- 61.160.0.0/16
- Registrant
- CHINANET jiangsu province network
- Address
- 260 Zhongyang Road,Nanjing 210037
- City
- Nanjing
- Postal code
- 210000
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2022-07-29 02:10:44
- Last updated
- 2026-10-17 21:36:26
Malicious IPs in the same CIDR
61.160.95.126 61.160.64.179 61.160.25.120 61.160.10.126 61.160.83.138 61.160.45.109 61.160.29.230 61.160.30.105 61.160.90.218 61.160.25.158 61.160.72.242 61.160.89.198 61.160.98.122 61.160.85.118 61.160.30.182 61.160.25.118 61.160.71.170 61.160.122.234 61.160.105.66 61.160.213.254 61.160.66.130