1.85.216.71

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
135 reports
27 reporters ยท latest 4 months ago
ISP
CHINANET SHAANXI PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
xa.sn.cn
Country
๐Ÿ‡จ๐Ÿ‡ณ China
City
Xi'an, Shaanxi
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

1.85.216.71 has been reported 135 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
135 from 27 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ Axel
Blocked by UFW on LAXHH [9080/tcp] | SPT: 15956 | TTL: 236 | LEN: 44 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท jonahtebaa
SSH tarpit capture
Port Scan Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/5432 (2 or more attempts)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/12322
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Justin F. | AS204464
Honeypot [nx-infrastructure]: Large payload (1457 bytes); 10020 [1] TCP Reported by: Justin F.
Bad Web Bot
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ sumnone
Port probing on unauthorized port 9001
Port Scan Hacking Exploited Host
๐Ÿ‡ฆ๐Ÿ‡บ LiftUp Hosting
Honeypot hit: Unauthorized traffic (243 bytes of payload); 1095 [1] TCP
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ณ Mr.Singh
NFT blocked 1.85.216.71 on 16-Apr-2026..
Port Scan Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/6666 (2 or more attempts)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/12358
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/50000 (2 or more attempts)
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 12192 [1] TCP
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ฉ๐Ÿ‡ช 207.154.204.0
๐Ÿ‡ณ๐Ÿ‡ฑ 185.136.15.17
๐Ÿ‡ฎ๐Ÿ‡ณ 182.95.127.110
๐Ÿ‡ง๐Ÿ‡ท 177.74.211.254
๐Ÿ‡บ๐Ÿ‡ธ 165.22.191.116
๐Ÿ‡ธ๐Ÿ‡ฌ 68.183.183.226
๐Ÿ‡บ๐Ÿ‡ธ 20.65.202.50
๐Ÿ‡จ๐Ÿ‡ณ 8.129.229.164
๐Ÿ‡ซ๐Ÿ‡ท 176.31.80.147
๐Ÿ‡ธ๐Ÿ‡ฌ 167.99.66.236
๐Ÿ‡ซ๐Ÿ‡ฎ 80.222.157.250
๐Ÿ‡ง๐Ÿ‡ฌ 79.124.58.158
๐Ÿ‡ฐ๐Ÿ‡ท 175.209.156.146
๐Ÿ‡ฆ๐Ÿ‡ท 170.81.230.241
๐Ÿ‡ต๐Ÿ‡ฐ 153.117.69.171
๐Ÿ‡ต๐Ÿ‡ฑ 94.254.244.211
๐Ÿ‡ซ๐Ÿ‡ท 85.217.140.50
๐Ÿ‡ซ๐Ÿ‡ท 51.159.111.44
๐Ÿ‡ง๐Ÿ‡ช 35.187.35.191
๐Ÿ‡ง๐Ÿ‡ช 34.77.173.196
feedback