1.85.219.158
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- CHINANET SHAANXI PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- xa.sn.cn
- Country
- 🇨🇳 China
- City
- Xi'an, Shaanxi
No reports in the last 60 days
1.85.219.158 has been reported 125 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
125 from
27 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 azminawwar |
[1.85.219.158] triggered by honeypot on port [3306], Timestamp [2026-08-11T03:36:21Z] UPmFvHu}N obs,@T`0%)[<z +/,0 E + 3>k sTP %58TK9dQ}<sD~!'_^5J"y+9kUTeS{{,R>34qb
|
Port Scan Hacking | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [5003/tcp] | SPT: 31671 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 5269
|
Port Scan Hacking Exploited Host | |
| Anonymous |
unsolicited connect TCP dport 1433 (sport 37276)
|
Hacking | |
| 🇺🇸 Axel |
Blocked by UFW on LAXHH [51004/tcp] | SPT: 10897 | TTL: 235 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 9009 [1] TCP
|
Port Scan | |
| 🇩🇪 femboy.cat |
Port scan to tcp/995 from 1.85.219.158
|
Brute-Force | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
|
Port Scan Bad Web Bot | |
| 🇺🇸 MPL |
tcp/7272
|
Port Scan | |
| 🇺🇸 MPL |
tcp/12360
|
Port Scan | |
| 🇺🇸 MPL |
tcp/12219
|
Port Scan | |
| 🇩🇪 banankicks |
Unauthorized connection attempt detected from IP address 1.85.219.158 to port 22 (banankicks-server) [C]
|
Brute-Force Exploited Host | |
| 🇮🇳 Mr.Singh |
NFT blocked 1.85.219.158 on 06-Mar-2026..
|
Port Scan Brute-Force | |
| 🇺🇸 MPL |
tcp/18264 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown