1.85.219.21

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
68 reports
18 reporters · latest 4 months ago
ISP
CHINANET SHAANXI PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
xa.sn.cn
Country
🇨🇳 China
City
Xi'an, Shaanxi
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

1.85.219.21 has been reported 68 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
68 from 18 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 MPL
tcp/3052 (2 or more attempts)
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: WebAssembly module exploitation attempt on port 6379. Severity: MEDIUM. Aaran.cloud
Hacking Web App Attack
🇬🇧 PeravixGroup
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
Port Scan Bad Web Bot
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud
Port Scan Bad Web Bot
🇬🇧 PeravixGroup
Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud
Hacking Exploited Host
🇬🇧 PeravixGroup
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud
Hacking Exploited Host
🇩🇪 zupan
Blocked by UFW on vps [12281/tcp] | SPT: 65023 | TTL: 237 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/16000
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇧🇾 StatsMe
2026-04-01T14:08:06.330718+0300 ET SCAN NMAP -sS window 1024
Port Scan
🇺🇸 MPL
tcp/12382
Port Scan
🇩🇪 _ArminS_
SP-Scan 43328:9530 detected 2026.03.13 05:24:55 blocked until 2026.05.01 23:27:42
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 164.92.193.233
🇧🇷 45.238.2.117
🇭🇳 181.115.118.96
🇨🇦 99.246.252.8
🇷🇺 85.113.41.196
🇳🇱 64.205.72.23
🇷🇺 31.173.67.115
🇰🇷 220.86.125.57
🇧🇷 200.124.165.161
🇬🇧 193.163.125.86
🇺🇸 162.216.149.158
🇮🇳 103.68.40.36
🇩🇪 92.209.7.29
🇺🇸 74.124.145.63
🇻🇳 222.254.69.43
🇨🇭 209.99.188.168
🇮🇳 202.142.122.74
🇦🇷 190.104.36.245
🇺🇸 162.216.150.210
🇮🇳 150.241.244.61
feedback