AbuseIPDB » 1.85.54.18

1.85.54.18 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%
ISP CHINANET SHAANXI PROVINCE NETWORK
Usage Type Fixed Line ISP
ASN AS4134
Domain Name xa.sn.cn
Country ๐Ÿ‡จ๐Ÿ‡ณ China
City Xi'an, Shaanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

IP Abuse Reports for 1.85.54.18:

This IP address has been reported a total of 60 times from 31 distinct sources. 1.85.54.18 was first reported on , and the most recent report was .

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/23
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-07-23 21:45:59 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฆ๐Ÿ‡น Pingger Shikkoken
Hacking Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-07-23 20:16:23 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:8838 dst:23
Port Scan
๐Ÿ‡ฆ๐Ÿ‡น centurion
Port Scan Hacking Brute-Force
๐Ÿ‡ญ๐Ÿ‡ฐ mutebot.net
SRC=1.85.54.18, PROTO=TCP, SPT=8838, DPT=23
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-07-23 17:19:08 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฎ๐Ÿ‡ณ evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
๐Ÿ‡ฆ๐Ÿ‡น urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-07-22 15:10:22 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-07-22 10:08:11 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-07-22 08:23:43 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-07-22 02:36:25 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan

Showing 1 to 15 of 60 reports


Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ท 192.141.113.57
๐Ÿ‡ง๐Ÿ‡ท 131.100.222.159
๐Ÿ‡จ๐Ÿ‡ณ 117.50.211.254
๐Ÿ‡ฌ๐Ÿ‡ท 83.235.21.125
๐Ÿ‡ฆ๐Ÿ‡ท 186.122.8.43
๐Ÿ‡ซ๐Ÿ‡ฎ 135.181.83.160
๐Ÿ‡ฌ๐Ÿ‡ง 86.31.9.150
๐Ÿ‡ณ๐Ÿ‡ฟ 45.133.7.11
๐Ÿ‡ญ๐Ÿ‡ฐ 2602:ffe4:8:1001::5
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.171.149.57
๐Ÿ‡จ๐Ÿ‡ฆ 85.217.149.16
๐Ÿ‡บ๐Ÿ‡ธ 66.132.172.147
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.147
๐Ÿ‡ฌ๐Ÿ‡ญ 41.211.4.225
๐Ÿ‡ฎ๐Ÿ‡ฉ 36.92.140.209
๐Ÿ‡ฐ๐Ÿ‡ท 211.221.196.103
๐Ÿ‡ฌ๐Ÿ‡ง 77.98.95.9
๐Ÿ‡บ๐Ÿ‡ธ 66.249.74.169
๐Ÿ‡บ๐Ÿ‡ธ 52.159.245.144