115.204.185.49

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
24 reports
17 reporters · latest 3 months ago
ISP
CHINANET-ZJ Hangzhou node network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
hz.zj.cn
Country
🇨🇳 China
City
Hangzhou, Zhejiang
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

115.204.185.49 has been reported 24 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
24 from 17 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 RAP
2026-07-19 05:59:56 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 HamSammich
Automated sensor: 51 telnet brute-force attempts over the last 24h (latest 2026-07-18T23:42Z). Usernames tried: root, admin, haver, hikvision.
Brute-Force IoT Targeted
Anonymous
Malware upload over SSH: 'wget.sh' (600 Bytes), SHA256: e1568cae97252fa9350ef2d2d381975c8bd29e11f126fb06bd64e92a73d7beb9.
Hacking SSH
🇺🇸 RAP
2026-07-18 18:33:31 UTC Unauthorized activity to TCP port 2323. Telnet
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:58145 dst:23
Port Scan
🇺🇸 MPL
tcp/2323 (2 or more attempts)
Port Scan
🇩🇪 check-the-sum.fr
Port Scanning
Port Scan
🇵🇱 sefinek.net
Blocked by UFW on PL02 [23/tcp] | SPT: 37205 | TTL: 41 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted Brute-Force
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 RAP
2026-07-17 10:29:26 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
Anonymous
Unauthorized connection to Telnet port 23
Port Scan
🇫🇷 EDSL
[SRV-VPN1] Blocked by SysWarden Firewall (Telnet IoT Attack)
Brute-Force Port Scan IoT Targeted
🇬🇧 Nov
Unauthorized access attempt (tcp/23)
Port Scan
🇺🇸 RAP
2026-07-16 17:04:12 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 35.210.110.106
🇸🇬 212.73.148.46
🇻🇪 201.243.243.196
🇬🇧 198.244.240.90
🇭🇰 194.187.178.41
🇳🇱 193.47.62.168
🇧🇷 170.78.156.73
🇺🇸 140.186.214.5
🇮🇩 103.182.192.6
🇨🇦 96.1.40.151
🇨🇦 54.39.203.64
🇧🇷 45.178.17.229
🇮🇳 203.212.200.101
🇺🇸 199.165.159.118
🇨🇳 182.43.164.191
🇺🇦 178.216.228.83
feedback