JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 115.205.108.145

115.205.108.145 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET-ZJ Hangzhou node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 115.205.108.145

Whois 115.205.108.145

IP Abuse Reports for 115.205.108.145:

This IP address has been reported a total of 38 times from 23 distinct sources. 115.205.108.145 was first reported on June 26th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SiyCah	2026-06-27 06:00:17 (19 hours ago)	115.205.108.145 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total tim ... show more 115.205.108.145 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 17m 11s. Total bytes sent by tarpit: 79.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇺🇸 xmission.com	2026-06-27 03:03:40 (22 hours ago)	Blocked by UFW (TCP on 2222) Source port: 32797 TTL: 49 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 32797 TTL: 49 Packet length: 40 TOS: 0x08 This report (for 115.205.108.145) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-27 02:57:10 (22 hours ago)	tcp/443 (2 or more attempts)	Port Scan
🇵🇱 mkey	2026-06-27 02:40:02 (22 hours ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-06-27 04:38:06 \| LAST=2026-06-27 04:38:06. Last seen 2026-06-27 04:38:06. show less	Port Scan
🇺🇸 MPL	2026-06-27 02:09:34 (23 hours ago)	tcp ports: 22,443 (5 or more attempts)	Port Scan
Anonymous	2026-06-27 01:01:01 (1 day ago)	[Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 47614 \| Dst port: 22 (SSH) \| Pkt len: 40 \| ... show more [Firewall] SSH Brute-Force \| Proto: TCP (NEW) \| Src port: 47614 \| Dst port: 22 (SSH) \| Pkt len: 40 \| Attempts logged: 2 \| ISP: Chinanet \| Origin: Hangzhou, China \| Prior AbuseIPDB score: 100% (32 reports) \| Detected: 2026-06-26 19:55 CST \| Promoted to blacklist after repeated attempts \| Banned: 6d23h54m48s show less	Brute-Force
🇺🇸 xmission.com	2026-06-27 00:36:45 (1 day ago)	Blocked by UFW (TCP on 2375) Source port: 34704 TTL: 51 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 34704 TTL: 51 Packet length: 40 TOS: 0x00 This report (for 115.205.108.145) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-26 23:35:04 (1 day ago)	Blocked by UFW (TCP on 23) Source port: 62553 TTL: 51 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 62553 TTL: 51 Packet length: 40 TOS: 0x00 This report (for 115.205.108.145) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇦🇹 urnilxfgbez	2026-06-26 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 xmission.com	2026-06-26 22:38:54 (1 day ago)	Blocked by UFW (TCP on 2222) Source port: 46688 TTL: 49 Packet length: 40 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 46688 TTL: 49 Packet length: 40 TOS: 0x08 This report (for 115.205.108.145) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 RAP	2026-06-26 22:31:21 (1 day ago)	2026-06-26 22:31:21 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇫🇮 Yachiyo Runami	2026-06-26 22:30:13 (1 day ago)	Port Scan on Honeypot \| Ports: 22/SSH(2x) \| Proto: TCP(2) \| Flags: all SYN \| TTL: 42 \| Len: 44B(2x) ... show more Port Scan on Honeypot \| Ports: 22/SSH(2x) \| Proto: TCP(2) \| Flags: all SYN \| TTL: 42 \| Len: 44B(2x) \| Win: 65535(2) \| F2B/ufw-honeypot@2026-06-26T22:30:12Z show less	Port Scan Hacking
🇺🇸 MPL	2026-06-26 21:58:11 (1 day ago)	tcp/80 (2 or more attempts)	Port Scan
🇩🇪 Admins@FBN	2026-06-26 21:50:00 (1 day ago)	FW-PortScan: Traffic Blocked srcport=56469 dstport=22	Port Scan Hacking SSH
🇬🇧 OptimusGO	2026-06-26 21:27:41 (1 day ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-06-26 22:27:41 UTC Log evidence: 06/26/2026-22:27:40.814947 [wDrop] [] [1:7001101:1] FINSERV CRITICAL: Telnet Access Blocked [] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 115.205.108.145:62496 -> 185.127.18.66:23 06/26/2026-22:27:40.814947 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 115.205.108.145:62496 -> 185.127.18.66:23 show less	Port Scan Brute-Force

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.188

🇺🇸 146.88.241.161

🇨🇳 59.55.114.148

🇫🇷 212.47.65.20

🇺🇸 209.141.41.212

🇨🇳 183.164.242.52

🇨🇦 173.206.209.158

🇦🇹 152.53.111.131

🇸🇬 149.34.253.149

🇫🇮 147.185.133.20

🇮🇳 122.160.51.109

🇰🇷 121.179.93.147

🇮🇱 82.80.253.21

🇬🇧 188.240.59.24

🇨🇳 120.48.122.43

🇸🇬 103.250.11.156

🇿🇲 102.23.122.235

🇱🇻 81.30.98.44

🇨🇳 58.18.80.18

🇯🇲 184.170.16.90