AbuseIPDB » 115.217.231.152
115.217.231.152 was found in our database!
This IP was reported 23 times. Confidence of Abuse is 95%: ?
| ISP | CHINANET-ZJ Ningbo node network |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS4134 |
| Domain Name | hz.zj.cn |
| Country | 🇨🇳 China |
| City | Ningbo, Zhejiang |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 115.217.231.152:
This IP address has been reported a total of 23 times from 17 distinct sources. 115.217.231.152 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:54641 dst:23
|
Port Scan | ||
| 🇺🇸 drewf.ink |
[03:28] Attempted telnet login with credentials root:u******n
|
Brute-Force Exploited Host | ||
| 🇺🇸 RAP |
2026-07-25 00:08:11 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
| 🇹🇼 kk_it_man |
honey catch
|
Port Scan | ||
| 🇳🇱 DonAtari |
DShield firewall scan - TCP to port 23
|
Brute-Force SSH | ||
| 🇺🇸 drewf.ink |
[08:16] Attempted telnet login with credentials root:z*****m
|
Brute-Force Exploited Host | ||
| 🇩🇪 anycast_ac |
|
DDoS Attack IoT Targeted Brute-Force | ||
| 🇹🇷 oalver |
|
Brute-Force IoT Targeted | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:34399 dst:23
|
Port Scan | ||
| 🇦🇹 centurion |
|
Port Scan Hacking Brute-Force | ||
| 🇺🇸 RAP |
2026-07-22 02:57:54 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | ||
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | ||
| Anonymous |
|
Port Scan IoT Targeted | ||
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:42735 dst:23
|
Port Scan |
Showing 1 to 15 of 23 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩