115.235.28.55
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET-ZJ Wenzhou node network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- hz.zj.cn
- Country
- 🇨🇳 China
- City
- Ningbo, Zhejiang
Abuse Reports
Total reports
36 from
25 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-10-23 08:11, Last: 2026-10-28 06:39 UTC. Triggers: unknown.
|
Port Scan | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe detected - looking for .env
|
Hacking Brute-Force Web App Attack | |
| 🇺🇸 micropedro |
4 incidents: malicious activity. First: 2026-10-16 11:54, Last: 2026-10-20 19:36 UTC. Triggers: unknown.
|
Port Scan | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe detected - looking for config, backups or credentials
|
Hacking Brute-Force Web App Attack | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,ndpi_unsafe_protocol,tcp_no_data_exchanged,ndpi_tcp_issues,tcp_flow_reset,ndpi_probing_attempt
|
Hacking | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.
|
Hacking | |
| 🇺🇸 RAP |
2026-10-18 11:52:25 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇨🇦 senkodev |
|
Brute-Force SSH | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇨🇭 lumi |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "admin" at 2026-10-18T06:29:39Z
|
Brute-Force SSH | |
| 🇺🇸 RAP |
2026-10-18 04:35:45 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=40230 dstport=23
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=56419 dstport=23
|
Port Scan | |
| 🇩🇪 RazorLabs.dev |
Automated report from fail2ban: unsolicited TCP connection attempt to port 23/2323 (telnet) on a host running no telnet service, dropped by host firewall.
|
Port Scan Brute-Force IoT Targeted | |
| 🇬🇧 andypiper |
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown