115.56.36.149

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
43 reports
26 reporters · latest 3 months ago
ISP
China Unicom Henan province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Zhengzhou, Henan
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

115.56.36.149 has been reported 43 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
43 from 26 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/23
Port Scan
🇺🇸 RAP
2026-08-06 17:17:32 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 MPL
tcp/23 (4 or more attempts)
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [23/tcp] Source port: 7706 TTL: 45 Packet length: 60
Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:7943 dst:23
Port Scan
🇺🇸 RAP
2026-08-06 12:43:57 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
1786019387 - 08/06/2026 14:29:47 Host: 115.56.36.149/115.56.36.149 Port: 23 TCP Blocked ...
Port Scan
🇱🇹 NotACaptcha
Unauthorised access (Aug 6 12:19) SRC=115.56.36.149 LEN=60 TTL=39 ID=20838 DF TCP DPT=23 WINDOW=65535 SYN
Port Scan
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇺🇸 RAP
2026-08-06 04:41:27 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷 zulzeen
[incypit-web] Blocked by SysWarden Firewall [GEO] (Telnet IoT Attack)
IoT Targeted Brute-Force
🇩🇪 DasDuo
Attempt on port 23 (Telnet) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 190.102.47.179
🇧🇷 187.32.237.11
🇧🇷 177.162.75.30
🇨🇦 85.217.149.28
🇫🇷 85.217.140.39
🇺🇸 50.217.40.11
🇵🇪 38.250.151.15
🇳🇱 34.91.115.13
🇵🇱 31.182.57.86
🇰🇷 220.116.117.213
🇧🇷 200.219.15.227
🇧🇴 179.60.175.16
🇺🇸 149.72.146.168
🇺🇸 147.185.132.243
🇳🇱 64.205.72.162
🇮🇳 49.37.42.188
feedback