117.63.36.157

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
94% Critical
17 reports
16 reporters ยท latest 1 hour ago
ISP
CHINANET jiangsu province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
๐Ÿ‡จ๐Ÿ‡ณ China
City
Nanjing, Jiangsu
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
17 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 6 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 5 ๐Ÿ‡ง๐Ÿ‡พ Belarus 1
Most common categories Port Scan 14 Hacking 5 Brute-Force 5 SSH 3 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช FDC
Malicious activity from 117.63.36.157 detected by FDC honeypots. Categories: 15,18,20,22. 21 events in last 24h.
Hacking Brute-Force Exploited Host SSH
๐Ÿ‡ง๐Ÿ‡พ stroytrest
2026-10-28T11:33:30.802816+03:00 gate kernel: [2238700.692472] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=117.63.36.157 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=17642 DF PROTO=TCP SPT=58938 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ...
Port Scan
Anonymous
Network service scanning detected by FortiGate; source quarantined.
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-28 00:44:47 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Andreas76
Port scan: connection attempt to an unused trap port. Reported by bantower.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 23) Source port: 40169 TTL: 50 Packet length: 60 TOS: 0x08 This report (for 117.63.36.157) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
Anonymous
IP & Port Scan.
SSH Port Scan Brute-Force
๐Ÿ‡ต๐Ÿ‡ฑ mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-27 15:57:08 | LAST=2026-10-27 15:57:09. Last seen 2026-10-27 15:57:09.
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:56004 dst:23
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ OceanTreasure
tcp/23; Legacy Telnet remote access probe @ 2026-10-27T12:49:07Z
IoT Targeted Port Scan
๐Ÿ‡บ๐Ÿ‡ธ cybsecaoccol
unauthorized connection or malicious port scan attempted on tcp port - corp
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-10-27 03:40:36 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@Storch
IPS:drop <match> dstport=23
Brute-Force Exploited Host
๐Ÿ‡ฉ๐Ÿ‡ช Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 48 | Len: 60B | Win: 29040(1) | F2B/ufw-honeypot@2026-10-27T01:37:53Z
Port Scan Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ณ๐Ÿ‡ฑ 77.239.124.77
๐Ÿ‡บ๐Ÿ‡ธ 65.49.1.199
๐Ÿ‡จ๐Ÿ‡ณ 59.36.75.227
๐Ÿ‡บ๐Ÿ‡ธ 57.141.0.11
๐Ÿ‡บ๐Ÿ‡ธ 45.132.227.215
๐Ÿ‡ต๐Ÿ‡ฐ 37.111.157.25
๐Ÿ‡ฌ๐Ÿ‡ง 194.213.3.42
๐Ÿ‡ฒ๐Ÿ‡ฝ 189.188.110.233
๐Ÿ‡ญ๐Ÿ‡ฐ 152.32.174.171
๐Ÿ‡ฉ๐Ÿ‡ช 145.239.0.129
๐Ÿ‡จ๐Ÿ‡ณ 124.174.32.95
๐Ÿ‡ฐ๐Ÿ‡ท 118.39.219.45
๐Ÿ‡จ๐Ÿ‡ณ 112.239.144.42
๐Ÿ‡ณ๐Ÿ‡ฑ 93.123.109.6
๐Ÿ‡ท๐Ÿ‡ด 89.121.255.194
๐Ÿ‡บ๐Ÿ‡ธ 69.164.192.153
๐Ÿ‡บ๐Ÿ‡ธ 50.6.5.14
๐Ÿ‡ธ๐Ÿ‡ฌ 35.240.176.146
๐Ÿ‡ฎ๐Ÿ‡ณ 20.193.140.218
๐Ÿ‡จ๐Ÿ‡ด 161.18.77.49