119.165.89.154

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
79% Critical
97 reports
57 reporters · latest 14 minutes ago
ISP
China Unicom Shandong Province Network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Jinan, Shandong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
97 from 57 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 17 🇫🇷 France 6 🇭🇰 Hong Kong 4
Most common categories Port Scan 33 Hacking 20 Brute-Force 5 SSH 4 Web App Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 security.rdmc.fr
Activity from blacklisted IP
Hacking
🇺🇸 RAP
2026-11-15 05:07:02 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 RAP
2026-11-14 13:19:39 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
Malware payload written over SSH: 'i' (133 KB), SHA256: 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7.
Hacking SSH
Anonymous
Repeated unauthorized SSH login attempts: 10 sessions in 4m (Last try user: 'root').
Hacking SSH
Anonymous
Malware payload written over SSH: 'i' (133 KB), SHA256: 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7.
Hacking SSH
Anonymous
Malware payload written over SSH: 'i' (133 KB), SHA256: 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7.
Hacking SSH
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:52660 dst:23
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
Port Scan
🇦🇹 RobertsPlaystation
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=8080
Port Scan Hacking
🇺🇸 Phil Schuyler
Repeated probing against public honeypot services: 6 observed events targeting exposed network services.
Port Scan
🇨🇦 dpinse
Brute-Force Hacking
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 23 application-level events across 23 source port(s). Sensor(s): Cowrie.
Port Scan
🇳🇱 VMHeaven.io
Blocked by UFW [23/tcp] Source port: 52660 TTL: 47 Packet length: 40
Port Scan Hacking Brute-Force
Anonymous
Repeated unauthorized connection attempts to restricted service observed.
Port Scan Hacking Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 187.194.54.246
🇮🇳 49.207.132.75
🇺🇦 176.98.92.120
🇺🇸 172.184.111.202
🇸🇬 161.118.255.247
🇫🇮 157.22.101.144
🇹🇼 114.32.19.171
🇮🇩 114.4.121.174
🇲🇾 103.95.33.2
🇨🇴 45.179.163.34
🇺🇸 35.140.228.124
🇮🇳 103.207.175.209
🇺🇸 74.82.47.56
🇺🇸 74.82.47.4
🇷🇴 45.95.223.81
🇰🇷 14.34.146.30
🇧🇬 5.188.206.66
🇺🇸 5.183.252.49
🇺🇸 3.83.245.221
🇷🇴 2.57.122.168
feedback