120.85.116.215

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
48% Elevated
157 reports
38 reporters · latest 1 day ago
ISP
United-Communications-Network-Technology-Co-Ltd, GuangZhou
Usage Type
Fixed Line ISP
ASN
AS17622
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Guangzhou, Guangdong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
157 from 38 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇺🇸 United States of America 2 🇫🇮 Finland 1
Most common categories Port Scan 12 Hacking 6 Brute-Force 4 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 RAP
2026-11-06 18:59:29 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 5555.
Port Scan Hacking
Anonymous
Port Scan Brute-Force
🇩🇪 EGP Abuse Dept
Scanning for port/service exploits on tpc-013.mach3builders.nl
Port Scan Hacking
🇺🇸 RAP
2026-11-03 20:12:26 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
denied Telnet access attempt. destination port 23.
Port Scan Brute-Force
🇩🇪 raspi4
Fail2Ban Ban Triggered
Brute-Force Web App Attack
Anonymous
[TCP/37215] Unsolicited connection attempt on a port with no legitimate public service.
Port Scan Hacking
🇩🇪 cloudmax
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 23.
Port Scan Hacking
🇩🇪 wiredalter
Blocked by UFW on dVPS [37215/tcp] Source Port: 35954 TTL: 53 Packet Length: 60 TOS: 0x00 Analyzed by https://ip.wiredalter.com
Port Scan Brute-Force
Anonymous
Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.
Hacking
Anonymous
suricata IPS/IDS detection, ruleset ET WEB_SERVER WGET Command Specifying Output in HTTP Headers, ET EXPLOIT D-Link Devices Home Network Administration Protocol Command Execution
Port Scan
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇩 202.152.55.165
🇬🇧 195.96.139.149
🇬🇧 193.163.125.113
🇧🇷 177.10.108.159
🇫🇷 91.231.89.159
🇪🇸 80.255.230.227
🇧🇬 79.124.56.246
🇺🇸 64.62.197.130
🇺🇸 35.227.7.118
🇬🇧 35.203.211.7
🇨🇦 34.95.17.1
🇺🇸 4.227.177.11
🇬🇧 198.244.240.199
🇳🇱 195.178.110.199
🇿🇦 105.184.95.210
🇮🇳 103.255.235.8
🇺🇸 206.189.178.241
🇹🇿 197.250.160.124
🇺🇦 194.8.56.228
🇵🇱 172.64.200.175
feedback