125.36.255.220

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
76% Critical
38 reports
16 reporters ยท latest 18 hours ago
ISP
China Unicom Tianjin province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
๐Ÿ‡จ๐Ÿ‡ณ China
City
Tianjin, Tianjin
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
38 from 16 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ฉ๐Ÿ‡ช Germany 4 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 3 ๐Ÿ‡ซ๐Ÿ‡ท France 2
Most common categories Port Scan 13 Hacking 3 Email Spam 1 Bad Web Bot 1 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 6 hits on ports [16656] (automated)
Port Scan
Anonymous
Blocked by firewall on hugin [21242/tcp] | Rule: UFW | SPT: 58589 | TTL: 232 | LEN: 44 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท uthul
T-Pot honeypot: 7 hits on ports [9000] (automated)
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 32759 [1] TCP
Port Scan
Anonymous
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy โ€” zero tolerance for exploit scanning. Banned Nov 8, 04:44 UTC. Origin: China, Tianjin.
Hacking Bad Web Bot Web App Attack
๐Ÿ‡น๐Ÿ‡ท Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (8886/tcp) [non-standard port]
Port Scan Hacking
๐Ÿ‡ฉ๐Ÿ‡ช Jochen Pretli
connection to honeypot
Email Spam Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/2423
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 3011) Source port: 56289 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 125.36.255.220) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ 6kilowatti
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช _ArminS_
SP-Scan 40940:8089 detected 2026.11.06 07:50:43 blocked until 2026.12.26 00:53:30
Port Scan
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 12300.
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 10099 [1] TCP
Port Scan
Anonymous
denied Telnet access attempt. destination port 23.
Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ป๐Ÿ‡ณ 180.93.193.100
๐Ÿ‡บ๐Ÿ‡ธ 172.174.129.234
๐Ÿ‡ธ๐Ÿ‡ฌ 168.144.35.202
๐Ÿ‡ฎ๐Ÿ‡ณ 152.59.78.3
๐Ÿ‡จ๐Ÿ‡ณ 118.213.150.46
๐Ÿ‡ป๐Ÿ‡ณ 116.103.26.80
๐Ÿ‡ต๐Ÿ‡ฑ 91.236.172.11
๐Ÿ‡ฒ๐Ÿ‡พ 49.124.155.162
๐Ÿ‡บ๐Ÿ‡ธ 173.225.203.192
๐Ÿ‡บ๐Ÿ‡ธ 162.213.253.54
๐Ÿ‡ต๐Ÿ‡ญ 124.106.88.192
๐Ÿ‡จ๐Ÿ‡ณ 116.179.32.212
๐Ÿ‡ฎ๐Ÿ‡ณ 106.219.147.175
๐Ÿ‡ซ๐Ÿ‡ท 85.217.140.52
๐Ÿ‡บ๐Ÿ‡ธ 47.211.238.226
๐Ÿ‡ณ๐Ÿ‡ฑ 193.47.62.110
๐Ÿ‡ซ๐Ÿ‡ฎ 170.168.31.200
๐Ÿ‡ฉ๐Ÿ‡ช 94.183.174.99
๐Ÿ‡น๐Ÿ‡ท 88.247.206.213
feedback