JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 143.20.185.213

143.20.185.213

Recent Activity

74 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Internet Magnate (Pty) Ltd

Usage Type

Data Center/Web Hosting/Transit

ASN

AS214209

Domain Name

abuseradar.com

Country

🇷🇴 Romania

City

Bucharest, Bucharest

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 143.20.185.213:

This IP address has been reported a total of 74 times from 54 distinct sources. 143.20.185.213 was first reported on February 6th 2026, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: United States of America with 17 reports; Germany with 12 reports; Finland with 4 reports. The most common categories in these recent reports were: Port Scan 51 times; Hacking 9 times; Brute-Force 6 times; Bad Web Bot 3 times; Exploited Host 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Jochen Pretli	2026-09-14 22:27:28 (4 hours ago)	connection to honeypot	Email Spam Port Scan
🇪🇸 raiolanetworks.com	2026-09-14 16:33:16 (10 hours ago)	Honeypot detection: port scan / service probe. 3 events observed. Reported automatically from a hone ... show more Honeypot detection: port scan / service probe. 3 events observed. Reported automatically from a honeypot sensor. show less	Port Scan
🇭🇰 sandra361	2026-09-14 14:24:17 (12 hours ago)	Port scan detected: 6 attempts across 1 port (1880). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=143.20.1 ... show more Port scan detected: 6 attempts across 1 port (1880). \| Evidence: REAPER_TARPIT: IN=eth0 SRC=143.20.185.213 LEN=273 TOS=0x14 PREC=0x00 TTL=53 ID=44263 DF PROTO=TCP SPT=33430 DPT=1880 WINDOW=33028 RES=0x00 ACK PSH URGP=0 show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-09-14 13:53:14 (13 hours ago)	Honeypot hit: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more Honeypot hit: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Accept: text/html,application/xhtml+xml,/;q=0.8 Accept-Encoding: gzip; 1880 [2] TCP show less	Web App Attack
🇫🇷 EvoX	2026-09-14 13:30:39 (13 hours ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Accept: text/html,application/xhtml+xml,/;q=0.8 Accept-Encoding: gzip; 1880 [2] TCP show less	Hacking Bad Web Bot
🇫🇷 EvoX	2026-09-14 10:48:32 (16 hours ago)	🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT 10 ... show more 🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Accept: text/html,application/xhtml+xml,/;q=0.8 Accept-Encoding: gzip; 1880 [2] TCP show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-09-14 10:46:02 (16 hours ago)	Honeypot hit: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more Honeypot hit: HTTP/1.1 request on 1880 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Accept: text/html,application/xhtml+xml,/;q=0.8 Accept-Encoding: gzip; 1880 [2] TCP show less	Hacking Bad Web Bot
🇬🇧 sandra361	2026-09-14 09:23:32 (17 hours ago)	Port scan detected: 8 attempts across 1 port (1880). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=143. ... show more Port scan detected: 8 attempts across 1 port (1880). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=143.20.185.213 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=9745 DF PROTO=TCP SPT=43388 DPT=1880 WINDOW=33028 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇩🇪 reznekcs	2026-09-14 05:00:53 (22 hours ago)	Blocked by UFW firewall	Brute-Force
🇨🇿 Countryman	2026-09-13 16:59:34 (1 day ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇦🇺 PetePK	2026-09-13 16:59:01 (1 day ago)	Probed 1 time(s): TCP/1880	Port Scan
Anonymous	2026-09-13 16:51:36 (1 day ago)	Portscan: TCP/1880 (39x)	Port Scan
🇺🇸 MPL	2026-09-13 16:44:01 (1 day ago)	tcp/1880 (2 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-09-13 16:32:46 (1 day ago)	Blocked by UFW (TCP on 1880) Source port: 38040 TTL: 235 Packet length: 40 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1880) Source port: 38040 TTL: 235 Packet length: 40 TOS: 0x08 This report (for 143.20.185.213) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-09-13 16:26:30 (1 day ago)	2026-09-13T19:26:29.526819+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-09-13T19:26:29.526819+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=143.20.185.213 DST=83.148.240.21 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=TCP SPT=48929 DPT=1880 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.248

🇧🇪 66.249.93.232

🇨🇳 122.191.115.237

🇨🇳 122.96.50.183

🇨🇳 111.229.220.166

🇺🇸 104.152.52.215

🇳🇱 94.154.43.56

🇺🇸 91.230.168.251

🇫🇷 91.196.152.8

🇫🇷 85.217.140.6

🇮🇹 72.146.193.151

🇷🇺 46.44.36.143

🇺🇸 35.243.174.87

🇮🇳 34.180.19.229

🇺🇸 162.216.149.200

🇺🇸 146.190.157.184

🇧🇬 109.160.32.66

🇳🇱 91.92.42.100

🇨🇳 82.156.234.151

🇷🇴 80.94.92.109