157.18.152.85
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Guangdong province network
- Usage Type
- Fixed Line ISP
- ASN
- AS17816
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Guangzhou, Guangdong
Abuse Reports
Total reports
14 from
13 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇾 sashan |
2026-10-20T17:16:18.287375+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=157.18.152.85 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=33458 PROTO=TCP SPT=42649 DPT=23 WINDOW=54438 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-20 13:40:31 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 KPS |
PortscanT
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 1901
TTL: 52
Packet length: 40
TOS: 0x00
This report (for 157.18.152.85) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇨🇭 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port 23 - sch
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:52935 dst:23
|
Port Scan | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: Telnet (20 total hits)
|
Brute-Force | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 23 (Telnet) on a host running no such service. Automated port-scan detection at 2026-10-19T18:01:06Z.
|
Port Scan | |
| 🇩🇪 Kitki30.com |
Entered Telnet Tarpit (endlessh, server 3).
Log: 2026-10-15T20:10:34.756Z ACCEPT host=::ffff:157.18.152.85 port=57284 fd=879 n=1020/1020
|
IoT Targeted Port Scan Brute-Force | |
| 🇧🇷 aosafeshield |
AOSafe Shield: connected to a honeypot port (TCP 23) that no legitimate service uses.
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Port scan detected on port 23 (connection without data transfer)
|
Port Scan | |
| 🇳🇱 EGP Abuse Dept |
Unauthorized connection to Telnet port 23
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:22449 dst:23
|
Port Scan | |
| Anonymous |
denied Telnet access attempt. destination port 23.
|
Port Scan Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown