JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 180.120.159.152

180.120.159.152 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Chinanet Jiangsu Province Network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 180.120.159.152

Whois 180.120.159.152

IP Abuse Reports for 180.120.159.152:

This IP address has been reported a total of 26 times from 18 distinct sources. 180.120.159.152 was first reported on August 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-08-25 21:10:40 (1 day ago)	3 incidents: port scanning. First: 2026-08-23 08:22, Last: 2026-08-25 17:10 UTC. Triggers: non-publi ... show more 3 incidents: port scanning. First: 2026-08-23 08:22, Last: 2026-08-25 17:10 UTC. Triggers: non-public-port,firewall-tcp,unknown. show less	Port Scan
🇺🇸 RAP	2026-08-24 19:44:10 (2 days ago)	2026-08-24 19:44:10 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 xmission.com	2026-08-24 16:34:43 (2 days ago)	Blocked by UFW (TCP on 23) Source port: 37688 TTL: 52 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 37688 TTL: 52 Packet length: 60 TOS: 0x00 This report (for 180.120.159.152) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇩🇪 Admins@FBN	2026-08-24 15:32:29 (2 days ago)	FW-PortScan: Traffic Blocked srcport=59755 dstport=23	Port Scan
Anonymous	2026-08-24 15:02:14 (2 days ago)	Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 45999 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Rep ... show more Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 45999 \| TTL: 51 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇨🇦 Tanados	2026-08-24 12:59:21 (2 days ago)	Blocked by UFW [23/tcp] Source port: 50037 TTL: 44 Packet length: 60 TOS: 0x00 This report was gene ... show more Blocked by UFW [23/tcp] Source port: 50037 TTL: 44 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇬🇧 OptimusGO	2026-08-24 11:23:08 (2 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-08-24 12:23:08 UTC Log evidence: 08/24/2026-12:23:07.990280 [wDrop] [] [1:7001101:1] FINSERV CRITICAL: Telnet Access Blocked [] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 180.120.159.152:57189 -> 185.127.18.66:23 08/24/2026-12:23:07.990280 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 180.120.159.152:57189 -> 185.127.18.66:23 show less	Port Scan Brute-Force
🇺🇸 RAP	2026-08-24 10:58:16 (2 days ago)	2026-08-24 10:58:16 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 Admins@FBN	2026-08-24 10:15:22 (2 days ago)	FW-PortScan: Traffic Blocked srcport=46454 dstport=23	Port Scan
Anonymous	2026-08-24 09:59:44 (2 days ago)	Network service scanning detected by FortiGate; source quarantined.	Port Scan
🇧🇾 stroytrest	2026-08-24 08:23:16 (2 days ago)	2026-08-24T11:23:15.074190+03:00 gate kernel: [1114914.771238] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-08-24T11:23:15.074190+03:00 gate kernel: [1114914.771238] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=180.120.159.152 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=754 DF PROTO=TCP SPT=52133 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇦 design2web.ca	2026-08-24 07:11:49 (2 days ago)	[UniFi FW] Inbound network intrusion attempt on port 23 (Telnet) \| Policy: Region Blocking \| Proto: ... show more [UniFi FW] Inbound network intrusion attempt on port 23 (Telnet) \| Policy: Region Blocking \| Proto: TCP \| Src: 180.120.159.152:47952 \| SrcRegion: CN \| Svc: TELNET \| Detected: 2026-08-24 06:18:17 UTC \| ISP: Chinanet \| D2W UniFi AbuseIPDB Reporter v2 show less	Port Scan
🇫🇷 security.rdmc.fr	2026-08-24 05:41:07 (2 days ago)	Port Scan Attack proto:TCP src:35628 dst:23	Port Scan
🇺🇸 MPL	2026-08-24 05:28:59 (2 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇫🇮 6kilowatti	2026-08-24 02:41:20 (2 days ago)	2026-08-24T05:41:19.493752+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-08-24T05:41:19.493752+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=180.120.159.152 DST=5.61.88.83 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=43284 DF PROTO=TCP SPT=51525 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ... show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.144

🇹🇷 213.74.41.106

🇺🇸 209.38.76.103

🇩🇪 185.73.23.133

🇹🇹 161.0.156.7

🇫🇮 147.185.133.182

🇨🇿 92.112.238.242

🇫🇷 85.217.140.33

🇩🇪 69.5.169.236

🇩🇪 46.101.223.226

🇺🇸 45.79.177.245

🇬🇧 35.203.211.10

🇬🇧 31.14.254.50

🇺🇸 20.75.217.69

🇳🇱 2a00:1450:4013:c1e::125

🇧🇷 205.210.31.198

🇮🇩 202.51.202.242

🇬🇧 185.247.137.38

🇳🇱 185.242.226.60

🇺🇸 185.180.141.40