189.1.217.118

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
149 reports
73 reporters · latest 1 year ago
ISP
Huawei-Cloud-HK
Usage Type
Data Center/Web Hosting/Transit
ASN
AS136907
Domain Name
huawei.com
Country
🇭🇰 Hong Kong
City
Hong Kong
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

189.1.217.118 has been reported 149 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
149 from 73 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇯🇵 Kinsei Engineering Inc.
UFW:High-frequency access to non-released SSH or Telnet ports
Port Scan SSH
🇺🇸 BSG Webmaster
SSH Attack (Port 22)
Brute-Force SSH
🇹🇷 Threat.live
Brute Force, tcp/80, tcp/22, tcp/23
Brute-Force
🇺🇸 CRASH
Brute-Force SSH (Port 22)
Brute-Force SSH
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Scanner,Spam more details on https://threatbook.io/ip/189.1.217.118
Brute-Force
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇱🇹 NotACaptcha
Unauthorised access (Aug 16 21:01) SRC=189.1.217.118 LEN=60 TTL=41 ID=51551 DF TCP DPT=23 WINDOW=64240 SYN Unauthorised access (Aug 13 16:56) SRC=189.1.217.118 LEN=60 TTL=41 ID=56127 DF TCP DPT=23 WINDOW=64240 SYN
Port Scan
🇵🇱 Niko's Stuff
[1x] F2B | Suspicious activity blocked on: ufw | BanTime: 604800s | Suspicious TCP packet from 189.1.217.118:33594 → port 80 | TTL: 50, LEN: 60, TOS: 0x00, PREC: 0x20, Interface: eth0
Port Scan
🇵🇱 tr1n
Blocked by UFW on tr1n.services (PL01) [23/tcp] Source port: 47596 TTL: 52 Packet length: 60 TOS: 0x00
Port Scan Brute-Force IoT Targeted
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/22, tcp/23, tcp/2323
Brute-Force
🇺🇸 technash
Web app attack detected, ModSecurity. Default deny/drop.
Web App Attack
🇳🇱 StopAbuse
tcp/22 tcp/23 tcp/2323 tcp/80
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 205.210.31.184
🇲🇽 187.188.63.223
🇳🇱 176.65.149.160
🇱🇷 102.214.136.54
🇫🇷 85.217.140.16
🇫🇷 85.217.140.12
🇵🇱 46.149.215.200
🇧🇪 34.22.159.76
🇹🇭 223.207.91.144
🇧🇷 205.210.31.250
🇲🇾 183.171.191.173
🇵🇱 162.158.103.124
feedback