112.102.85.4

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
34 reports
20 reporters · latest 2 months ago
ISP
CHINANET HEILONGJIANG PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Harbin, Heilongjiang
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

112.102.85.4 has been reported 34 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
34 from 20 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:50053 dst:23
Port Scan
🇺🇸 MPL
tcp/23
Port Scan
🇺🇸 RAP
2026-08-15 01:52:42 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 MPL
tcp/23 (2 or more attempts)
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇺🇸 MPL
tcp/23 (4 or more attempts)
Port Scan
🇩🇪 Da_tschek
Port scanning
Port Scan Hacking
🇩🇪 iNetWorker
trying to access non-authorized port
Port Scan
🇭🇰 mutebot.net
SRC=112.102.85.4, PROTO=TCP, SPT=56691, DPT=23
Port Scan
🇺🇸 RAP
2026-08-14 16:46:23 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 35933 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 112.102.85.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇳🇱 StopAbuse
tcp/23
Port Scan Exploited Host
🇺🇸 xmission.com
Blocked by UFW (TCP on 23) Source port: 35080 TTL: 53 Packet length: 60 TOS: 0x00 This report (for 112.102.85.4) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan Hacking Brute-Force
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇰🇷 2048
Telnet credential brute-force observed by honeypot. Source IP: 112.102.85.4 Targeted device: DVR First seen: 14 Aug 2026 06:07:34 UTC Last seen: 14 Aug 2026 06:07:34 UTC Attempts: 1 Sample credentials: admin:admin
Brute-Force IoT Targeted

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 160.119.66.206
🇬🇧 104.28.160.253
🇩🇪 64.89.163.138
🇮🇳 61.246.239.15
🇧🇷 205.210.31.241
🇳🇱 195.178.110.78
🇲🇽 189.194.140.170
🇩🇪 148.251.47.146
🇫🇮 147.185.133.245
🇳🇱 77.239.124.146
🇦🇹 62.83.34.196
🇺🇸 45.148.232.11
🇳🇱 195.178.110.152
🇬🇧 195.140.214.28
🇨🇴 181.53.136.81
🇺🇸 136.69.210.210
feedback