JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.156.228.68

123.156.228.68 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 27%: ?

27%

ISP	China Unicom Zhejiang province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.156.228.68

Whois 123.156.228.68

IP Abuse Reports for 123.156.228.68:

This IP address has been reported a total of 32 times from 22 distinct sources. 123.156.228.68 was first reported on February 25th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-05-15 14:34:41 (1 month ago)	05/15/2026-16:34:41.211142 123.156.228.68 Protocol: 6 ET SCAN NMAP -sS window 1024	Port Scan
🇳🇱 StopAbuse	2026-05-15 09:08:16 (1 month ago)	tcp/1433	Port Scan
🇳🇵 radheykrishna.com.np	2026-05-15 06:34:02 (1 month ago)	May 15 12:19:01 kernel: [2316599.793985] [UFW BLOCK] IN=ens160 OUT= SRC=123.156.228.68 LEN=40 TOS=0x ... show more May 15 12:19:01 kernel: [2316599.793985] [UFW BLOCK] IN=ens160 OUT= SRC=123.156.228.68 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=12765 PROTO=TCP SPT=43403 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 zupan	2026-05-14 21:09:49 (1 month ago)	Blocked by UFW on vps [1433/tcp] \| SPT: 43403 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [1433/tcp] \| SPT: 43403 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 acadeova	2026-05-14 16:51:01 (1 month ago)	Blocked by UFW on vps4 [1433/tcp] Source port: 48156 TTL: 242 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on vps4 [1433/tcp] Source port: 48156 TTL: 242 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 sthoyer.de	2026-05-14 05:12:36 (1 month ago)	May 14 07:12:34 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f ... show more May 14 07:12:34 sthoyer kernel: [IPTables-Block] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=123.156.228.68 DST=173.212.223.67 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=6528 PROTO=TCP SPT=48156 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-05-07 09:39:31 (1 month ago)	Blocked by UFW (TCP on 1433) Source port: 51348 TTL: 239 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 51348 TTL: 239 Packet length: 40 TOS: 0x00 This report (for 123.156.228.68) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 RAP	2026-05-06 03:04:02 (1 month ago)	2026-05-06 03:04:02 UTC Unauthorized activity to TCP port 1433. SQL	Port Scan
🇺🇸 RAP	2026-05-05 23:17:28 (1 month ago)	2026-05-05 23:17:28 UTC Unauthorized activity to TCP port 1433. SQL	Port Scan
🇵🇱 sefinek.net	2026-04-30 19:30:32 (1 month ago)	Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password Reported by: https://githu ... show more Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force
🇩🇪 AS213449.net	2026-04-30 06:55:58 (1 month ago)	04/30/2026-08:55:52.087503 src=123.156.228.68 dst=89.144.63.43:1433 proto=6 msg=ET SCAN Suspicious i ... show more 04/30/2026-08:55:52.087503 src=123.156.228.68 dst=89.144.63.43:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
Anonymous	2026-04-30 06:19:16 (1 month ago)	unsolicited connect TCP dport 1433 (sport 44621)	Hacking
🇩🇪 AS213449.net	2026-04-30 04:13:28 (1 month ago)	04/30/2026-06:13:22.161721 src=123.156.228.68 dst=89.144.63.47:1433 proto=6 msg=ET SCAN Suspicious i ... show more 04/30/2026-06:13:22.161721 src=123.156.228.68 dst=89.144.63.47:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-04-30 03:27:27 (1 month ago)	04/30/2026-05:27:23.872413 src=123.156.228.68 dst=89.144.63.34:1433 proto=6 msg=ET SCAN Suspicious i ... show more 04/30/2026-05:27:23.872413 src=123.156.228.68 dst=89.144.63.34:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-04-30 03:04:27 (1 month ago)	04/30/2026-05:04:24.217121 src=123.156.228.68 dst=89.144.63.73:1433 proto=6 msg=ET SCAN Suspicious i ... show more 04/30/2026-05:04:24.217121 src=123.156.228.68 dst=89.144.63.73:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.30.64.65

🇺🇸 162.216.149.112

🇨🇳 115.227.26.85

🇺🇸 104.21.38.77

🇧🇬 91.148.190.150

🇨🇦 85.217.149.64

🇳🇱 80.242.56.120

🇺🇸 65.49.20.84

🇺🇸 52.202.52.82

🇺🇸 52.55.37.155

🇸🇪 20.91.198.61

🇬🇧 2a06:4880:6000::71

🇰🇷 220.118.173.234

🇮🇩 202.73.25.229

🇷🇴 188.27.130.241

🇺🇸 151.247.72.125

🇫🇮 147.185.133.87

🇺🇸 147.182.246.240

🇨🇳 111.57.17.167

🇮🇳 103.248.94.65