JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.245.84.170

123.245.84.170 was found in our database!

This IP was reported 250 times. Confidence of Abuse is 60%: ?

60%

ISP	JunQu2-SY-LN
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.245.84.170

Whois 123.245.84.170

IP Abuse Reports for 123.245.84.170:

This IP address has been reported a total of 250 times from 66 distinct sources. 123.245.84.170 was first reported on January 24th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Cyber Crusader	2026-07-05 12:31:20 (3 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 CounterScrape	2026-07-05 01:05:00 (4 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇺🇸 donarev419	2026-07-04 00:36:00 (5 days ago)	Connection to port 995 with data transfer. Data preview: �	Port Scan Hacking
🇺🇸 CounterScrape	2026-07-04 00:05:51 (5 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-07-02 19:02:15 (6 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-07-01 18:04:01 (1 week ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇺🇸 CounterScrape	2026-06-30 17:08:20 (1 week ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇺🇸 Axel	2026-06-29 03:18:18 (1 week ago)	Blocked by UFW on LAXHH [61616/tcp] \| SPT: 60753 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [61616/tcp] \| SPT: 60753 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-29 01:34:48 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 Axel	2026-06-28 09:39:06 (1 week ago)	Blocked by UFW on LAXHH [55555/tcp] \| SPT: 41681 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [55555/tcp] \| SPT: 41681 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-27 20:32:50 (1 week ago)	Blocked by UFW (TCP on 17141) Source port: 31085 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 17141) Source port: 31085 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 123.245.84.170) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇺 LiftUp Hosting	2026-06-20 12:40:05 (2 weeks ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 8007 [1] TCP	Port Scan
🇫🇮 6kilowatti	2026-06-19 12:00:59 (2 weeks ago)	2026-06-19T15:00:58.352760+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-06-19T15:00:58.352760+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=123.245.84.170 DST=83.148.240.21 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=199 PROTO=TCP SPT=39266 DPT=2252 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-18 01:41:53 (3 weeks ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇩🇪 Admins@FBN	2026-06-17 20:24:12 (3 weeks ago)	FW-PortScan: Traffic Blocked srcport=27475 dstport=8545	Port Scan

Showing 1 to 15 of 250 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:1f28:365:80b0:f160:71e5:89bb:4045

🇩🇪 69.5.169.142

🇬🇧 193.163.125.51

🇺🇸 147.185.132.94

🇳🇵 113.199.249.144

🇮🇷 80.210.63.38

🇩🇪 69.5.169.223

🇩🇪 69.5.169.154

🇺🇸 68.1.105.108

🇺🇸 2607:f8b0:4001:c00::12a

🇰🇭 202.62.49.63

🇺🇸 195.184.76.175

🇧🇷 177.92.51.79

🇺🇸 147.185.132.29

🇺🇸 146.190.65.81

🇷🇴 92.118.39.71

🇺🇸 85.208.98.198

🇮🇳 43.250.156.209

🇮🇷 31.7.66.163

🇩🇪 213.209.159.235