123.245.84.49
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- JunQu2-SY-LN
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Shenyang, Liaoning
Abuse Reports
Total reports
262 from
90 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Tried our host z.
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/1443 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5601 (2 or more attempts)
|
Port Scan | |
| 🇵🇱 sefinek.net |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 1978 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 12245
|
Port Scan Hacking Exploited Host | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Rapid POP3S Connections - Possible Brute Force Attack) de 123.245.84.49 [TCP]
|
Port Scan Brute-Force SSH | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 7493 [1] TCP
|
Port Scan | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 8 attempts across 1 port (2161). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=123.245.84.49 LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=2940 DF PROTO=TCP SPT=43328 DPT=2161 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 7 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (12358/tcp) [non-standard port]
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown