123.245.85.156
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- JunQu2-SY-LN
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Shenyang, Liaoning
Abuse Reports
Total reports
240 from
85 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇮🇹 Malwhunter |
Suricata IDS (pfSense): ET SCAN Suspicious inbound to Oracle SQL port 1521 - 1 event(s) to TCP/1521 between 2026-11-08 17:12:04 and 17:12:04 (Europe/Rome)
|
Port Scan Hacking | |
| Anonymous |
Probing for common web apps (e.g. wordpress) or invalid web tech (e.g. Querying for PHP services on a non-PHP site) /login
|
Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 3790
|
Port Scan Hacking Exploited Host | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 2198 [1] TCP
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (20202/tcp) [non-standard port]
|
Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 1955 [1] TCP
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 11211 proto 6 detection honeypot_tcp
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 4 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 8 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇧🇷 diego |
[rede-44-49] 09/14/2026-02:28:09.999576, 123.245.85.156, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 171
|
Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 1235
GET /
Accept: */*; 1235 [1] TCP
|
Web App Attack | |
| 🇺🇸 sefinek.net |
Blocked by UFW on NY01 [20443/tcp] | SPT: 53097 | TTL: 232 | LEN: 44 | TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=42529 dstport=8334
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown