123.245.85.167
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- JunQu2-SY-LN
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Shenyang, Liaoning
Abuse Reports
Total reports
226 from
80 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 MPL |
tcp/5555 (2 or more attempts)
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs identified 123.245.85.167 as a malicious indicator from threat intelligence.
|
DDoS Attack Port Scan Hacking Brute-Force Exploited Host | |
| 🇺🇸 RAP |
2026-06-24 02:33:00 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud
|
Brute-Force Hacking | |
| 🇷🇺 SeMPaI |
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 9229 [1] TCP
|
Hacking | |
| 🇺🇸 MPL |
tcp/1001
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| 🇬🇧 PeravixGroup |
Honeypot detection: IRC botnet command-and-control channel attempt on port 6667. Severity: MEDIUM. Aaran.cloud
|
DDoS Attack Hacking | |
| 🇵🇱 sefinek.net |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 12334 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇩🇪 Justin F. | AS204464 |
Honeypot [nx-infrastructure]: Unauthorized traffic (16 bytes of payload); 20001 [1] TCP
Reported by: Justin F.
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
|
Hacking Exploited Host | |
| 🇭🇺 Geppetto |
Connection to IP instead of Domain-Name, HTTP request to HTTPS port [28/May/2026:13:38:04 +0200] 400 - - http "-" [Client 123.245.85.167] [Length 154] [Gzip -] "-" "-"
...
|
Bad Web Bot Web App Attack | |
| 🇺🇸 MPL |
tcp/6544
|
Port Scan | |
| 🇺🇸 MPL |
tcp/30083 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown