123.245.85.28

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
50% Elevated
247 reports
83 reporters · latest 9 hours ago
ISP
JunQu2-SY-LN
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Shenyang, Liaoning
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
247 from 83 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 5 🇫🇷 France 4 🇩🇪 Germany 3
Most common categories Port Scan 17 Hacking 9 Web App Attack 1 Brute-Force 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 uthul
T-Pot honeypot: 8 hits on ports [5984] (automated)
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 9000.
Port Scan Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:58464 dst:631
Port Scan
🇩🇰 swrlly
1 unauthorized webserver connection
Web App Attack
Anonymous
denied traffic to a honeypot network. destination port 10400.
Port Scan Hacking
🇺🇸 seajaydaboi36
Automated detection: unsolicited connection to Pterodactyl Wings server.
Port Scan Hacking Brute-Force
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇫🇷 security.rdmc.fr
VoIP Port Scan proto:UDP src:41524 dst:5060
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Unauthorized traffic (16 bytes of payload); 10142 [1] TCP
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 3000 [1] TCP
Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 MPL
tcp/12415
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
Port Scan
🇺🇸 OceanTreasure
tcp/50111; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-30T21:43:50Z
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 93.177.119.108
🇺🇸 66.132.186.217
🇩🇪 195.182.16.23
🇨🇳 180.153.236.38
🇲🇽 177.249.172.159
🇺🇾 167.60.122.92
🇦🇿 158.181.45.36
🇨🇱 129.222.172.38
🇳🇱 109.160.32.161
🇭🇰 101.36.127.95
🇨🇦 85.217.149.12
🇮🇳 49.207.182.187
🇹🇿 41.175.241.46
🇺🇸 40.74.210.15
🇺🇸 40.74.209.135
🇬🇧 35.203.210.21
🇷🇴 2.57.122.209
🇮🇳 223.188.153.183
🇦🇿 188.253.212.49
🇲🇽 187.190.35.163
feedback