125.227.65.103

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
53% Elevated
41 reports
29 reporters · latest 1 day ago
ISP
Data Communication Business Group,
Usage Type
Fixed Line ISP
ASN
AS3462
Domain Name
cht.com.tw
Country
🇹🇼 Taiwan
City
Taichung, Taiwan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
41 from 29 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇫🇷 France 5 🇳🇱 Netherlands 4
Most common categories Port Scan 18 Brute-Force 11 Hacking 7 Exploited Host 2 IoT Targeted 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 EGP Abuse Dept
Unauthorized connection to RDP port 3389
Port Scan Hacking
🇩🇪 comped
RDP brute-force / credential stuffing: 2 failed Windows logons (Event ID 4625) against 2 of our servers (NL), first seen 2026-11-14 17:19 UTC. Blocked automatically.
Brute-Force
🇸🇪 Juha Jurvanen
Brute-Force
🇦🇺 Chris Jarvis
RdpGuard detected brute-force attempt on RDP
Brute-Force
🇨🇳 leonfetter
Dasheng Security: 1 failed logons in 1440 minutes
Brute-Force
Anonymous
RDP brute force attack.
Port Scan Brute-Force
🇯🇵 knock
Knock-Knock honeypot brute-force: RDP (1 total hits)
Brute-Force
🇩🇪 jann
Honeypot: connection to unused port 3389 at 2026-10-19 18:29:41 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan
🇫🇷 Coco Bongo
1792434558 - 10/19/2026 20:29:18 Host: 125.227.65.103/125.227.65.103 Port: 3389 TCP Blocked ...
Port Scan
Anonymous
Portscan
Port Scan
🇫🇷 uthul
T-Pot honeypot: 23 hits on ports [3389] (automated)
Port Scan Brute-Force
🇳🇱 i-turnradio.nl
2026-10-13 20:42:46 +02:00 - Unsolicited TCP connection to a honeypot port; probing port 3389.
Port Scan
🇩🇪 numberstorm
Port Scan Hacking Brute-Force IoT Targeted
🇩🇪 Kejult
Honeypot Finding: repeated TCP service probing on TCP/3389 (RDP); 40 application-level events across 20 source port(s). Sensor(s): RDPHoneypot.
Port Scan
🇩🇪 Mailguard-FRD
1790938769 - 10/02/2026 12:59:29 Host: 125.227.65.103/125.227.65.103 Port: 3389 TCP Blocked ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇱 186.175.188.156
🇺🇸 162.216.149.181
🇭🇰 154.92.2.59
🇺🇸 144.126.133.155
🇸🇱 129.224.205.27
🇮🇩 103.97.141.42
🇧🇩 103.91.129.0
🇩🇪 94.26.41.42
🇺🇸 134.209.219.17
🇩🇪 109.160.32.106
🇫🇷 84.17.60.236
🇧🇬 78.128.113.46
🇨🇳 59.50.185.150
🇦🇷 190.50.173.139
🇫🇷 169.40.142.132
🇯🇵 140.238.60.130
feedback