JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 144.123.76.159

144.123.76.159 was found in our database!

This IP was reported 65 times. Confidence of Abuse is 82%: ?

82%

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 144.123.76.159

Whois 144.123.76.159

IP Abuse Reports for 144.123.76.159:

This IP address has been reported a total of 65 times from 34 distinct sources. 144.123.76.159 was first reported on December 1st 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-22 02:50:51 (13 hours ago)	tcp/4064	Port Scan
🇷🇸 Scan	2026-06-22 00:04:27 (16 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇨🇦 Slackin' Jack	2026-06-19 10:16:02 (3 days ago)	Triggered honeypot on port 21. (144.123.76.159)	Port Scan
🇬🇧 PeravixGroup	2026-06-19 00:44:32 (3 days ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: CRITICAL. Aaran.cloud show less	Hacking Exploited Host
🇳🇵 radheykrishna.com.np	2026-06-17 22:11:48 (4 days ago)	Jun 18 03:56:48 kernel: [5224147.587210] [UFW BLOCK] IN=ens160 OUT= SRC=144.123.76.159 LEN=44 TOS=0x ... show more Jun 18 03:56:48 kernel: [5224147.587210] [UFW BLOCK] IN=ens160 OUT= SRC=144.123.76.159 LEN=44 TOS=0x00 PREC=0x00 TTL=234 ID=5348 PROTO=TCP SPT=64725 DPT=1129 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-06-17 14:20:30 (5 days ago)	Blocked by UFW on LAXHH [10008/tcp] \| SPT: 11690 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [10008/tcp] \| SPT: 11690 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-16 19:07:59 (5 days ago)	Blocked by UFW on LAXHH [9444/tcp] \| SPT: 31625 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9444/tcp] \| SPT: 31625 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇮 6kilowatti	2026-06-16 03:11:52 (6 days ago)	2026-06-16T06:11:51.513532+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-06-16T06:11:51.513532+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=144.123.76.159 DST=10.0.0.30 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=59405 PROTO=TCP SPT=49693 DPT=50998 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 anon333	2026-06-16 01:33:31 (6 days ago)	Hacker syslog review 1781573610	Hacking
🇺🇸 Axel	2026-06-13 14:47:35 (1 week ago)	Blocked by UFW on LAXHH [9000/tcp] \| SPT: 29251 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9000/tcp] \| SPT: 29251 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-12 06:41:18 (1 week ago)	Blocked by UFW on LAXHH [7687/tcp] \| SPT: 51155 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [7687/tcp] \| SPT: 51155 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-08 16:28:42 (2 weeks ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇧🇷 diego	2026-06-08 08:00:20 (2 weeks ago)	[probe-44-49] 2026-06-08 07:43:08, Client: 144.123.76.159, Protocol: 6, Unauthorized activity to HTT ... show more [probe-44-49] 2026-06-08 07:43:08, Client: 144.123.76.159, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
🇩🇪 dispaisyenterprises	2026-06-07 02:16:51 (2 weeks ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 1187 GET / Accept: /; 1187 [1] TCP Reported by Di ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 1187 GET / Accept: /; 1187 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-06-06 14:28:02 (2 weeks ago)	Honeypot hit: Large payload (1457 bytes); 19999 [1] TCP	Bad Web Bot

Showing 1 to 15 of 65 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.75

🇵🇹 185.153.151.170

🇮🇩 103.67.80.61

🇺🇸 64.62.156.73

🇲🇾 14.192.214.110

🇬🇧 213.166.84.59

🇮🇹 195.231.122.90

🇬🇧 193.32.209.235

🇧🇷 177.200.32.42

🇨🇳 150.158.118.131

🇰🇷 122.35.192.33

🇺🇸 100.29.192.100

🇨🇦 99.231.3.95

🇺🇸 74.125.75.144

🇵🇰 72.255.19.231

🇷🇺 213.180.203.233

🇲🇾 180.74.219.158

🇦🇲 176.32.193.16

🇺🇾 167.57.0.97

🇺🇸 165.227.209.27