185.20.124.170

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
76 reports
37 reporters · latest 1 day ago
ISP
Jusan Mobile JSC
Usage Type
Fixed Line ISP
ASN
AS35104
Domain Name
qmobile.kz
Country
🇰🇿 Kazakhstan
City
Aktobe, Aktobe
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
76 from 37 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 40 🇩🇪 Germany 12 🇺🇸 United States of America 8
Most common categories Port Scan 58 Hacking 24 Brute-Force 9 Exploited Host 3 IoT Targeted 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Unauthorized access (445/tcp/microsoft-ds)
Port Scan
🇩🇪 jann
Honeypot: connection to unused port 445 at 2026-11-13 07:39:15 UTC. No service runs there, any connection is unsolicited scanning.
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-12 UTC.
Hacking
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 2 Dionaea events.
Port Scan
🇩🇪 Coinetic AI Security
Connection to a trap port: 1 attempts on port 445, 2026-11-12 10:27 - 10:27 UTC. Blocked and reported automatically by Coinetic AI Security (https://coinetic.io).
Port Scan Hacking
🇦🇺 LiftUp Hosting
Honeypot hit: SMB traffic on port 445
Hacking
🇺🇸 sumnone
Port probing on unauthorized port 445
Port Scan Hacking Exploited Host
🇫🇷 sthoyer.de
Port Scan
🇺🇸 xclmp
Unauthorized connection attempts consistent with that of port probing and scanning from 185.20.124.170 were detected at 2026-11-11 06:52:32 UTC. Learn More: https://fia.project-furina.com/report/23200
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 4 Dionaea events.
Port Scan
🇨🇦 Luhte
Unsolicited TCP connection from 185.20.124.170 to port 0 at 2026-11-11T04:03:20Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
Port Scan Hacking
🇫🇷 bastivanconsulting
Honeypot hit | Target: Windows file server | Activity: unauthorised connection attempt | Port: 445
Port Scan Hacking
🇩🇪 KPS
PortscanM
Port Scan
🇫🇷 Kejult
Honeypot Finding: SMB activity on TCP/445; 3 Dionaea events.
Port Scan
🇺🇸 knock
Knock-Knock honeypot brute-force: SMB (8 total hits)
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 217.146.80.112
🇳🇱 195.178.110.30
🇰🇷 121.162.71.208
🇳🇱 200.138.46.138
🇺🇸 165.232.140.57
🇺🇸 162.158.158.95
🇫🇷 141.95.162.162
🇰🇷 119.207.63.208
🇷🇴 80.94.95.116
🇱🇹 62.60.134.134
🇺🇸 20.150.193.142
🇺🇸 209.141.46.172
🇺🇸 172.93.148.180
🇨🇳 171.120.34.99
🇮🇩 165.154.48.160
🇸🇬 124.246.85.177
🇨🇳 110.179.80.108
🇺🇸 45.80.107.125
🇺🇸 204.154.10.30
🇲🇽 187.153.221.43
feedback