61.157.85.201

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
23 reports
19 reporters · latest 7 months ago
ISP
CHINANET Sichuan province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Chengdu, Sichuan
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

61.157.85.201 has been reported 23 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
23 from 19 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 donarev419
Connection to port 445 with data transfer. Data preview:
Port Scan Hacking
🇺🇸 drewf.ink
[05:02] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.???
Hacking Exploited Host
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 61.157.85.201 to port 445 (ger-03) [b]
Brute-Force Exploited Host
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 61.157.85.201 to port 445 (ger-03) [z]
Brute-Force Exploited Host
🇫🇷 geeek
Port scanning: 445 TCP Blocked
Port Scan
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 61.157.85.201 to port 445 (ger-03) [j]
Brute-Force Exploited Host
🇬🇧 Birdo
[Birdo SMB Honeypot] SMB unauthorized attempt
Exploited Host Brute-Force Port Scan Hacking
🇸🇬 drewf.ink
[00:15] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.???
Hacking Exploited Host
🇦🇹 HoneyPotEu-AT
1773871989 - 03/18/2026 23:13:09 Host: 61.157.85.201/61.157.85.201 Port: 445 TCP Blocked ...
Port Scan
🇫🇷 Kurom
Port scanning detected on company server. Targeted ports: [445]
Port Scan Hacking
🇵🇱 nfsec.pl
Detected: TCP scan on port: 445 with flags: SYN
Port Scan
🇯🇵 mkaraki
1773827089 # Service_probe # SIGNATURE_SEND # source_ip:61.157.85.201 # dst_port:445 ...
Port Scan
🇺🇸 drewf.ink
[07:30] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.???
Hacking Exploited Host
🇩🇪 Mailguard-FRD
1773818292 - 03/18/2026 08:18:12 Host: 61.157.85.201/61.157.85.201 Port: 445 TCP Blocked ...
Port Scan
🇩🇪 HoneyPot-FrPri
1773797860 - 03/18/2026 02:37:40 Host: 61.157.85.201/61.157.85.201 Port: 139 TCP Blocked ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 185.218.86.33
🇺🇸 159.89.229.105
🇵🇰 139.135.59.86
🇳🇱 45.148.10.141
🇺🇸 40.119.43.103
🇺🇸 40.74.208.35
🇺🇸 40.67.171.38
🇩🇪 8.211.46.254
🇸🇦 5.41.78.143
🇨🇱 190.47.59.9
🇺🇸 165.154.202.254
🇨🇳 125.126.70.123
🇨🇳 124.220.82.129
🇳🇴 85.165.94.212
🇧🇦 80.65.90.155
🇧🇷 45.186.77.55
feedback