61.157.85.35

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
24 reports
20 reporters · latest 7 months ago
ISP
CHINANET Sichuan province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Chengdu, Sichuan
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

61.157.85.35 has been reported 24 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
24 from 20 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 begou.dev
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/445
Port Scan
🇺🇸 donarev419
Connection to port 445 with data transfer. Data preview:
Port Scan Hacking
🇩🇪 _ArminS_
SP-Scan 53298:445 detected 2026.03.19 07:01:52 blocked until 2026.05.08 01:04:39
Port Scan
🇫🇷 geeek
Port scanning: 445 TCP Blocked
Port Scan
🇺🇸 drewf.ink
[05:16] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.???
Hacking Exploited Host
🇬🇧 Birdo
[Birdo SMB Honeypot] SMB unauthorized attempt
Exploited Host Brute-Force Port Scan Hacking
🇦🇹 HoneyPotEu-AT
1773882062 - 03/19/2026 02:01:02 Host: 61.157.85.35/61.157.85.35 Port: 445 TCP Blocked ...
Port Scan
🇳🇱 EGP Abuse Dept
Unsolicited connection to port 445
Port Scan Hacking
🇩🇪 Nerdscave Hosting
[SMB Honeypot Report] Timestamp: 2026-03-18 22:37:42 UTC Port: 59804 Attempted credentials (Base64): RVNNQnJ8GAF8InwCTlQgTE0gMC4xMnwCU01CIDIuMDAyfAJTTUIgMi4/Pz8= Attack Type: Unauthorized SMB connection attempt
Brute-Force Port Scan Hacking
🇫🇷 Kurom
Port scanning detected on company server. Targeted ports: [445]
Port Scan Hacking
🇹🇷 Threat.live
Suspicious activity, tcp/445
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: SMB traffic on port 445
IoT Targeted
🇺🇸 drewf.ink
[05:53] Triggered SMB honeypot on port 445. Type: NetBIOS + SMB1. Dialect(s): NT LM 0.12, SMB 2.002, SMB 2.???
Hacking Exploited Host
Anonymous
RdpGuard detected brute-force attempt on RDP
Brute-Force
🇩🇪 HoneyPot-FrPri
1773803342 - 03/18/2026 04:09:02 Host: 61.157.85.35/61.157.85.35 Port: 139 TCP Blocked ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 59.52.37.43
🇳🇱 200.138.46.180
🇳🇱 200.138.46.2
🇺🇸 70.183.233.205
🇺🇸 54.173.161.122
🇨🇳 36.33.167.165
🇳🇱 34.3.88.216
🇳🇱 200.138.46.167
🇳🇱 200.138.46.15
🇷🇺 178.178.222.50
🇩🇪 159.223.20.91
🇮🇳 139.59.86.13
🇻🇺 138.226.239.233
🇨🇳 123.14.125.68
🇨🇳 106.117.115.229
🇲🇾 47.250.141.111
🇨🇳 27.188.184.13
🇳🇱 200.138.46.139
🇳🇱 158.173.21.21
🇨🇳 119.48.135.99
feedback