56.125.84.114

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
581 reports
166 reporters · latest 57 minutes ago
ISP
AWS Asia Pacific (Seoul) Region
Usage Type
Data Center/Web Hosting/Transit
ASN
AS16509
Hostname(s)
scan.apcosys.cc
Domain Name
amazon.com
Country
🇧🇷 Brazil
City
Sao Paulo, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
581 from 166 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 149 🇺🇸 United States of America 124 🇩🇪 Germany 76
Most common categories Port Scan 379 Hacking 166 Web App Attack 92 Brute-Force 84 SSH 53
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 EnthecSolutions
Detected by Enthec Solutions. | Attempts: 30 in 24h | Target port: 9864
Port Scan Hacking
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/7547 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇦🇺 theck5263
Direct HTTP connection to this server IP, with an exploit probe detected locally. AbuseIPDB confidence score was 100.
Web App Attack
🇫🇷 uthul
T-Pot honeypot: 58 hits on ports [2181, 4786, 5985, 9864, 63790] (automated)
Port Scan
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 11 payload-bearing connection/event(s), 357 payload byte(s) total, maximum payload 175 byte(s). Target port(s): 63790.
Port Scan Hacking
🇺🇸 donarev419
Port scan detected on port 9864 (connection without data transfer)
Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 15 application-level events across 2 target ports and 15 source port(s). Ports: 9864/service, 7547/service. Sensors: Honeytrap.
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (14 bytes of payload); 9864 [2] TCP
Port Scan
🇳🇱 donarev419
Connection to port 9864 with data transfer. Data preview: *1 $4 PING
Port Scan Hacking
🇩🇪 banankicks
Unauthorized connection attempt detected from IP address 56.125.84.114 to port 5432 (banankicks-server) [o]
Brute-Force Exploited Host
🇬🇧 Vluxon, Inc.
Port Scan
🇺🇸 HamSammich
Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-11-09T05:21Z).
Port Scan Web App Attack
🇦🇺 Terrier
Blocked for HTTP vulnerability scanning (excessive 404)
Web App Attack
🇨🇳 PrivateLiu
Bad Web Bot Web App Attack
🇺🇸 donarev419
Port scan detected on port 5985 (connection without data transfer)
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 210.206.95.162
🇺🇸 157.22.74.180
🇮🇳 106.202.77.117
🇹🇷 95.0.32.88
🇳🇱 93.123.109.214
🇰🇼 62.150.237.107
🇬🇧 45.133.173.125
🇮🇷 37.148.119.135
🇺🇸 20.98.137.38
🇺🇸 20.42.59.55
🇺🇸 198.46.134.48
🇻🇳 171.250.161.7
🇳🇱 142.93.131.216
🇧🇷 35.198.11.113
🇳🇱 204.76.203.43
🇲🇽 186.96.158.180
🇩🇪 109.160.32.32
🇺🇸 66.45.144.201
🇺🇸 20.65.146.34
🇷🇺 195.239.40.213
feedback