JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.125.21.149

123.125.21.149 was found in our database!

This IP was reported 89 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Beijing province network
Usage Type	Fixed Line ISP
ASN	AS4808
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.125.21.149

Whois 123.125.21.149

IP Abuse Reports for 123.125.21.149:

This IP address has been reported a total of 89 times from 45 distinct sources. 123.125.21.149 was first reported on April 26th 2023, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-11-29 16:40:39 (7 months ago)	[30/Nov/2025:03:40:38 +1100] "GET /adminer/ HTTP/1.1" 301 238 "Mozilla/5.0 (Macintosh; Intel Mac OS ... show more [30/Nov/2025:03:40:38 +1100] "GET /adminer/ HTTP/1.1" 301 238 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" show less	Hacking Web App Attack
🇦🇺 robotstxt	2025-11-28 12:14:14 (7 months ago)	123.125.21.149 - - [28/Nov/2025:12:12:54 +0000] "GET /phpmyadmin/ HTTP/2.0" 404 10975 "-" rt="0.298" ... show more 123.125.21.149 - - [28/Nov/2025:12:12:54 +0000] "GET /phpmyadmin/ HTTP/2.0" 404 10975 "-" rt="0.298" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" "-" h="139.99.133.125" sn="magazine.kavehome.com.au" ru="/phpmyadmin/" u="/index.php" ucs="-" ua="unix:/var/run/php/magazineau82.sock" us="404" uct="0.000" urt="0.298" 123.125.21.149 - - [28/Nov/2025:12:12:57 +0000] "GET /pma/ HTTP/2.0" 404 10975 "-" rt="0.292" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" "-" h="139.99.133.125" sn="magazine.kavehome.com.au" ru="/pma/" u="/index.php" ucs="-" ua="unix:/var/run/php/magazineau82.sock" us="404" uct="0.000" urt="0.292" 123.125.21.149 - - [28/Nov/2025:12:12:54 +0000] "GET /phpmyadmin/ HTTP/2.0" 404 10975 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" "-" 123.125.21.149 - ... show less	Bad Web Bot
Anonymous	2025-11-26 03:29:19 (8 months ago)	123.125.21.149 - - [26/Nov/2025:03:29:00 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 152 "-" "Mozilla/5.0 ... show more 123.125.21.149 - - [26/Nov/2025:03:29:00 +0000] "GET /phpmyadmin/ HTTP/1.1" 404 152 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" 123.125.21.149 - - [26/Nov/2025:03:29:01 +0000] "GET /pma/ HTTP/1.1" 404 152 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" 123.125.21.149 - - [26/Nov/2025:03:29:19 +0000] "GET /mail/ HTTP/1.1" 404 152 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15" ... show less	Web App Attack
🇫🇷 security.rdmc.fr	2025-07-03 05:23:15 (1 year ago)	Port Scan Attack proto:TCP src:50989 dst:20	Port Scan
Anonymous	2025-05-30 00:29:32 (1 year ago)	Ports: 25,2525,587,465; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-02-03 00:10:45 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/123.125.21.149 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/123.125.21.149 2025-02-02 04:33:28 /axis2/ 2025-02-02 04:29:28 / 2025-02-02 04:33:28 /druid/ 2025-02-02 04:34:28 /manager/ 2025-02-02 04:29:28 / 2025-02-02 04:33:28 /arcgis/ 2025-02-02 04:29:28 /never_could_exists 2025-02-02 04:32:28 /adminer/ 2025-02-02 04:33:28 /axis/ 2025-02-02 04:34:28 /imc/ show less	Web App Attack
🇨🇳 ThreatBook.io	2025-02-02 00:31:37 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/123.125.21.149 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/123.125.21.149 2025-02-01 07:06:06 / 2025-02-01 07:06:06 / 2025-02-01 07:06:09 /adminer/ 2025-02-01 07:06:08 /never_could_exists show less	Web App Attack
🇨🇳 ThreatBook.io	2025-01-17 00:37:56 (1 year ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/123.125.21.149 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/123.125.21.149 2025-01-16 09:44:38 / show less	Web App Attack
🇷🇴 /dev/null	2024-12-25 23:25:14 (1 year ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force
🇷🇴 /dev/null	2024-12-23 23:25:19 (1 year ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force
🇷🇴 /dev/null	2024-12-22 00:46:18 (1 year ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force
🇷🇴 /dev/null	2024-12-20 23:53:32 (1 year ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force
🇩🇪 apg	2024-12-20 16:40:39 (1 year ago)	Unauthorized attempts on port 3306	Port Scan Brute-Force
🇫🇮 YaRi78	2024-12-20 05:27:48 (1 year ago)	Unsolicited smtp connection attempt from 123.125.21.149 detected	Port Scan
🇷🇴 /dev/null	2024-12-19 23:53:25 (1 year ago)	RouterOS: Portscanner detected.	Port Scan Brute-Force

Showing 1 to 15 of 89 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.46.0.74

🇨🇳 183.236.175.134

🇮🇳 103.203.175.201

🇧🇬 77.76.128.35

🇹🇭 223.206.215.88

🇮🇳 216.10.245.205

🇵🇱 176.53.159.197

🇨🇳 113.88.242.136

🇺🇸 96.84.78.242

🇹🇷 94.154.43.177

🇲🇾 47.250.180.183

🇺🇸 43.166.142.76

🇨🇳 220.168.118.133

🇺🇸 172.110.223.124

🇬🇧 154.16.44.107

🇺🇸 150.107.38.197

🇫🇮 147.185.133.149

🇺🇸 147.185.132.144

🇿🇦 102.129.53.193

🇺🇸 47.251.185.192