This IP address has been reported a total of
202
times from
75 distinct
sources.
123.245.85.113 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ...
show moreHoneypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud
show less
Blocked by UFW on ns02 [17113/tcp]
Source port: 27640
TTL: 238
Packet length: 44
TOS: 0x00
This rep ...
show moreBlocked by UFW on ns02 [17113/tcp]
Source port: 27640
TTL: 238
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ...
show moreHoneypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ...
show moreHoneypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
show less
[FriJun0516:33:52.1380162026][security2:error][pid1464645:tid1464928][client123.245.85.113:0]ModSecu ...
show more[FriJun0516:33:52.1380162026][security2:error][pid1464645:tid1464928][client123.245.85.113:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.4server.biz\"][uri\"/\"][unique_id\"aiLeUEcFz5XIfI5SpR_FewAAANE\"]
show less
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ...
show moreHoneypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ...
show moreHoneypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Sever ...
show moreHoneypot detection: Docker daemon unauthorized access / container escape attempt on port 2376. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
Showing 1 to
15
of 202 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩