JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.245.85.2

123.245.85.2 was found in our database!

This IP was reported 193 times. Confidence of Abuse is 53%: ?

53%

ISP	JunQu2-SY-LN
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenyang, Liaoning

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.245.85.2

Whois 123.245.85.2

IP Abuse Reports for 123.245.85.2:

This IP address has been reported a total of 193 times from 71 distinct sources. 123.245.85.2 was first reported on January 17th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-06-14 02:58:15 (1 day ago)	Blocked by UFW on MVI [9443/tcp] \| SPT: 27899 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on MVI [9443/tcp] \| SPT: 27899 \| TTL: 233 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-06-12 19:13:09 (2 days ago)	Blocked by UFW on LAXHH [1494/tcp] \| SPT: 47970 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [1494/tcp] \| SPT: 47970 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-11 14:04:28 (3 days ago)	tcp/10355	Port Scan
🇳🇱 donarev419	2026-06-11 08:24:26 (3 days ago)	Connection to port 1554 with data transfer. Data preview: �	Port Scan Hacking
🇫🇮 Maxetow	2026-06-10 08:34:08 (4 days ago)	Scan port: 9005 \| 1 total \| size=44B	Port Scan
🇬🇧 PeravixGroup	2026-06-09 15:43:11 (5 days ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-08 20:40:29 (6 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-06-07 16:29:57 (1 week ago)	123.245.85.2 - - [07/Jun/2026:18:29:56 +0200] "GET /assets/fire_admin/images/logo.png HTTP/1.1" 404 ... show more 123.245.85.2 - - [07/Jun/2026:18:29:56 +0200] "GET /assets/fire_admin/images/logo.png HTTP/1.1" 404 527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" ... show less	Web App Attack
🇬🇧 PeravixGroup	2026-06-07 16:19:29 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-06-02 13:52:47 (1 week ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-01 15:19:02 (1 week ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-30 13:49:04 (2 weeks ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-30 07:31:31 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-29 08:14:23 (2 weeks ago)	Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aar ... show more Honeypot detection: POP3 email brute-force authentication attempt on port 110. Severity: MEDIUM. Aaran.cloud show less	Brute-Force
🇦🇺 LiftUp Hosting	2026-05-28 19:21:58 (2 weeks ago)	Honeypot hit: Large payload (1457 bytes); 6002 [1] TCP	Bad Web Bot

Showing 1 to 15 of 193 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4883:1000::c

🇩🇪 213.176.119.192

🇺🇸 162.216.149.154

🇺🇸 147.185.132.213

🇰🇷 125.249.72.194

🇳🇱 45.148.10.152

🇷🇴 2.57.122.238

🇮🇳 208.66.92.58

🇱🇹 195.12.191.130

🇳🇱 188.166.121.62

🇬🇧 185.127.70.250

🇭🇰 118.193.33.130

🇨🇳 117.50.174.180

🇰🇷 112.216.129.27

🇨🇳 106.13.182.13

🇮🇩 103.151.140.97

🇸🇬 47.236.201.178

🇨🇱 34.176.12.117

🇮🇩 34.128.122.226

🇺🇸 20.29.49.244