JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 123.25.97.85

123.25.97.85 was found in our database!

This IP was reported 119 times. Confidence of Abuse is 100%: ?

100%

ISP	Vietnam Posts and Telecommunications Group
Usage Type	Mobile ISP
ASN	AS45899
Domain Name	vnpt.com.vn
Country	🇻🇳 Viet Nam
City	Da Nang, Da Nang City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 123.25.97.85

Whois 123.25.97.85

IP Abuse Reports for 123.25.97.85:

This IP address has been reported a total of 119 times from 72 distinct sources. 123.25.97.85 was first reported on February 17th 2026, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mail.avx.gr	2026-07-27 15:35:22 (14 hours ago)	Plesk Fail2Ban jail: plesk-dovecot-nonexi. Evidence: Jul 25 14:31:39 mail dovecot_authdb_plesk[64381 ... show more Plesk Fail2Ban jail: plesk-dovecot-nonexi. Evidence: Jul 25 14:31:39 mail dovecot_authdb_plesk[643817]: No such user '[email protected]' in mail authorization database Jul 25 14:31:41 mail dovecot: pop3-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=10.0.0.4, session=<ZiId1W1XCrN7GWFV> show less	Brute-Force
🇨🇭 zynex	2026-07-25 16:49:12 (2 days ago)	URL Probing: /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 16:34:22 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 123.25.97.85 (static.vdc.vn): 1 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 123.25.97.85 (static.vdc.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 12:34:13.052373 2026] [security2:error] [pid 1273265:tid 1273265] [client 123.25.97.85:34416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sharlenejensen.com"] [uri "/app/.env"] [unique_id "amTlhcBPDzpvdw7jmnUG3AAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TurboTechieSystems	2026-07-25 15:05:25 (2 days ago)	2026-07-25T08:50:18.214713-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed ... show more 2026-07-25T08:50:18.214713-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T09:09:36.504127-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T09:28:39.654009-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T09:47:10.554930-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T10:05:24.223412-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , show less	Brute-Force
🇬🇧 David Gebler	2026-07-25 15:02:00 (2 days ago)	Jul 25 15:02:00 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show more Jul 25 15:02:00 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=123.25.97.85 show less	Brute-Force Email Spam
🇦🇺 brocococonut	2026-07-25 14:01:32 (2 days ago)	Jul 25 14:20:05 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in ... show more Jul 25 14:20:05 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=67.219.110.53, session=<dnenzWdXpJt7GWFV> Jul 25 14:38:17 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=67.219.110.53, session=<8uO7DmhXYrp7GWFV> Jul 25 14:56:33 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=67.219.110.53, session=<hZ8FUGhXnLt7GWFV> Jul 25 09:49:07 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=67.219.110.53, session=<+Q6bBGRXiN57GWFV> Jul 25 10:06:44 01 dovecot: pop3-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<admin@cypherband. ... show less	Brute-Force
🇬🇧 David Gebler	2026-07-25 13:46:54 (2 days ago)	Jul 25 13:46:54 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show more Jul 25 13:46:54 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=123.25.97.85 show less	Brute-Force Email Spam
🇩🇪 eebh.hu	2026-07-25 13:34:59 (2 days ago)	Jul 25 15:34:57 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<su ... show more Jul 25 15:34:57 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=194.36.88.23, TLS, session=<+e34jW9Xup97GWFV> ... show less	Brute-Force
Anonymous	2026-07-25 12:57:03 (2 days ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇵🇾 SecOpsSL	2026-07-25 12:52:38 (2 days ago)	2026-07-25 09:34:23,367 WARN [Pop3SSLServer-0] [ip=192.168.0.25;oip=123.25.97.85;cid=211;] security ... show more 2026-07-25 09:34:23,367 WARN [Pop3SSLServer-0] [ip=192.168.0.25;oip=123.25.97.85;cid=211;] security - cmd=Auth; [email protected]; protocol=pop3; error=authentication failed for [[email protected]], invalid password; 2026-07-25 09:52:37,354 WARN [Pop3SSLServer-0] [ip=192.168.0.25;oip=123.25.97.85;cid=214;] security - cmd=Auth; [email protected]; protocol=pop3; error=authentication failed for [[email protected]], invalid password; show less	Email Spam Brute-Force
🇺🇸 TurboTechieSystems	2026-07-25 12:37:26 (2 days ago)	2026-07-25T06:25:03.245637-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed ... show more 2026-07-25T06:25:03.245637-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T06:43:04.390089-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T07:01:06.353247-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T07:19:12.343452-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , 2026-07-25T07:37:25.372578-05:00 dovecot: pop3-login: Disconnected: Connection closed auth failed , show less	Brute-Force
🇩🇪 Hary74656	2026-07-25 12:34:50 (2 days ago)	Jul 25 13:22:25 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts i ... show more Jul 25 13:22:25 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=78.46.107.184, TLS, session=<ycIItG1XIJN7GWFV> Jul 25 13:40:27 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=78.46.107.184, TLS, session=<OlN99G1XNMp7GWFV> Jul 25 13:58:29 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=78.46.107.184, TLS, session=<nzL6NG5XOpt7GWFV> Jul 25 14:16:33 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=78.46.107.184, TLS, session=<j72WdW5XPrJ7GWFV> Jul 25 14:34:46 odin dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 2 secs): user=<[email protected] ... show less	Brute-Force
🇬🇧 David Gebler	2026-07-25 12:34:00 (2 days ago)	Jul 25 12:34:00 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show more Jul 25 12:34:00 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=123.25.97.85 show less	Brute-Force Email Spam
🇵🇱 webadmin	2026-07-25 12:28:11 (2 days ago)		Brute-Force
🇺🇸 vandomatos	2026-07-25 12:08:30 (2 days ago)	Jul 25 04:32:21 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user ... show more Jul 25 04:32:21 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=154.53.60.253, TLS, session=<2ROR121Xhs97GWFV> Jul 25 04:50:23 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=154.53.60.253, TLS, session=<waIDGG5X6K97GWFV> Jul 25 05:08:25 servidor dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=123.25.97.85, lip=154.53.60.253, TLS, session=<9HmEWG5XDMh7GWFV> ... show less	Hacking Spoofing Brute-Force

Showing 1 to 15 of 119 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.185

🇮🇹 185.84.88.30

🇺🇸 162.216.150.160

🇺🇸 107.167.34.125

🇺🇸 91.230.168.234

🇳🇱 91.92.42.19

🇫🇷 85.217.140.45

🇫🇮 194.89.157.218

🇰🇿 193.31.200.85

🇨🇴 190.5.200.98

🇧🇷 177.155.139.51

🇩🇪 167.94.146.47

🇮🇳 117.203.230.86

🇦🇿 109.205.160.231

🇺🇸 85.239.151.10

🇩🇪 85.216.81.75

🇺🇸 54.245.218.157

🇬🇧 51.195.149.120

🇺🇸 50.84.92.9

🇧🇪 34.38.181.146