JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.249.250.254

140.249.250.254 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 54%: ?

54%

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Commercial
ASN	AS136195
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.249.250.254

Whois 140.249.250.254

IP Abuse Reports for 140.249.250.254:

This IP address has been reported a total of 49 times from 28 distinct sources. 140.249.250.254 was first reported on March 14th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 baku.hosting	2026-06-11 15:34:42 (3 weeks ago)	CSF Auto Report: (eximsyntax) Exim syntax errors from 140.249.250.254 (CN/China/-): 8 in the last 36 ... show more CSF Auto Report: (eximsyntax) Exim syntax errors from 140.249.250.254 (CN/China/-): 8 in the last 3600 secs show less	Brute-Force Web App Attack
🇬🇧 prime_fusion_ld	2026-06-11 12:12:05 (3 weeks ago)	Blocked by CSF/LFD on vps.primefusion.co.uk. Trigger: 3600 Ports: *	Port Scan
🇩🇪 EnthecSolutions	2026-06-10 22:00:44 (3 weeks ago)	Detected by Enthec Solutions. \| Attempts: 311 in 24h \| Target port: 2226	Port Scan Hacking
🇵🇱 sefinek.net	2026-06-10 10:45:40 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 1181 GET /jolokia/read/Users:database=UserDatabase,type=UserDatab ... show more Honeypot hit: HTTP/1.1 request on 1181 GET /jolokia/read/Users:database=UserDatabase,type=UserDatabase User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.10 Accept: / Accept-Language: en Accept-Encoding: gzip; 1181 [8] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
Anonymous	2026-06-10 09:54:22 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 12206 GET /jolokia/read/Users:database=UserDatabase,type=UserData ... show more Honeypot hit: HTTP/1.1 request on 12206 GET /jolokia/read/Users:database=UserDatabase,type=UserDatabase User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.4 Safari/605.1.15 Accept: / Accept-Language: en Accept-Encoding: gzip; 12206 [8] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 excill	2026-06-10 03:01:21 (3 weeks ago)	Honeypot mesh observed 5881 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇬🇧 gbzret4d	2026-06-09 23:27:56 (3 weeks ago)	Honeypot [uk-production01]: HTTP/1.1 request on 12300 GET /jolokia/read/Users:database=UserDatabase ... show more Honeypot [uk-production01]: HTTP/1.1 request on 12300 GET /jolokia/read/Users:database=UserDatabase,type=UserDatabase User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10) AppleWebKit/537.16 (KHTML, like Gecko) Version/8.0 Safari/537.16 Accept: / Accept-Language: en Accept-Encoding: gzip; 12300 [8] TCP show less	Hacking Bad Web Bot
🇵🇱 sefinek.net	2026-06-09 18:02:36 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 1181 GET /index.jsp User-Agent: Mozilla/5.0 (Windows NT 10.0; Win ... show more Honeypot hit: HTTP/1.1 request on 1181 GET /index.jsp User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.2 Accept: / Accept-Language: en Accept-Encoding: gzip; 1181 [4] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
Anonymous	2026-06-09 16:51:04 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 12206 GET /index.jsp User-Agent: Mozilla/5.0 (SS; Linux x86_64) A ... show more Honeypot hit: HTTP/1.1 request on 12206 GET /index.jsp User-Agent: Mozilla/5.0 (SS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Accept: / Accept-Language: en Accept-Encoding: gzip; 12206 [4] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 dispaisyenterprises	2026-06-09 16:28:04 (3 weeks ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9008 GET /jolokia/read/Users:database=UserDatabase, ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9008 GET /jolokia/read/Users:database=UserDatabase,type=UserDatabase User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 108) AppleWebKit/536.15 (KHTML like Gecko) Version/6.0 Safari/536.16 Accept: / Accept-Language: en Accept-Encoding: gzip; 9008 [48] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 EnthecSolutions	2026-06-09 14:00:47 (3 weeks ago)	Detected by Enthec Solutions. \| Attempts: 79 in 24h \| Target port: 8009	Port Scan Hacking
🇬🇧 gbzret4d	2026-06-09 10:03:53 (3 weeks ago)	Honeypot [uk-production01]: HTTP/1.1 request on 12300 GET /?echo+pOGnTfwWNK User-Agent: Mozilla/5.0 ... show more Honeypot [uk-production01]: HTTP/1.1 request on 12300 GET /?echo+pOGnTfwWNK User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Safari/605.1.15 Accept-Encoding: gzip; 12300 [4] TCP show less	Hacking Bad Web Bot
🇩🇪 NxtGenIT	2026-06-09 07:34:53 (3 weeks ago)	ConPot Honeypot hit, Event Type: NEW_CONNECTION.	FTP Brute-Force
🇩🇪 dispaisyenterprises	2026-06-09 05:52:00 (3 weeks ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9008 GET /?echo+pOGnTfwWNK User-Agent: Mozilla/5.0 ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9008 GET /?echo+pOGnTfwWNK User-Agent: Mozilla/5.0 (Mac OS X 13_2) AppleWebKit/537.36 (KHTML, like Gecko) Edge/117.0 Safari/537.36 Accept-Encoding: gzip; 9008 [8] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇩🇪 Nick2	2026-06-09 04:00:04 (3 weeks ago)	2026-06-09 03:46:55 connection from 140.249.250.254 2026-06-09 03:47:05 connection from 140.249.250. ... show more 2026-06-09 03:46:55 connection from 140.249.250.254 2026-06-09 03:47:05 connection from 140.249.250.254 2026-06-09 03:47:26 connection from 140.249.250.254 2026-06-09 03:47:28 connection from 140.249.250.254 2026-06-09 04:00:02 connection from 140.249.250.254 ... show less	Brute-Force Port Scan SSH

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.204.171.7

🇨🇳 121.29.84.56

🇰🇷 114.202.80.152

🇬🇧 35.203.211.71

🇨🇳 219.153.106.29

🇨🇳 119.146.91.181

🇨🇳 117.50.70.169

🇨🇳 115.190.126.68

🇮🇶 82.129.23.162

🇨🇳 47.92.101.48

🇩🇪 43.228.157.17

🇳🇱 34.158.116.44

🇩🇪 4.182.219.135

🇧🇷 177.74.153.10

🇨🇳 175.170.144.16

🇩🇪 139.162.186.99

🇨🇳 111.42.132.19

🇵🇰 110.93.224.226

🇹🇷 88.255.189.50

🇺🇸 67.85.146.216