JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.125.97.104

202.125.97.104 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 100%: ?

100%

ISP	Prefix for APNICTRAINING LAB DC
Usage Type	Commercial
ASN	AS45192
Domain Name	github.com
Country	🇦🇺 Australia
City	Brisbane, Queensland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.125.97.104

Whois 202.125.97.104

IP Abuse Reports for 202.125.97.104:

This IP address has been reported a total of 44 times from 37 distinct sources. 202.125.97.104 was first reported on May 26th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 jay hung	2026-06-12 13:06:35 (1 day ago)	2026-06-12T13:06:33.882160+00:00 quarktech kernel: [1104436.855579] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-06-12T13:06:33.882160+00:00 quarktech kernel: [1104436.855579] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=202.125.97.104 DST=172.237.20.248 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=39942 PROTO=TCP SPT=61234 DPT=5900 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-06-11 22:30:04 (1 day ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 Little Iguana	2026-06-11 22:17:04 (1 day ago)	trying to access non-authorized port	Port Scan
🇫🇷 ISPLtd	2026-06-11 22:16:42 (1 day ago)	Jun 11 19:14:23 202.125.97.104 TCP SPT=61234 DPT=5995 SYN Jun 11 19:16:31 202.125.97.104 TCP SPT=612 ... show more Jun 11 19:14:23 202.125.97.104 TCP SPT=61234 DPT=5995 SYN Jun 11 19:16:31 202.125.97.104 TCP SPT=61234 DPT=5982 SYN Jun 11 19:16:41 202.125.97.104 TCP SPT=61234 DPT=5938 ... show less	Port Scan
🇺🇸 Cyber Crusader	2026-06-11 19:35:52 (1 day ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇫🇷 security.rdmc.fr	2026-06-11 19:20:45 (1 day ago)	Port Scan Attack proto:TCP src:61234 dst:5900	Port Scan
🇫🇷 Yepngo	2026-06-11 11:03:58 (2 days ago)	2026-06-11T12:33:21.754718+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2026-06-11T12:33:21.754718+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=230 ID=58515 PROTO=TCP SPT=61234 DPT=5985 WINDOW=1025 RES=0x00 SYN URGP=0 2026-06-11T13:01:16.132189+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=230 ID=58398 PROTO=TCP SPT=61234 DPT=5922 WINDOW=1025 RES=0x00 SYN URGP=0 2026-06-11T13:01:16.132189+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=230 ID=58398 PROTO=TCP SPT=61234 DPT=5922 WINDOW=1025 RES=0x00 SYN URGP=0 2026-06-11T13:03:57.735702+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=9356 PROTO=TCP SPT=6 ... show less	Port Scan
🇫🇷 Yepngo	2026-06-11 10:19:52 (2 days ago)	2026-06-11T11:56:23.945190+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more 2026-06-11T11:56:23.945190+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=22281 PROTO=TCP SPT=61234 DPT=5944 WINDOW=1025 RES=0x00 SYN URGP=0 2026-06-11T12:00:41.094415+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=230 ID=65221 PROTO=TCP SPT=61234 DPT=5943 WINDOW=1025 RES=0x00 SYN URGP=0 2026-06-11T12:13:08.302820+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=56751 PROTO=TCP SPT=61234 DPT=5969 WINDOW=1025 RES=0x00 SYN URGP=0 2026-06-11T12:15:31.389585+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=202.125.97.104 DST=151.80.47.9 LEN=44 TOS=0x00 PREC=0x00 TTL=230 ID=12804 PROTO=TCP SPT= ... show less	Port Scan
🇩🇪 cloudmax	2026-06-11 04:51:24 (2 days ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
🇩🇪 iNetWorker	2026-06-11 04:41:14 (2 days ago)	firewall-block, port(s): 5973/tcp, 5996/tcp	Port Scan
🇷🇴 abuse_IP_reporter	2026-06-11 01:45:16 (2 days ago)	Jun 11 04:25:12 server UFW BLOCK SRC=202.125.97.104 PROTO=TCP SPT=61234 DPT=5946	Port Scan
🇺🇸 Choice Tech LLC	2026-06-10 23:50:04 (2 days ago)	Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=5929,5931,5958	Port Scan Hacking
🇺🇸 Choice Tech LLC	2026-06-10 23:20:03 (2 days ago)	Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=5956,5978,5987,6000	Port Scan Hacking
Anonymous	2026-06-10 14:00:22 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 5962 [1], 5910 [1], 5950 [1] TCP Reported by: ht ... show more Honeypot hit: Empty payload (likely service probe); 5962 [1], 5910 [1], 5950 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 en0	2026-06-10 12:29:43 (3 days ago)	202.125.97.104 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident cou ... show more 202.125.97.104 was recorded 3 times by 1 hosts attempting to connect to 3 unique ports. Incident counter (4h, 24h, all-time): 3, 3, 10 show less	Port Scan

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.219

🇱🇹 195.12.191.130

🇮🇩 114.8.210.26

🇳🇱 77.83.39.241

🇧🇷 56.125.24.45

🇺🇸 20.169.91.107

🇺🇸 18.207.163.190

🇺🇸 208.84.100.215

🇮🇳 168.144.95.207

🇸🇦 167.86.162.220

🇳🇱 138.226.239.10

🇰🇷 125.133.210.82

🇷🇺 109.195.14.161

🇫🇮 109.172.95.248

🇺🇸 74.249.201.6

🇺🇸 66.132.186.242

🇫🇷 51.68.34.131

🇺🇸 45.3.37.26

🇯🇵 35.77.101.226

🇺🇸 34.239.197.197