AbuseIPDB » 85.209.40.48

85.209.40.48 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 22%: ?

22%

ISP	Wuhan Hangyangxin Technology Co. Ltd.
Usage Type	Data Center/Web Hosting/Transit
Domain Name	tseot.cn
Country	China
City	Wuhan, Hubei

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 85.209.40.48

Whois 85.209.40.48

IP Abuse Reports for 85.209.40.48:

This IP address has been reported a total of 43 times from 26 distinct sources. 85.209.40.48 was first reported on May 1st 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2024-09-30 20:54:09 (1 week ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
diego	2024-09-18 22:44:13 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 14 times in the last 10800 seconds	DDoS Attack
diego	2024-09-18 06:12:05 (3 weeks ago)	[rede-44-49] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 95 seconds; Po ... show more[rede-44-49] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 95 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 18 03:11:44 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=29656 PROTO=TCP SPT=49088 DPT=50030 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 18 03:11:45 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=26811 PROTO=TCP SPT=49088 DPT=28017 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
OuverneY	2024-09-15 19:35:50 (3 weeks ago)	FW-PortScan: Traffic Blocked (Port=8443 <- 991 attempts), (Port=3000 <- 986 attempts), (Port=8080 < ... show moreFW-PortScan: Traffic Blocked (Port=8443 <- 991 attempts), (Port=3000 <- 986 attempts), (Port=8080 <- 984 attempts), (Port=50475 <- 984 attempts), (Port=9000 <- 982 attempts), (Port=50470 <- 982 attempts), (Port=9981 <- 981 attempts), (Port=9200 <- 981 attempts), (Port=8181 <- 981 attempts), (Port=444 <- 981 attempts), (Port=82 <- 980 attempts), (Port=50090 <- 980 attempts), (Port=9999 <- 979 attempts), (Port=9090 <- 979 attempts), (Port=8888 <- 979 attempts), (Port=81 <- 979 attempts), (Port=50091 <- 979 attempts), (Port=1003 <- 978 attempts), (Port=10000 <- 978 attempts), (Port=8096 <- 977 attempts), (Port=10443 <- 977 attempts), (Port=8999 <- 976 attempts), (Port=88 <- 976 attempts), (Port=8088 <- 976 attempts), (Port=2049 <- 976 attempts), (Port=10080 <- 976 attempts), (Port=8009 <- 975 attempts), (Port=7547 <- 975 attempts), (Port=5555 <- 975 attempts), (Port=50075 <- 975 attempts), (Port=10043 <- 975 attempts), (Port=808 <- 974 attempts), (Port=8006 <- 974 attempts), (Port=8002 <- 974 attempts), (Po show less	Port Scan
diego	2024-09-15 19:34:49 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, TCP Port Scan, Seen 10 times in the last 10800 seconds	DDoS Attack Port Scan
diego	2024-09-15 18:44:48 (3 weeks ago)	[rede-arem1] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 121 seconds; P ... show more[rede-arem1] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 121 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 15 15:44:30 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=11551 PROTO=TCP SPT=56279 DPT=8090 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 15:44:30 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=52239 PROTO=TCP SPT=56279 DPT=9000 WINDOW=1024 RES=0x00 SYN URGP=0 Se show less	Port Scan
diego	2024-09-15 17:51:49 (3 weeks ago)	[rede-168-134] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 25 seconds; ... show more[rede-168-134] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 25 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 15 14:51:30 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=4660 PROTO=TCP SPT=56279 DPT=50091 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 14:51:31 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=7521 PROTO=TCP SPT=56279 DPT=8089 WINDOW=1024 RES=0x00 SYN URGP=0 Sep show less	Port Scan
diego	2024-09-15 17:26:46 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, TCP Port Scan, Seen 6 times in the last 10800 seconds	DDoS Attack Port Scan
diego	2024-09-15 13:21:05 (3 weeks ago)	Events: TCP Port Scan, Seen 4 times in the last 10800 seconds	Port Scan
diego	2024-09-15 11:24:02 (3 weeks ago)	[rede-166-249] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 166 seconds; ... show more[rede-166-249] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 166 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 15 08:23:40 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=32830 PROTO=TCP SPT=49902 DPT=1521 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 08:23:41 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=28578 PROTO=TCP SPT=49902 DPT=1003 WINDOW=1024 RES=0x00 SYN URGP=0 Se show less	Port Scan
diego	2024-09-15 10:23:19 (3 weeks ago)	[rede-164-29] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 180 seconds; ... show more[rede-164-29] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 180 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 15 07:23:01 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=52049 PROTO=TCP SPT=49902 DPT=4443 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 07:23:02 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=61749 PROTO=TCP SPT=49902 DPT=808 WINDOW=1024 RES=0x00 SYN URGP=0 Sep show less	Port Scan
diego	2024-09-15 10:23:01 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, TCP Port Scan, Seen 208 times in the last 10800 seconds	DDoS Attack Port Scan
diego	2024-09-15 10:04:12 (3 weeks ago)	[rede-164-29] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 215 seconds; ... show more[rede-164-29] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 215 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 15 07:03:48 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=15823 PROTO=TCP SPT=49902 DPT=8082 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 07:03:48 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57345 PROTO=TCP SPT=49902 DPT=9981 WINDOW=1024 RES=0x00 SYN URGP=0 Se show less	Port Scan
diego	2024-09-15 09:00:48 (3 weeks ago)	[rede-164-29] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 20 seconds; P ... show more[rede-164-29] Port Scan detected from 85.209.40.48 (CN/China/-). 11 hits in the last 20 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Sep 15 06:00:31 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=42297 PROTO=TCP SPT=49902 DPT=8161 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 15 06:00:31 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=85.209.40.48 DST=0.0.0.x LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=40715 PROTO=TCP SPT=49902 DPT=8090 WINDOW=1024 RES=0x00 SYN URGP=0 Se show less	Port Scan
Red&Blue	2024-09-09 07:38:00 (1 month ago)	TCP Session Attack	DDoS Attack