171.80.12.2 — China Telecom, CN — High (66%)

Check an IP Address, Domain Name, Subnet, or ASN

171.80.12.2 was found in our database!

Confidence Level

66%

High?

Geolocation

🇨🇳

China

ISPChina Telecom

ASNAS151185

Activity Timeline

First seenJan 23, 2026, 05:55 PM

Last seen1d ago

180Sessions

208Events

Protocol Breakdown

REDIS

179 / 207

SSH

1 / 1

171.80.12.2 has a high threat confidence level of 66%, originating from China, on the China Telecom network (151185). It has been observed across 180 sessions targeting REDIS, SSH, First observed on January 23, 2026, most recently active March 4, 2026.

Primitives

Individual actions observed

Redis Config Set Dbfilename Custom5 Redis Config Set Dir Current Directory3 Redis Save2 Redis Flushdb2 Redis Uppercase Slaveof No One2 Redis Config Set Rdbcompression No2 Redis Config Set Rdbcompression Yes2 Redis Config Set Dir Cron1 Redis Config Set Dir Root Ssh1 Redis Config Set Dbfilename Root1 Redis Uppercase Config Set Dir Tmp1 Redis System Exec Remove Tmp Exp So1 Redis Uppercase Module Unload System1 Redis Uppercase Module Load Tmp Exp So1 Redis Uppercase Slaveof Remote Host Port1 Redis Uppercase Config Set Dbfilename Exp So1 Redis Set Cron Ssh Rsa Authorized Key Injection1

Related Threats

Explore related threat intelligence

🇨🇳More threats fromChina ASMore threats fromChina Telecom REDISMore threats targetingREDIS SSHMore threats targetingSSH { }Browse allAttack Patterns

WHOIS Lookup

IP Address	Confidence	Events
171.80.15.249	73%	122
111.170.27.101	29%	6
171.80.15.170	17%	11
111.170.27.105	24%	33
61.184.13.141	82%	41

IP Address	Confidence	Events
14.29.185.29	91%	6
124.71.133.200	82%	13
218.92.212.222	80%	13,684
180.184.178.165	100%	616
14.103.84.166	100%	968