JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

109.125.148.238

Recent Activity

Abuse Confidence Score

100% Critical

146 reports

45 reporters · latest 1 day ago

ISP: Pishgaman Tejarat Sayar DSL Network
Usage Type: Fixed Line ISP
ASN: AS49100
Domain Name: pishgaman.net
Country: 🇮🇷 Iran (Islamic Republic of)
City: Tehran, Tehran

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

146 from 45 distinct reporters

First reported

September 6th 2026

Most recent report

1 day ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 74 🇯🇵 Japan 30 🇫🇷 France 9

Most common categories SSH 137 Brute-Force 125 Port Scan 5 Web App Attack 3 Hacking 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 yazzang	2026-11-12 00:03:30 UTC · (1 day ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.	Brute-Force SSH
🇨🇳 さいとうあすか	2026-11-10 15:04:47 UTC · (3 days ago)	Nov 10 23:04:45 pbs sshd[3466168]: Connection closed by 109.125.148.238 port 50546 [preauth] ...	Brute-Force SSH
🇺🇸 Bro Charlie	2026-11-10 14:56:25 UTC · (3 days ago)	2026-11-10T22:56:21.003781+08:00 localhost sshd[1469015]: Invalid user xuyikai from 109.125.148.238 port 32896 ...	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 08:42:12 UTC · (3 days ago)	Cowrie SSH honeypot: session c1d84da6f491	SSH
🇺🇸 johuang92	2026-11-10 08:12:46 UTC · (3 days ago)	Cowrie SSH honeypot: session accaef5e374c \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 07:43:28 UTC · (3 days ago)	Cowrie SSH honeypot: session decc2ba689a9 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 07:14:13 UTC · (3 days ago)	Cowrie SSH honeypot: session f7d5a26b81b6 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^proces ... show more Cowrie SSH honeypot: session f7d5a26b81b6 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^processor /proc/cpuinfo 2>/dev/null ); printf "%s CPU:%s" "$U" "$N"' ; true; (command -v uname > /dev/null 2 >& 1; uname -a; (command -v nproc > /dev/null 2 >& 1; nproc \| classified as: brute_force, reconnaissance show less	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 04:49:29 UTC · (3 days ago)	Cowrie SSH honeypot: session 606fdeea660c \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 04:20:11 UTC · (3 days ago)	Cowrie SSH honeypot: session 45f6afe441ab \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 03:50:50 UTC · (3 days ago)	Cowrie SSH honeypot: session 60025b946bac \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 03:21:22 UTC · (3 days ago)	Cowrie SSH honeypot: session 60f43a52db96 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 02:24:21 UTC · (3 days ago)	Cowrie SSH honeypot: session 4b297942ab31 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^proces ... show more Cowrie SSH honeypot: session 4b297942ab31 \| 1 login attempt(s) \| 6 command(s): /bin/sh -c 'U=$( (command -v uname >/dev/null 2>&1 && uname -a) \|\| head -1 /proc/version 2>/dev/null ); N=$( (command -v nproc >/dev/null 2>&1 && nproc) \|\| grep -c ^processor /proc/cpuinfo 2>/dev/null ); printf "%s CPU:%s" "$U" "$N"' ; true; (command -v uname > /dev/null 2 >& 1; uname -a; (command -v nproc > /dev/null 2 >& 1; nproc \| classified as: brute_force, reconnaissance show less	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 00:57:53 UTC · (3 days ago)	Cowrie SSH honeypot: session f18cf3d764c8 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH
🇺🇸 johuang92	2026-11-10 00:28:36 UTC · (3 days ago)	Cowrie SSH honeypot: session 01e7c0642f4a	SSH
🇺🇸 johuang92	2026-11-09 23:31:54 UTC · (3 days ago)	Cowrie SSH honeypot: session 6be69132bb11 \| 1 login attempt(s) \| classified as: brute_force	Brute-Force SSH

Showing 1 to 15 of 146 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 218.234.186.2

🇸🇪 2a05:d016:268:8b00:b82b:fcf2:9f36:f867

🇺🇸 87.56.23.200

🇳🇱 64.205.72.122

🇸🇪 46.59.109.240

🇳🇱 45.148.10.188

🇺🇸 34.82.28.123

🇺🇸 174.52.131.91

🇸🇪 135.225.129.103

🇰🇷 121.157.181.162

🇺🇸 98.174.59.179

🇺🇿 84.54.70.224

🇺🇸 8.236.213.98

🇺🇸 172.70.115.151

🇫🇮 147.185.133.4

🇩🇪 104.23.219.36

🇷🇺 95.165.182.238

🇮🇷 69.194.100.169

🇸🇳 41.208.171.209

🇧🇪 34.62.31.226