JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 116.25.92.60

116.25.92.60 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 116.25.92.60

Whois 116.25.92.60

IP Abuse Reports for 116.25.92.60:

This IP address has been reported a total of 27 times from 19 distinct sources. 116.25.92.60 was first reported on June 12th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-15 03:30:20 (17 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 nohacefaltapapel-et.net	2026-06-15 02:30:57 (18 hours ago)	2026-06-15T01:25:13.158407ee-nginx-elbernabeu sshd[17164]: Invalid user wakeupspain from 116.25.92.6 ... show more 2026-06-15T01:25:13.158407ee-nginx-elbernabeu sshd[17164]: Invalid user wakeupspain from 116.25.92.60 port 43426 2026-06-15T03:44:35.844917ee-nginx-elbernabeu sshd[27407]: Invalid user wakeupspain from 116.25.92.60 port 46784 2026-06-15T04:30:56.797888ee-nginx-elbernabeu sshd[30840]: Invalid user wakeupspain from 116.25.92.60 port 43752 ... show less	Brute-Force SSH
🇫🇷 Lunix	2026-06-15 02:23:56 (19 hours ago)		FTP Brute-Force Brute-Force
🇩🇪 ghostwarriors	2026-06-15 02:20:35 (19 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇮 MindSolve	2026-06-15 02:07:12 (19 hours ago)	2026-06-15T03:04:52.580073+02:00 admin sshd[1382671]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-06-15T03:04:52.580073+02:00 admin sshd[1382671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.25.92.60 user=root 2026-06-15T03:04:54.749723+02:00 admin sshd[1382671]: Failed password for root from 116.25.92.60 port 59716 ssh2 2026-06-15T04:07:10.454038+02:00 admin sshd[1404943]: Invalid user dasnetz from 116.25.92.60 port 45606 2026-06-15T04:07:10.693863+02:00 admin sshd[1404943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.25.92.60 2026-06-15T04:07:12.025562+02:00 admin sshd[1404943]: Failed password for invalid user dasnetz from 116.25.92.60 port 45606 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigwavedave	2026-06-15 01:45:29 (19 hours ago)	ssh	Brute-Force SSH
🇩🇪 RobertR11	2026-06-15 00:17:53 (21 hours ago)	2026-06-15T02:17:50.659303+02:00 HAMA sshd-session[398428]: pam_unix(sshd:auth): authentication fail ... show more 2026-06-15T02:17:50.659303+02:00 HAMA sshd-session[398428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.25.92.60 2026-06-15T02:17:52.775260+02:00 HAMA sshd-session[398428]: Failed password for invalid user kabiiii from 116.25.92.60 port 47588 ssh2 ... show less	Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-06-15 00:11:08 (21 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
Anonymous	2026-06-14 23:59:39 (21 hours ago)	116.25.92.60 (CN/China/-), 5 distributed sshd attacks on account [redacted]	Brute-Force SSH
🇫🇷 dwmp	2026-06-14 11:57:20 (1 day ago)	Jun 14 13:07:15 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 14 13:07:15 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=116.25.92.60, lip=75.119.153.41, TLS, session=<HZoCtjRU+Jt0GVw8> Jun 14 13:32:34 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=116.25.92.60, lip=75.119.153.41, TLS, session=<bxKlEDVUvrp0GVw8> Jun 14 13:57:19 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=116.25.92.60, lip=75.119.153.41, TLS, session=<+7k2aTVUguR0GVw8> ... show less	Brute-Force
Anonymous	2026-06-14 08:35:10 (1 day ago)	Jun 14 06:39:28 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<ylKWSy9U4J90GVw8>): u ... show more Jun 14 06:39:28 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<ylKWSy9U4J90GVw8>): unknown user Jun 14 07:04:49 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<GVRCpi9UsLd0GVw8>): unknown user Jun 14 07:04:49 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<GVRCpi9UsLd0GVw8>): unknown user Jun 14 07:31:07 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<LGBFBDBUGu50GVw8>): unknown user Jun 14 07:31:07 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<LGBFBDBUGu50GVw8>): unknown user Jun 14 07:57:41 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<VCBUYzBUlo90GVw8>): unknown user Jun 14 07:57:41 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<VCBUYzBUlo90GVw8>): unknown user Jun 14 08:24:08 sonne dovecot: auth: passwd-file([email protected],116.25.92.60,<47bewTBU/IV0GVw8>): unknown user Jun 14 08:24:08 sonne dovecot: auth: passwd-file([email protected],116.25. ... show less	Hacking Brute-Force Exploited Host
🇩🇪 eebh.hu	2026-06-14 05:04:50 (1 day ago)	Jun 14 07:04:48 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=<su ... show more Jun 14 07:04:48 mail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 3 secs): user=<[email protected]>, method=PLAIN, rip=116.25.92.60, lip=194.36.88.23, TLS, session=<LhL8pS9UmrF0GVw8> ... show less	Brute-Force
🇫🇷 dwmp	2026-06-13 23:06:36 (1 day ago)	Jun 14 00:15:31 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attemp ... show more Jun 14 00:15:31 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=116.25.92.60, lip=75.119.153.41, TLS, session=<2I9F7ilUVMF0GVw8> Jun 14 00:40:58 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=116.25.92.60, lip=75.119.153.41, TLS, session=<OX02SSpU9Jl0GVw8> Jun 14 01:06:35 webcore dovecot: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 2 secs) (auth_failed): user=<[email protected]>, method=PLAIN, rip=116.25.92.60, lip=75.119.153.41, TLS, session=<qTzRpCpUgqp0GVw8> ... show less	Brute-Force
Anonymous	2026-06-13 20:44:17 (2 days ago)	6x Dovecot auth failed (on 5 different adresses)	Brute-Force
🇩🇪 outputblog.de	2026-06-13 17:29:55 (2 days ago)	dovecot	Brute-Force

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:150:13a5::100:38

🇬🇧 193.163.125.239

🇮🇷 185.83.182.180

🇫🇷 85.217.140.43

🇨🇳 60.16.207.48

🇮🇳 49.206.201.253

🇺🇸 35.233.128.26

🇮🇳 35.200.159.63

🇨🇳 218.92.236.102

🇺🇸 205.210.31.75

🇸🇬 167.172.89.248

🇺🇸 147.185.132.225

🇩🇪 130.12.180.65

🇬🇧 16.61.148.115

🇺🇸 216.25.89.101

🇸🇬 185.111.159.216

🇨🇳 182.91.210.212

🇩🇪 178.16.52.44

🇯🇵 118.194.229.94

🇺🇸 34.82.222.10