This IP address has been reported a total of
26
times from
26 distinct
sources.
120.25.195.152 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Port Scan on Honeypot | Ports: 2222/SSH-alt | Proto: TCP(1) | Flags: all SYN | TTL: 105 | Len: 44B | ...
show morePort Scan on Honeypot | Ports: 2222/SSH-alt | Proto: TCP(1) | Flags: all SYN | TTL: 105 | Len: 44B | Win: 18243(1) | F2B/ufw-honeypot@2026-08-31T05:34:36Z
show less
2026-08-30T08:18:12.110069+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1341334]: Failed password f ...
show more2026-08-30T08:18:12.110069+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1341334]: Failed password for root from 120.25.195.152 port 38014 ssh2
2026-08-30T08:18:14.904428+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1341334]: Failed password for root from 120.25.195.152 port 38014 ssh2
2026-08-30T08:18:19.131893+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1341334]: Failed password for root from 120.25.195.152 port 38014 ssh2
2026-08-30T08:18:22.866165+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1341334]: Failed password for root from 120.25.195.152 port 38014 ssh2
2026-08-30T08:18:25.876487+00:00 ASIA-SGP-1.moevsmachine.tf sshd-session[1341334]: Failed password for root from 120.25.195.152 port 38014 ssh2
...
show less
2026-08-30T09:21:43.927000+02:00 towelie sshd-session[1352406]: Failed password for root from 120.25 ...
show more2026-08-30T09:21:43.927000+02:00 towelie sshd-session[1352406]: Failed password for root from 120.25.195.152 port 53084 ssh2
2026-08-30T09:21:46.645329+02:00 towelie sshd-session[1352406]: Failed password for root from 120.25.195.152 port 53084 ssh2
2026-08-30T09:21:50.160759+02:00 towelie sshd-session[1352406]: Failed password for root from 120.25.195.152 port 53084 ssh2
...
show less
Blocked by UFW (TCP on 2222)
Source port: 3876
TTL: 110
Packet length: 40
TOS: 0x08
This report (fo ...
show moreBlocked by UFW (TCP on 2222)
Source port: 3876
TTL: 110
Packet length: 40
TOS: 0x08
This report (for 120.25.195.152) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-08-29T05:31:39.803728+02:00 Linux14 sshd-session[3428030]: Failed password for root from 120.25 ...
show more2026-08-29T05:31:39.803728+02:00 Linux14 sshd-session[3428030]: Failed password for root from 120.25.195.152 port 55756 ssh2
2026-08-29T05:31:42.657727+02:00 Linux14 sshd-session[3428030]: Failed password for root from 120.25.195.152 port 55756 ssh2
2026-08-29T05:31:46.249065+02:00 Linux14 sshd-session[3428030]: Failed password for root from 120.25.195.152 port 55756 ssh2
2026-08-29T05:31:49.309727+02:00 Linux14 sshd-session[3428030]: Failed password for root from 120.25.195.152 port 55756 ssh2
2026-08-29T05:31:49.603498+02:00 Linux14 sshd-session[3428030]: Disconnecting authenticating user root 120.25.195.152 port 55756: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-08-29T05:31:51.197832+02:00 Linux14 sshd-session[3428995]: Invalid user test from 120.25.195.152 port 57272
2026-08-29T05:31:51.200784+02:00 Linux14 sshd-session[3428995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.2
...
show less
Aug 29 03:31:37 obsidian sshd[588188]: Failed password for root from 120.25.195.152 port 55120 ssh2
...
show moreAug 29 03:31:37 obsidian sshd[588188]: Failed password for root from 120.25.195.152 port 55120 ssh2
Aug 29 03:31:43 obsidian sshd[588464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.25.195.152 user=root
Aug 29 03:31:45 obsidian sshd[588464]: Failed password for root from 120.25.195.152 port 60862 ssh2
...
show less
SSH brute-force / credential-stuffing against port 22. 13 failed login attempts from this IP in the ...
show moreSSH brute-force / credential-stuffing against port 22. 13 failed login attempts from this IP in the last 24h (rule 'perma': >=12 within 1d).
show less
Brute-Force
SSH
Anonymous
2026-08-27T07:29:32.464807+02:00 outpost sshd[2054359]: Failed password for root from 120.25.195.152 ...
show more2026-08-27T07:29:32.464807+02:00 outpost sshd[2054359]: Failed password for root from 120.25.195.152 port 47232 ssh2
2026-08-27T07:29:46.426434+02:00 outpost sshd[2054359]: Failed password for root from 120.25.195.152 port 47232 ssh2
2026-08-27T07:29:48.399129+02:00 outpost sshd[2054359]: Disconnecting authenticating user root 120.25.195.152 port 47232: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-08-27T07:29:50.048743+02:00 outpost sshd[2054571]: Invalid user test from 120.25.195.152 port 49012
...
show less