This IP address has been reported a total of
22
times from
21 distinct
sources.
120.25.224.51 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 6379)
Source port: 27379
TTL: 109
Packet length: 40
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 6379)
Source port: 27379
TTL: 109
Packet length: 40
TOS: 0x00
This report (for 120.25.224.51) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Cons ...
show moreSSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot.
show less
2026-08-29T09:17:25.075068funtv73225.serv.host sshd[41360]: Failed password for root from 120.25.224 ...
show more2026-08-29T09:17:25.075068funtv73225.serv.host sshd[41360]: Failed password for root from 120.25.224.51 port 50692 ssh2
2026-08-29T09:17:29.496376funtv73225.serv.host sshd[41360]: Failed password for root from 120.25.224.51 port 50692 ssh2
2026-08-29T09:17:32.729644funtv73225.serv.host sshd[41360]: Failed password for root from 120.25.224.51 port 50692 ssh2
...
show less
2026-08-29T06:12:41.773826+00:00 MailServer-Slave sshd[1137443]: Failed password for root from 120.2 ...
show more2026-08-29T06:12:41.773826+00:00 MailServer-Slave sshd[1137443]: Failed password for root from 120.25.224.51 port 56274 ssh2
2026-08-29T06:12:58.518006+00:00 MailServer-Slave sshd[1137443]: Disconnecting authenticating user root 120.25.224.51 port 56274: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
...
show less
Dropbear: Bad password attempt.
Aug 26 10:31:43 *REDACTED* dropbear[3163]: Bad password attempt for ...
show moreDropbear: Bad password attempt.
Aug 26 10:31:43 *REDACTED* dropbear[3163]: Bad password attempt for 'root' from 120.25.224.51:40768
show less
Repeated failed SSH authentication and source banned by Fail2Ban; attempted usernames: root,test
Brute-Force
SSH
Anonymous
2026-08-24T09:19:18.789993+00:00 ubuntu sshd[2161893]: Disconnecting authenticating user root 120.25 ...
show more2026-08-24T09:19:18.789993+00:00 ubuntu sshd[2161893]: Disconnecting authenticating user root 120.25.224.51 port 54972: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-08-24T09:19:21.124061+00:00 ubuntu sshd[2161918]: Invalid user test from 120.25.224.51 port 56286
2026-08-24T09:19:21.126554+00:00 ubuntu sshd[2161918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.25.224.51
2026-08-24T09:19:23.064261+00:00 ubuntu sshd[2161918]: Failed password for invalid user test from 120.25.224.51 port 56286 ssh2
2026-08-24T09:19:25.410276+00:00 ubuntu sshd[2161918]: Failed password for invalid user test from 120.25.224.51 port 56286 ssh2
...
show less
2026-08-23T17:14:32.769049mail.softlan.com.py sshd[24672]: Failed password for root from 120.25.224. ...
show more2026-08-23T17:14:32.769049mail.softlan.com.py sshd[24672]: Failed password for root from 120.25.224.51 port 53872 ssh2
2026-08-23T17:14:35.315781mail.softlan.com.py sshd[24672]: Failed password for root from 120.25.224.51 port 53872 ssh2
2026-08-23T17:14:37.807759mail.softlan.com.py sshd[24672]: Failed password for root from 120.25.224.51 port 53872 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩