JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

123.113.6.125

Recent Activity

Abuse Confidence Score

44% Elevated

22 reports

12 reporters · latest 19 hours ago

ISP: China Unicom Beijing province network
Usage Type: Fixed Line ISP
ASN: AS4808
Domain Name: chinaunicom.cn
Country: 🇨🇳 China
City: Beijing, Beijing

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 12 distinct reporters

First reported

August 20th 2026

Most recent report

19 hours ago

Last 60 days

Top reporter locations 🇮🇹 Italy 2 🇨🇴 Colombia 1 🇨🇿 Czechia 1

Most common categories Brute-Force 7 Email Spam 1 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-10 01:37:08 UTC · (19 hours ago)	Postfix SASL auth attack	Brute-Force Email Spam
🇿🇦 maximonline.co.za	2026-11-09 20:43:20 UTC · (1 day ago)	Brute Force SMTP AUTH Attack	Brute-Force
🇮🇹 CoreTech srl	2026-11-08 18:42:33 UTC · (2 days ago)	"SMTP Login failed": count(IP)=54.0is-6411d9d7 19:37:25.554 [110.81.23.209] SMTP Login failed: Domain [coretech.it] not foundis-6411d9d7 19:37:25.554 [110.81.23.209] SMTP Login failed: Username or password is incorrect.Smartermail 19:38:10.377 [123.1 ... show more "SMTP Login failed": count(IP)=54.0is-6411d9d7 19:37:25.554 [110.81.23.209] SMTP Login failed: Domain [coretech.it] not foundis-6411d9d7 19:37:25.554 [110.81.23.209] SMTP Login failed: Username or password is incorrect.Smartermail 19:38:10.377 [123.113.6.125] SMTP Login failed: Domain [olimaint.it] not foundSmartermail 19:38:10.377 [123.113.6.125] SMTP Login failed: Username or password is incorrect.MAIL4-new 19:38:17.241 [41.249.162.64] SMTP Login failed: Username or password is incorrect.MAIL4-new 19:38:17.241 [41.249.162.64] SMTP Login failed: Incorrect password for user [[email protected]]is-6411d9d7 19:38:42.923 [104.28.215.69] SMTP Login failed: Domain [olimaint.it] not foundis-6411d9d7 19:38:42.923 [104.28.215.69] SMTP Login failed: Username or password is incorrect.is-65b7aeb8 19:39:09.805 [5.89.229.42] SMTP Login failed: Incorrect password for user [[email protected]] show less	Brute-Force
Anonymous	2026-11-08 05:40:04 UTC · (2 days ago)	Brute Force User Attack SMTP	Brute-Force
🇨🇿 unhfree.net	2026-11-07 16:07:56 UTC · (3 days ago)	Nov 7 08:38:43 canopus postfix/smtpd[3541937]: NOQUEUE: reject: RCPT from unknown[123.113.6.125]: 554 5.7.1 Service unavailable; Client host [123.113.6.125] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/123.1 ... show more Nov 7 08:38:43 canopus postfix/smtpd[3541937]: NOQUEUE: reject: RCPT from unknown[123.113.6.125]: 554 5.7.1 Service unavailable; Client host [123.113.6.125] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/123.113.6.125 / Listed by XBL, see https://check.spamhaus.org/query/ip/123.113.6.125; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<UTHPX0C3PXJDJY7P8W4ODTMWTF2> Nov 7 12:19:49 canopus postfix/smtpd[3554085]: NOQUEUE: reject: RCPT from unknown[123.113.6.125]: 554 5.7.1 Service unavailable; Client host [123.113.6.125] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/123.113.6.125 / Listed by XBL, see https://check.spamhaus.org/query/ip/123.113.6.125; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<86G00T4JT4NWX0IYO8Z1UMJSE2QEJ9S> Nov 7 13:00:00 canopus postfix/smtpd[3558326]: NOQUEUE: reject: RCPT from unknown[123.113.6.125]: 554 5.7.1 Service unavai ... show less	Brute-Force Exploited Host
🇮🇹 VHosting	2026-11-06 11:25:04 UTC · (4 days ago)	Detected mail brute force attack from different servers	Brute-Force
Anonymous	2026-10-13 16:34:37 UTC · (4 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇳🇱 EGP Abuse Dept	2026-08-29 04:03:31 UTC · (2 months ago)	Unsolicited connection to port 465	Port Scan Hacking
🇵🇾 SecOpsSL	2026-08-28 23:58:55 UTC · (2 months ago)	123.113.6.125 - - \[24/Aug/2026:07:27:55 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 0 123.113.6.125 - - \[24/Aug/2026:11:40:41 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 1 123.113.6.125 - - \[24/Aug/2026:21:30:33 + ... show more 123.113.6.125 - - \[24/Aug/2026:07:27:55 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 0 123.113.6.125 - - \[24/Aug/2026:11:40:41 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 1 123.113.6.125 - - \[24/Aug/2026:21:30:33 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 506 "-" "-" 1 show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 10:01:08 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 123.113.6.125. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing ... show more Email: Login failures from Bad Reputation IP: 123.113.6.125. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 09:00:53 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 123.113.6.125. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishi ... show more Email: Login failures from Bad Reputation IP: 123.113.6.125. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-28 07:00:11 UTC · (2 months ago)	Email: Login failures from Bad Reputation IP: 123.113.6.125. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
Anonymous	2026-08-28 04:31:18 UTC · (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇵🇾 SecOpsSL	2026-08-26 07:21:05 UTC · (2 months ago)	Aug 26 04:21:04 mail postfix/submission/smtpd[15588]: warning: unknown[123.113.6.125]: SASL PLAIN authentication failed: authentication failure	Email Spam Brute-Force
🇵🇾 SecOpsSL	2026-08-24 20:12:10 UTC · (2 months ago)	123.113.6.125 - - \[24/Aug/2026:07:27:55 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 0 123.113.6.125 - - \[24/Aug/2026:11:40:41 +0000\] "POST /service/admin/soap/ HTTP/1.1" 500 509 "-" "-" 1	Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 162.158.111.150

🇹🇼 198.235.24.26

🇵🇱 195.3.220.7

🇸🇬 188.166.210.181

🇻🇳 180.93.227.34

🇩🇪 116.202.9.136

🇮🇳 103.248.120.6

🇫🇷 89.93.129.146

🇺🇸 66.132.195.22

🇫🇮 147.185.133.15

🇭🇰 119.246.15.94

🇨🇳 36.154.134.146

🇺🇸 20.221.75.11

🇻🇪 200.8.77.36

🇺🇸 198.74.59.59

🇳🇱 193.176.31.196

🇨🇳 123.207.0.73

🇫🇷 91.231.89.172

🇺🇸 24.15.69.205

🇩🇪 2a02:c202:2360:624::1