AbuseIPDB » 125.124.138.208

125.124.138.208 was found in our database!

This IP was reported 451 times. Confidence of Abuse is 52%: ?

52%

ISP	CHINANET-ZJ Shaoxing node network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58461
Domain Name	hz.zj.cn
Country	China
City	Ningbo, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 125.124.138.208

Whois 125.124.138.208

IP Abuse Reports for 125.124.138.208:

This IP address has been reported a total of 451 times from 280 distinct sources. 125.124.138.208 was first reported on November 9th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Jon Rhine	2024-11-21 08:26:10 (1 month ago)	2024-11-21T02:15:30.989567-06:00 instance-20240522-152753 sshd[52225]: Invalid user ftpuser from 125 ... show more2024-11-21T02:15:30.989567-06:00 instance-20240522-152753 sshd[52225]: Invalid user ftpuser from 125.124.138.208 port 50472 2024-11-21T02:18:16.686805-06:00 instance-20240522-152753 sshd[52317]: Invalid user debian from 125.124.138.208 port 56164 2024-11-21T02:22:14.385478-06:00 instance-20240522-152753 sshd[52469]: Invalid user debian from 125.124.138.208 port 53960 2024-11-21T02:26:09.753512-06:00 instance-20240522-152753 sshd[53047]: Invalid user debian from 125.124.138.208 port 51756 ... show less	Brute-Force SSH
thetomtaylor.co.uk	2024-11-21 08:18:53 (1 month ago)	Fail2Ban - [SSHD]Brute-force SSH server on sshd ... [wa02]	Brute-Force SSH
mahdielector	2024-11-21 07:44:55 (1 month ago)	Nov 21 11:09:27 Digitalogic sshd[3776456]: Disconnected from authenticating user root 125.124.138.20 ... show moreNov 21 11:09:27 Digitalogic sshd[3776456]: Disconnected from authenticating user root 125.124.138.208 port 50276 [preauth] Nov 21 11:14:53 Digitalogic sshd[3777951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.138.208 user=postgres Nov 21 11:14:54 Digitalogic sshd[3777951]: Failed password for postgres from 125.124.138.208 port 58476 ssh2 ... show less	Brute-Force SSH
LTM	2024-11-21 07:20:02 (1 month ago)	SSH - Attempt to login using invalid or illegal credential	Port Scan Brute-Force SSH
tmiland	2024-11-21 06:28:12 (1 month ago)	125.124.138.208 (CN/China/-), 6 distributed sshd attacks on account [test] in the last 3600 secs	Brute-Force SSH
geoffray-levasseur.org	2024-11-21 04:26:58 (1 month ago)	Nov 21 05:19:02 arayat sshd[29295]: Invalid user deploy from 125.124.138.208 port 51254 Nov 21 ... show moreNov 21 05:19:02 arayat sshd[29295]: Invalid user deploy from 125.124.138.208 port 51254 Nov 21 05:19:02 arayat sshd[29295]: Failed password for invalid user deploy from 125.124.138.208 port 51254 ssh2 Nov 21 05:26:58 arayat sshd[30632]: Invalid user steam from 125.124.138.208 port 39866 Nov 21 05:26:58 arayat sshd[30632]: Failed password for invalid user steam from 125.124.138.208 port 39866 ssh2 ... show less	Brute-Force SSH
Marius	2024-11-21 04:16:57 (1 month ago)	Detected by Fail2Ban	Brute-Force SSH
NussLi	2024-11-21 03:24:33 (1 month ago)	2024-11-21T03:22:43.000820nextcloud sshd[149995]: pam_unix(sshd:auth): authentication failure; logna ... show more2024-11-21T03:22:43.000820nextcloud sshd[149995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.138.208 2024-11-21T03:22:45.285191nextcloud sshd[149995]: Failed password for invalid user user1 from 125.124.138.208 port 57922 ssh2 2024-11-21T03:24:31.668261nextcloud sshd[150182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.138.208 user=root 2024-11-21T03:24:33.250190nextcloud sshd[150182]: Failed password for root from 125.124.138.208 port 55790 ssh2 ... show less	Brute-Force SSH
danirod	2024-11-21 03:23:00 (1 month ago)	Nov 21 03:23:00 vps324820 sshd[617805]: Invalid user user1 from 125.124.138.208 port 53852 ...	Brute-Force SSH
WebTejo	2024-11-21 03:22:25 (1 month ago)	Detected multiple authentication failures and invalid user attempts from IP address 125.124.138.208 ... show moreDetected multiple authentication failures and invalid user attempts from IP address 125.124.138.208 on [PT] Lis-29 Node. show less	Brute-Force
marshy.com.au	2024-11-21 03:09:12 (1 month ago)	(sshd) Failed SSH login from 125.124.138.208 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direct ... show more(sshd) Failed SSH login from 125.124.138.208 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Nov 21 13:57:46 ded01 sshd[8870]: Invalid user server from 125.124.138.208 port 50116 Nov 21 13:57:48 ded01 sshd[8870]: Failed password for invalid user server from 125.124.138.208 port 50116 ssh2 Nov 21 14:06:52 ded01 sshd[14553]: Did not receive identification string from 125.124.138.208 port 49482 Nov 21 14:09:07 ded01 sshd[15825]: Invalid user admin from 125.124.138.208 port 47672 Nov 21 14:09:09 ded01 sshd[15825]: Failed password for invalid user admin from 125.124.138.208 port 47672 ssh2 show less	Port Scan
Filli Group	2024-11-21 03:05:37 (1 month ago)	2024-11-21T04:01:11.662991+01:00 monitoring.crazycraftland.net sshd[298738]: Invalid user server fro ... show more2024-11-21T04:01:11.662991+01:00 monitoring.crazycraftland.net sshd[298738]: Invalid user server from 125.124.138.208 port 51790 2024-11-21T04:05:37.461772+01:00 monitoring.crazycraftland.net sshd[299330]: Invalid user oracle from 125.124.138.208 port 36544 ... show less	Brute-Force SSH
Jérôme Delacotte	2024-11-21 03:00:25 (1 month ago)	Nov 21 04:00:22 Akhenaton sshd[425860]: Invalid user server from 125.124.138.208 port 46314 No ... show moreNov 21 04:00:22 Akhenaton sshd[425860]: Invalid user server from 125.124.138.208 port 46314 Nov 21 04:00:24 Akhenaton sshd[425860]: Failed password for invalid user server from 125.124.138.208 port 46314 ssh2 ... show less	Brute-Force SSH
diego	2024-11-21 01:56:41 (1 month ago)	[rede-44-49] (sshd) Failed SSH login from 125.124.138.208 (CN/China/-): 5 in the last 3600 secs; Por ... show more[rede-44-49] (sshd) Failed SSH login from 125.124.138.208 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Nov 20 22:53:42 sshd[12601]: Invalid user [USERNAME] from 125.124.138.208 port 39888 Nov 20 22:53:44 sshd[12601]: Failed password for invalid user [USERNAME] from 125.124.138.208 port 39888 ssh2 Nov 20 22:56:03 sshd[12806]: Invalid user [USERNAME] from 125.124.138.208 port 35320 Nov 20 22:56:04 sshd[12806]: Failed password for invalid user [USERNAME] from 125.124.138.208 port 35320 ssh2 Nov 20 22:56:39 sshd[12864]: Invalid user [USERNAME] from 125.124.138.208 port 43242 show less	Port Scan
amit177	2024-11-21 01:11:20 (1 month ago)		Brute-Force SSH