AbuseIPDB » 125.124.53.68

125.124.53.68 was found in our database!

This IP was reported 160 times. Confidence of Abuse is 46%: ?

46%

ISP	CHINANET-ZJ Shaoxing node network
Usage Type	Data Center/Web Hosting/Transit
Domain Name	hz.zj.cn
Country	China
City	Ningbo, Zhejiang

Report 125.124.53.68

Whois 125.124.53.68

IP Abuse Reports for 125.124.53.68:

This IP address has been reported a total of 160 times from 108 distinct sources. 125.124.53.68 was first reported on September 20th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2024-10-01 22:06:40 (2 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/125.124.53.68	SSH
thunfischbaum	2024-10-01 21:35:25 (2 months ago)	Oct 1 23:33:28 fshubvidspace sshd[2974337]: Failed password for root from 125.124.53.68 port 56572 ... show moreOct 1 23:33:28 fshubvidspace sshd[2974337]: Failed password for root from 125.124.53.68 port 56572 ssh2 Oct 1 23:34:54 fshubvidspace sshd[2974369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=root Oct 1 23:34:56 fshubvidspace sshd[2974369]: Failed password for root from 125.124.53.68 port 44606 ssh2 Oct 1 23:35:23 fshubvidspace sshd[2974386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=root Oct 1 23:35:24 fshubvidspace sshd[2974386]: Failed password for root from 125.124.53.68 port 50040 ssh2 ... show less	Brute-Force SSH
sthoyer.de	2024-10-01 19:38:07 (2 months ago)	2024-10-01T21:38:03.498504 sthoyer.de sshd[1715067]: pam_unix(sshd:auth): authentication failure; lo ... show more2024-10-01T21:38:03.498504 sthoyer.de sshd[1715067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=root 2024-10-01T21:38:05.723971 sthoyer.de sshd[1715067]: Failed password for root from 125.124.53.68 port 53356 ssh2 ... show less	SSH
diego021	2024-10-01 17:00:36 (2 months ago)	2024-10-01T12:00:14.846507-05:00 debian-hel1 sshd[175170]: Failed password for root from 125.124.53. ... show more2024-10-01T12:00:14.846507-05:00 debian-hel1 sshd[175170]: Failed password for root from 125.124.53.68 port 34658 ssh2 2024-10-01T12:00:33.659675-05:00 debian-hel1 sshd[175172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=root 2024-10-01T12:00:34.902931-05:00 debian-hel1 sshd[175172]: Failed password for root from 125.124.53.68 port 37890 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-10-01 16:41:44 (2 months ago)	125.124.53.68 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more125.124.53.68 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 1 12:41:38 server2 sshd[14551]: Failed password for root from 36.107.224.160 port 44876 ssh2 Oct 1 12:38:56 server2 sshd[13817]: Failed password for root from 61.240.156.16 port 51932 ssh2 Oct 1 12:39:59 server2 sshd[14116]: Failed password for root from 98.98.57.62 port 60730 ssh2 Oct 1 12:41:09 server2 sshd[14468]: Failed password for root from 47.234.143.55 port 42802 ssh2 Oct 1 12:38:48 server2 sshd[13786]: Failed password for root from 125.124.53.68 port 49982 ssh2 IP Addresses Blocked: 36.107.224.160 (CN/China/-) 61.240.156.16 (CN/China/-) 98.98.57.62 (US/United States/-) 47.234.143.55 (US/United States/-) show less	Brute-Force
alissonlauffer	2024-10-01 16:36:49 (2 months ago)	2024-10-01T16:33:08.270220+00:00 vps-for.amanoteam.com sshd[1760047]: Failed password for root from ... show more2024-10-01T16:33:08.270220+00:00 vps-for.amanoteam.com sshd[1760047]: Failed password for root from 125.124.53.68 port 57574 ssh2 2024-10-01T16:33:27.963957+00:00 vps-for.amanoteam.com sshd[1760052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=root 2024-10-01T16:33:30.041974+00:00 vps-for.amanoteam.com sshd[1760052]: Failed password for root from 125.124.53.68 port 33136 ssh2 2024-10-01T16:33:49.286519+00:00 vps-for.amanoteam.com sshd[1760071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=root 2024-10-01T16:33:51.231464+00:00 vps-for.amanoteam.com sshd[1760071]: Failed password for root from 125.124.53.68 port 36930 ssh2 ... show less	Brute-Force SSH
oh.mg	2024-10-01 13:05:45 (2 months ago)	(sshd) Failed SSH login from 125.124.53.68 (CN/China/-): 1 in the last 3600 secs; Ports: ; Directio ... show more(sshd) Failed SSH login from 125.124.53.68 (CN/China/-): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 1 13:05:41 joshua sshd[1165142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=root show less	Port Scan
plzenskypruvodce.cz	2024-10-01 12:12:24 (2 months ago)	2024-10-01T14:12:22.038585mail sshd[3767000]: Invalid user ec2-user from 125.124.53.68 port 37978<br ... show more2024-10-01T14:12:22.038585mail sshd[3767000]: Invalid user ec2-user from 125.124.53.68 port 37978 2024-10-01T14:12:22.047809mail sshd[3767000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 2024-10-01T14:12:23.864347mail sshd[3767000]: Failed password for invalid user ec2-user from 125.124.53.68 port 37978 ssh2 ... show less	Brute-Force SSH
mailox	2024-10-01 10:56:16 (2 months ago)	SSH Unauthorized connection attempt ...	Brute-Force SSH
lp	2024-10-01 10:51:55 (2 months ago)	SSH Brute force: 23 attempts were recorded from 125.124.53.68 2024-10-01T12:05:16+02:00 Discon ... show moreSSH Brute force: 23 attempts were recorded from 125.124.53.68 2024-10-01T12:05:16+02:00 Disconnected from authenticating user root 125.124.53.68 port 57042 [preauth] 2024-10-01T12:10:49+02:00 Disconnected from authenticating user root 125.124.53.68 port 36568 [preauth] 2024-10-01T12:16:01+02:00 Disconnected from authenticating user root 125.124.53.68 port 41398 [preauth] 2024-10-01T12:16:25+02:00 Invalid user drcomadmin from 125.124.53.68 port 49536 2024-10-01T12:17:09+02:00 Invalid user frappe from 125.124.53.68 port 37588 2024-10-01T12:17:34+02:00 Disconnected from authenticating user root 125.124.53.68 port 45726 [preauth] 2024-10-01T12:17:57+02:00 Invalid user frappe from 125.124.53.68 port 53864 2024-10-01T12:18:19+02:00 Invalid user ubuntu from 125.124.53.68 port 33770 2024-10-01T12:19:11+02:00 Invalid user fleek from 125.124.53.68 port 50050 2024-10-01T12:19:40+02:00 Invalid user show less	Brute-Force SSH
Anonymous	2024-10-01 10:48:31 (2 months ago)	2024-10-01T10:46:57.225644+00:00 deb1 sshd[63327]: Disconnected from authenticating user root 125.12 ... show more2024-10-01T10:46:57.225644+00:00 deb1 sshd[63327]: Disconnected from authenticating user root 125.124.53.68 port 59936 [preauth] 2024-10-01T10:47:58.877339+00:00 deb1 sshd[63348]: Disconnected from authenticating user root 125.124.53.68 port 42828 [preauth] 2024-10-01T10:48:14.102242+00:00 deb1 sshd[63350]: Invalid user daniel from 125.124.53.68 port 46536 2024-10-01T10:48:14.474035+00:00 deb1 sshd[63350]: Disconnected from invalid user daniel 125.124.53.68 port 46536 [preauth] 2024-10-01T10:48:30.691018+00:00 deb1 sshd[63352]: Invalid user nisec from 125.124.53.68 port 50244 2024-10-01T10:48:31.047254+00:00 deb1 sshd[63352]: Disconnected from invalid user nisec 125.124.53.68 port 50244 [preauth] ... show less	Brute-Force SSH
rtbh.com.tr	2024-09-25 20:54:18 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2024-09-24 20:54:20 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-09-24 17:02:50 (2 months ago)	Sep 24 19:02:49 host sshd\[27813\]: Invalid user user from 125.124.53.68 port 55858	Brute-Force SSH
diego	2024-09-24 15:59:07 (2 months ago)	[rede-176-124] (sshd) Failed SSH login from 125.124.53.68 (CN/China/-): 5 in the last 3600 secs; Por ... show more[rede-176-124] (sshd) Failed SSH login from 125.124.53.68 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 24 12:55:11 sshd[32702]: Invalid user [USERNAME] from 125.124.53.68 port 44456 Sep 24 12:55:13 sshd[32702]: Failed password for invalid user [USERNAME] from 125.124.53.68 port 44456 ssh2 Sep 24 12:58:42 sshd[563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.53.68 user=[USERNAME] Sep 24 12:58:44 sshd[563]: Failed password for [USERNAME] from 125.124.53.68 port 49164 ssh2 Sep 24 12:59:04 sshd[571]: Invalid user [USERNAME] from 125.124.53.68 show less	Port Scan