JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.125.217.227

125.125.217.227 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 61%: ?

61%

ISP	CHINANET-ZJ Huzhou node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Huzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.125.217.227

Whois 125.125.217.227

IP Abuse Reports for 125.125.217.227:

This IP address has been reported a total of 10 times from 9 distinct sources. 125.125.217.227 was first reported on September 17th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 electronico	2026-09-18 01:05:58 (7 hours ago)	2026-09-18T11:17:13.131980+11:00 mail1 postfix/submissions/smtpd[894835]: lost connection after AUTH ... show more 2026-09-18T11:17:13.131980+11:00 mail1 postfix/submissions/smtpd[894835]: lost connection after AUTH from unknown[125.125.217.227] 2026-09-18T11:52:59.892282+11:00 mail1 postfix/submissions/smtpd[903122]: lost connection after AUTH from unknown[125.125.217.227] 2026-09-18T12:05:58.141050+11:00 mail1 postfix/submissions/smtpd[905620]: lost connection after AUTH from unknown[125.125.217.227] ... show less	Brute-Force Email Spam
Anonymous	2026-09-18 00:44:15 (7 hours ago)	Authentication failure	Brute-Force
🇿🇦 hostsec_za	2026-09-17 23:29:01 (8 hours ago)	SMTP/IMAP Auth Attack. 17 failed logins in 1 hour.	Brute-Force
🇮🇹 VHosting	2026-09-17 22:00:06 (10 hours ago)	Detected mail brute force attack from different servers	Brute-Force
🇮🇹 CoreTech srl	2026-09-17 21:52:35 (10 hours ago)	"SMTP Login failed": count(IP)=10.0Smartermail 23:48:05.613 [70.183.226.52] SMTP Login failed: Domai ... show more "SMTP Login failed": count(IP)=10.0Smartermail 23:48:05.613 [70.183.226.52] SMTP Login failed: Domain [crastaspedizioni.it] not foundSmartermail 23:48:05.613 [70.183.226.52] SMTP Login failed: Username or password is incorrect.MX1-DC2 23:48:47.519 [125.125.217.227] SMTP Login failed: Domain [manzottiautomobili.it] not foundMX1-DC2 23:48:47.519 [125.125.217.227] SMTP Login failed: Username or password is incorrect.Smartermail 23:50:03.747 [93.67.232.205] SMTP Login failed: Domain [erongest.it] not foundSmartermail 23:50:03.747 [93.67.232.205] SMTP Login failed: Username or password is incorrect.Smartermail 23:50:09.429 [24.234.102.251] SMTP Login failed: Username or password is incorrect.Smartermail 23:50:09.429 [24.234.102.251] SMTP Login failed: Domain [erongest.it] not foundmail3-dc1 23:50:29.557 [98.98.171.36] SMTP Login failed: Incorrect email address [admin] show less	Brute-Force
🇫🇷 basing	2026-09-17 21:45:36 (10 hours ago)	2026-09-17 22:45:36 idz SASL PLAIN auth failed: rhost=125.125.217.227...	Brute-Force
🇨🇿 lp	2026-09-17 21:20:14 (10 hours ago)	Email account brute force: 5 attempts were recorded from 125.125.217.227 2026-09-17T21:51:49+02:00 w ... show more Email account brute force: 5 attempts were recorded from 125.125.217.227 2026-09-17T21:51:49+02:00 warning: unknown[125.125.217.227]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-09-17T22:02:31+02:00 warning: unknown[125.125.217.227]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-09-17T22:02:46+02:00 warning: unknown[125.125.217.227]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-09-17T22:03:22+02:00 warning: unknown[125.125.217.227]: SASL LOGIN authentication failed: authentication failure, [email protected] 2026-09-17T22:03:30+02:00 warning: unknown[125.125.217.227]: SASL LOGIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2026-09-17 21:20:11 (10 hours ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇮🇹 CoreTech srl	2026-09-17 20:22:32 (11 hours ago)	MX1-DC2 22:18:20.909 [125.125.217.227] SMTP Login failed: Username or password is incorrect.MX1-DC2 ... show more MX1-DC2 22:18:20.909 [125.125.217.227] SMTP Login failed: Username or password is incorrect.MX1-DC2 22:18:20.909 [125.125.217.227] SMTP Login failed: Domain [mmicromed.it] not foundSmartermail 22:18:40.833 [158.173.240.236] SMTP Login failed: Incorrect password for user [[email protected]]Smartermail 22:18:40.833 [158.173.240.236] SMTP Login failed: Username or password is incorrect.MAIL4-new 22:21:56.938 [185.247.21.86] SMTP Login failed: Incorrect password for user [[email protected]]MAIL4-new 22:21:56.938 [185.247.21.86] SMTP Login failed: Username or password is incorrect.is-65b7aeb8 22:22:00.707 [195.182.211.98] SMTP Login failed: User [jsystem.gaitrasporti] not foundis-65b7aeb8 22:22:00.707 [195.182.211.98] SMTP Login failed: Username or password is incorrect.is-6411d9d7 22:22:06.290 [174.68.44.232] SMTP Login failed: Username or password is incorrect.is-6411d9d7 22:22:06.290 [174.68.44.232] SMTP Login failed: Domain [studiodelgaizopicchioni.it] not found show less	Brute-Force Open Proxy
🇮🇩 aaKenshin	2026-09-17 20:08:48 (12 hours ago)	Suspicious activity detected from IP 125.125.217.227 based on mailserver logs. Sample logs: 2026-09- ... show more Suspicious activity detected from IP 125.125.217.227 based on mailserver logs. Sample logs: 2026-09-18 04:00:42,964 INFO [qtp2102534528-453176] [ip=172.16.0.182;oip=125.125.217.227;oport=44540;oproto=smtp;port=59602;soapId=3665e612;] SoapEngine - handler exception: authentication failed for [], account not found 2026-09-18 04:00:42,964 INFO [qtp2102534528-453176] [ip=172.16.0.182;oip=125.125.217.227;oport=44540;oproto=smtp;port=59602;soapId=3665e612;] soap - AuthRequest elapsed=1 2026-09-18 04:08:46,417 INFO [qtp2102534528-453205] [ip=172.16.0.182;oip=125.125.217.227;oport=58762;oproto=smtp;port=37620;soapId=3665e619;] account - Error occurred during authentication: authentication failed for []. Reason: account not found. 2026-09-18 04:08:46,433 INFO [qtp2102534528-453205] [ip=172.16.0.182;oip=125.125.217.227;oport=58762;oproto=smtp;port=37620;soapId=3665e619;] SoapEngine - handler exception: authentication failed for [**], account not found 2026-09-18 04:08:46,438 INFO [qtp21 show less	Brute-Force

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.200

🇺🇸 195.184.76.96

🇫🇷 194.163.134.47

🇧🇷 186.238.178.6

🇬🇧 146.70.133.135

🇸🇬 124.243.172.142

🇻🇳 103.241.43.193

🇺🇸 91.230.168.36

🇺🇸 66.132.172.118

🇰🇷 34.50.55.110

🇨🇳 27.203.230.103

🇮🇶 185.158.22.150

🇺🇸 174.59.79.39

🇧🇼 168.167.248.70

🇭🇰 45.138.12.16

🇬🇧 35.203.211.56

🇰🇷 14.63.221.120

🇺🇸 4.148.240.228

🇫🇷 209.242.192.173

🇺🇸 206.189.229.219