JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.130.139.14

125.130.139.14

Recent Activity

15 reports found in our database

92% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Korea Telecom

Usage Type

Fixed Line ISP

ASN

AS4766

Domain Name

kt.com

Country

🇰🇷 Korea (the Republic of)

City

Suwon, Gyeonggi-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 125.130.139.14:

This IP address has been reported a total of 15 times from 15 distinct sources. 125.130.139.14 was first reported on September 12th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; France with 3 reports; Bulgaria with 1 report. The most common categories in these recent reports were: Brute-Force 10 times; SSH 8 times; Web App Attack 4 times; Port Scan 3 times; Bad Web Bot 2 times; Other 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 OHOST.BG	2026-09-13 01:05:01 (1 hour ago)	Sep 13 01:02:55 shu sshd[15657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 13 01:02:55 shu sshd[15657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.139.14 Sep 13 01:02:58 shu sshd[15657]: Failed password for invalid user admin from 125.130.139.14 port 38896 ssh2 Sep 13 01:05:00 shu sshd[17520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.139.14 ... show less	Brute-Force SSH
🇺🇸 NetVexor	2026-09-13 00:49:54 (1 hour ago)	Attack source identified and submitted via NetVexor BGP Blackhole Network	Port Scan Hacking Brute-Force
🇯🇵 ki3	2026-09-13 00:22:02 (1 hour ago)	Fail2Ban: Web App Attacks and Forum Spam 125.130.139.14 1789258921.0(JST)	Web Spam Bad Web Bot Web App Attack
🇩🇰 swrlly	2026-09-13 00:13:37 (1 hour ago)	1 ssh bruteforce attempt	Brute-Force SSH
Anonymous	2026-09-12 21:21:11 (4 hours ago)	2026-09-12T21:12:26.200207+00:00 nijika sshd-session[3742062]: Invalid user admin from 125.130.139.1 ... show more 2026-09-12T21:12:26.200207+00:00 nijika sshd-session[3742062]: Invalid user admin from 125.130.139.14 port 43778 2026-09-12T21:13:43.231659+00:00 nijika sshd-session[3742096]: Invalid user user from 125.130.139.14 port 44528 2026-09-12T21:16:07.114340+00:00 nijika sshd-session[3742159]: Invalid user user from 125.130.139.14 port 44606 2026-09-12T21:19:51.552835+00:00 nijika sshd-session[3742257]: Invalid user orangepi from 125.130.139.14 port 46402 2026-09-12T21:21:10.683294+00:00 nijika sshd-session[3742289]: Invalid user support from 125.130.139.14 port 46770 ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-12 19:38:37 (6 hours ago)	(mod_security) mod_security (id:218420) triggered by 125.130.139.14 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:218420) triggered by 125.130.139.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 15:38:31.073141 2026] [security2:error] [pid 28751:tid 28751] [client 125.130.139.14:40938] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "38"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.162:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.162"] [uri "/hello.world"] [unique_id "aqWqN4ogOmuDFq4Q-oYZogAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MPL	2026-09-12 17:52:22 (8 hours ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 yzfdude1	2026-09-12 15:49:06 (10 hours ago)	Sep 12 15:49:04 postgres sshd[1323602]: Invalid user user from 125.130.139.14 port 59716 Sep 12 15:4 ... show more Sep 12 15:49:04 postgres sshd[1323602]: Invalid user user from 125.130.139.14 port 59716 Sep 12 15:49:04 postgres sshd[1323602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.139.14 Sep 12 15:49:05 postgres sshd[1323602]: Failed password for invalid user user from 125.130.139.14 port 59716 ssh2 ... show less	Brute-Force SSH
🇫🇷 antivirus_5846	2026-09-12 15:48:21 (10 hours ago)	2026-09-12T15:47:35.084003+00:00 pterodactyl-tunnel-ip sshd-session[2892282]: pam_unix(sshd:auth): a ... show more 2026-09-12T15:47:35.084003+00:00 pterodactyl-tunnel-ip sshd-session[2892282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.139.14 2026-09-12T15:47:37.219484+00:00 pterodactyl-tunnel-ip sshd-session[2892282]: Failed password for invalid user admin from 125.130.139.14 port 44612 ssh2 2026-09-12T15:48:20.790973+00:00 pterodactyl-tunnel-ip sshd-session[2892307]: Invalid user user from 125.130.139.14 port 36264 ... show less	Brute-Force SSH
Anonymous	2026-09-12 15:43:43 (10 hours ago)	Sep 12 17:43:38 sd-55437 sshd[869290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Sep 12 17:43:38 sd-55437 sshd[869290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.139.14 Sep 12 17:43:40 sd-55437 sshd[869290]: Failed password for invalid user admin from 125.130.139.14 port 41972 ssh2 Sep 12 17:43:42 sd-55437 sshd[869290]: Connection closed by invalid user admin 125.130.139.14 port 41972 [preauth] ... show less	Brute-Force SSH
🇰🇷 enp0s1	2026-09-12 14:30:53 (11 hours ago)	Auto-reported by Fail2Ban (SSH Brute Force)	Brute-Force SSH
🇫🇷 COMAITE	2026-09-12 13:04:31 (13 hours ago)	PHP CGI-bin vulnerability attempt.	Web App Attack
🇳🇱 Savvii	2026-09-12 13:01:01 (13 hours ago)	20 attempts against mh-ssh on orcus	Brute-Force SSH
Anonymous	2026-09-12 12:49:49 (13 hours ago)	denied traffic to a honeypot network. destination port 443.	Port Scan Hacking
🇺🇸 NXTwoThou	2026-09-12 12:28:08 (13 hours ago)	/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh	Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880:6000::81

🇳🇱 193.176.31.199

🇧🇷 179.109.85.180

🇸🇪 171.25.158.87

🇮🇩 157.85.213.24

🇺🇸 143.244.165.230

🇮🇳 103.59.4.36

🇸🇬 101.32.242.40

🇺🇸 66.132.186.245

🇻🇪 45.186.208.88

🇳🇱 45.148.10.157

🇺🇸 20.169.55.196

🇺🇸 198.55.122.201

🇺🇸 136.117.73.244

🇺🇸 97.90.138.11

🇳🇱 91.92.42.37

🇺🇸 89.47.63.107

🇫🇷 62.210.89.150

🇮🇳 49.248.96.210

🇩🇪 47.245.143.8