JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

125.136.125.197

Neutral Activity

Abuse Confidence Score

0% Low Risk

528 reports

192 reporters · latest 3 years ago

ISP: Jeonnambonbujang
Usage Type: Fixed Line ISP
ASN: AS4766
Domain Name: kt.com
Country: 🇰🇷 Korea (the Republic of)
City: Gwangju, Gwangju

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

125.136.125.197 has been reported 528 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

528 from 192 distinct reporters

First reported

January 12th 2023

Most recent report

3 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Emily	2023-03-03 00:02:41 UTC · (3 years ago)	Mar 1 13:52:22 box kernel: [1609684.367199] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=125.136.125.197 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26464 PROTO=TCP SPT=52579 DPT=3389 WINDOW=23976 RES=0x00 SYN URGP=0	Port Scan
🇺🇸 MrRage	2023-03-02 01:37:36 UTC · (3 years ago)	SSH Brute Force Attempt Failed Login From IP Address 125.136.125.197	Brute-Force SSH
🇺🇸 Cobalt IT Inc	2023-03-02 01:35:36 UTC · (3 years ago)	Mar 1 17:35:26 server01 sshd[1737]: Failed password for root from 125.136.125.197 port 55383 ssh2 Mar 1 17:35:30 server01 sshd[1737]: Failed password for root from 125.136.125.197 port 55383 ssh2 Mar 1 17:35:32 server01 sshd[1737]: Failed password ... show more Mar 1 17:35:26 server01 sshd[1737]: Failed password for root from 125.136.125.197 port 55383 ssh2 Mar 1 17:35:30 server01 sshd[1737]: Failed password for root from 125.136.125.197 port 55383 ssh2 Mar 1 17:35:32 server01 sshd[1737]: Failed password for root from 125.136.125.197 port 55383 ssh2 Mar 1 17:35:36 server01 sshd[1737]: Failed password for root from 125.136.125.197 port 55383 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-03-01 23:41:43 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/125.136.125.197	Brute-Force
🇸🇬 veshchiyoleg.com	2023-03-01 21:31:22 UTC · (3 years ago)	Mar 1 21:31:17 veshchiyoleg sshd[782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.136.125.197 Mar 1 21:31:18 veshchiyoleg sshd[782]: Failed password for invalid user oracle from 125.136.125.197 port ... show more Mar 1 21:31:17 veshchiyoleg sshd[782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.136.125.197 Mar 1 21:31:18 veshchiyoleg sshd[782]: Failed password for invalid user oracle from 125.136.125.197 port 40782 ssh2 Mar 1 21:31:21 veshchiyoleg sshd[782]: Failed password for invalid user oracle from 125.136.125.197 port 40782 ssh2 ... show less	Brute-Force SSH
🇩🇪 emha.koeln	2023-03-01 17:00:06 UTC · (3 years ago)	Mar 1 17:59:52 v2202006123119120432 sshd[20822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.136.125.197 Mar 1 17:59:54 v2202006123119120432 sshd[20822]: Failed password for invalid user admin from 1 ... show more Mar 1 17:59:52 v2202006123119120432 sshd[20822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.136.125.197 Mar 1 17:59:54 v2202006123119120432 sshd[20822]: Failed password for invalid user admin from 125.136.125.197 port 47263 ssh2 Mar 1 17:59:57 v2202006123119120432 sshd[20822]: Failed password for invalid user admin from 125.136.125.197 port 47263 ssh2 show less	Brute-Force SSH
Anonymous	2023-03-01 15:11:51 UTC · (3 years ago)	"Attempted unauthorized system access"	Brute-Force
🇳🇱 tutosfaciles48	2023-03-01 13:21:04 UTC · (3 years ago)	Mar 1 14:21:01 sd-152308 sshd[810068]: Invalid user admin from 125.136.125.197 port 36913 Mar 1 14:21:03 sd-152308 sshd[810068]: error: maximum authentication attempts exceeded for invalid user admin from 125.136.125.197 port 36913 ssh2 [preauth] . ... show more Mar 1 14:21:01 sd-152308 sshd[810068]: Invalid user admin from 125.136.125.197 port 36913 Mar 1 14:21:03 sd-152308 sshd[810068]: error: maximum authentication attempts exceeded for invalid user admin from 125.136.125.197 port 36913 ssh2 [preauth] ... show less	Brute-Force SSH
🇫🇷 Emily	2023-03-01 12:52:23 UTC · (3 years ago)	Mar 1 13:52:22 box kernel: [1609684.367199] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=125.136.125.197 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=26464 PROTO=TCP SPT=52579 DPT=3389 WINDOW=23976 RES=0x00 SYN URGP=0	Port Scan
🇮🇳 Parth Maniar	2023-03-01 12:18:35 UTC · (3 years ago)	SSH login attempts (SSH bruteforce attack). For more information, or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇺🇸 MPL	2023-02-28 18:48:16 UTC · (3 years ago)	tcp/50000	Port Scan
🇺🇸 MPL	2023-02-28 15:00:47 UTC · (3 years ago)	tcp/22	Port Scan
🇫🇷 Lat31320	2023-02-28 10:34:09 UTC · (3 years ago)	debx - SSH brute force	Brute-Force SSH
🇺🇸 MPL	2023-02-28 09:48:30 UTC · (3 years ago)	tcp/22	Port Scan
🇨🇳 ThreatBook.io	2023-02-28 00:49:22 UTC · (3 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/125.136.125.197	SSH

Showing 1 to 15 of 528 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 99.227.146.244

🇺🇸 20.171.192.74

🇺🇸 172.236.111.98

🇨🇳 117.62.22.127

🇳🇱 109.160.32.127

🇧🇩 103.143.234.34

🇮🇹 87.17.24.140

🇺🇸 20.171.192.72

🇧🇷 190.102.46.77

🇨🇳 183.224.97.83

🇫🇮 172.83.253.35

🇫🇷 161.97.79.70

🇩🇪 109.160.32.30

🇪🇸 82.223.34.28

🇺🇸 72.211.57.144

🇲🇽 45.174.243.194

🇳🇱 45.148.10.157

🇺🇦 31.40.19.61

🇺🇸 20.171.192.159

🇺🇸 20.171.13.10