AbuseIPDB » 125.139.58.175

125.139.58.175 was found in our database!

This IP was reported 4,958 times. Confidence of Abuse is 100%: ?

100%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	Korea (the Republic of)
City	Haksan, North Chungcheong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 125.139.58.175

Whois 125.139.58.175

IP Abuse Reports for 125.139.58.175:

This IP address has been reported a total of 4,958 times from 403 distinct sources. 125.139.58.175 was first reported on June 28th 2022, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Largnet SOC	2022-09-23 07:42:27 (2 years ago)	125.139.58.175 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
Largnet SOC	2022-09-23 07:42:27 (2 years ago)	125.139.58.175 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
Efina	2022-09-23 04:25:15 (2 years ago)	Automatic Fail2ban Report - Trying login SSH	Brute-Force SSH
ISPLtd	2022-09-23 00:49:49 (2 years ago)	Sep 23 06:49:49 SRC=125.139.58.175 PROTO=TCP SPT=38145 DPT=22 SYN ...	Port Scan SSH
ISPLtd	2022-09-23 00:29:11 (2 years ago)	Sep 23 01:29:10 SRC=125.139.58.175 PROTO=TCP SPT=41563 DPT=22 SYN ...	Port Scan SSH
FEWA	2022-09-22 23:39:15 (2 years ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
edisonjwa	2022-09-22 23:24:36 (2 years ago)	2022-09-22T09:39:08.663903debian sshd[589368]: pam_unix(sshd:auth): authentication failure; logname= ... show more2022-09-22T09:39:08.663903debian sshd[589368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.139.58.175 2022-09-22T09:39:10.593354debian sshd[589368]: Failed password for invalid user admin from 125.139.58.175 port 34954 ssh2 2022-09-22T23:23:59.264048debian sshd[595781]: Invalid user admin from 125.139.58.175 port 42841 ... show less	Port Scan Brute-Force SSH
Hirte	2022-09-22 20:32:23 (2 years ago)	ENG-W: TCP-Scanner. Port: 22	Port Scan
marshy.com.au	2022-09-22 18:07:29 (2 years ago)	(sshd) Failed SSH login from 125.139.58.175 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; D ... show more(sshd) Failed SSH login from 125.139.58.175 (KR/South Korea/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 08:07:26 ded01 sshd[5028]: Invalid user admin from 125.139.58.175 port 36019 Sep 23 08:07:26 ded01 sshd[5026]: Invalid user admin from 125.139.58.175 port 59277 Sep 23 08:07:26 ded01 sshd[5027]: Invalid user admin from 125.139.58.175 port 38273 Sep 23 08:07:26 ded01 sshd[5029]: Invalid user admin from 125.139.58.175 port 57029 Sep 23 08:07:27 ded01 sshd[5027]: Failed password for invalid user admin from 125.139.58.175 port 38273 ssh2 show less	Port Scan
PvH	2022-09-22 12:06:14 (2 years ago)	Unsolicited connection attempts to port 22	Hacking SSH
Teor Logico	2022-09-22 08:51:58 (2 years ago)	Sep 22 14:51:55 host-134-119-215-243 sshd[17921]: pam_unix(sshd:auth): authentication failure; logna ... show moreSep 22 14:51:55 host-134-119-215-243 sshd[17921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.139.58.175 Sep 22 14:51:57 host-134-119-215-243 sshd[17921]: Failed password for invalid user admin from 125.139.58.175 port 46608 ssh2 show less	Brute-Force SSH
ISPLtd	2022-09-22 07:18:45 (2 years ago)	Sep 22 08:18:44 SRC=125.139.58.175 PROTO=TCP SPT=12500 DPT=22 SYN ...	Port Scan SSH
Smel	2022-09-22 00:47:45 (2 years ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
Hirte	2022-09-21 23:44:09 (2 years ago)	C2-W: TCP-Scanner. Port: 22	Port Scan
Anonymous	2022-09-21 21:09:53 (2 years ago)	Unauthorized connection	Port Scan Hacking