This IP address has been reported a total of
20
times from
19 distinct
sources.
125.141.120.143 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-02T10:49:53.272902+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[712545]: error: maximum authenti ...
show more2026-09-02T10:49:53.272902+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[712545]: error: maximum authentication attempts exceeded for root from 125.141.120.143 port 56660 ssh2 [preauth]
2026-09-02T10:50:06.637861+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[712547]: error: maximum authentication attempts exceeded for root from 125.141.120.143 port 57050 ssh2 [preauth]
2026-09-02T10:50:18.650932+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[712605]: error: maximum authentication attempts exceeded for root from 125.141.120.143 port 57352 ssh2 [preauth]
...
show less
Sep 2 13:28:56 www7 sshd[1856700]: Failed password for root from 125.141.120.143 port 34316 ssh2
Se ...
show moreSep 2 13:28:56 www7 sshd[1856700]: Failed password for root from 125.141.120.143 port 34316 ssh2
Sep 2 13:29:01 www7 sshd[1856700]: Failed password for root from 125.141.120.143 port 34316 ssh2
Sep 2 13:29:23 www7 sshd[1856700]: error: maximum authentication attempts exceeded for root from 125.141.120.143 port 34316 ssh2 [preauth]
...
show less
2026-09-02T11:58:00.026369 CentOS-90-stream-amd64-base sshd[369252]: Failed password for root from 1 ...
show more2026-09-02T11:58:00.026369 CentOS-90-stream-amd64-base sshd[369252]: Failed password for root from 125.141.120.143 port 44768 ssh2
2026-09-02T11:58:04.608791 CentOS-90-stream-amd64-base sshd[369252]: Failed password for root from 125.141.120.143 port 44768 ssh2
...
show less
SSH Brute force: 15 attempts were recorded from 125.141.120.143
2026-09-02T05:50:47+02:00 error: max ...
show moreSSH Brute force: 15 attempts were recorded from 125.141.120.143
2026-09-02T05:50:47+02:00 error: maximum authentication attempts exceeded for root from 125.141.120.143 port 56206 ssh2 [preauth]
2026-09-02T05:51:05+02:00 error: maximum authentication attempts exceeded for root from 125.141.120.143 port 56662 ssh2 [preauth]
2026-09-02T05:51:23+02:00 error: maximum authentication attempts exceeded for root from 125.141.120.143 port 57146 ssh2 [preauth]
2026-09-02T05:51:35+02:00 Disconnected from authenticating user root 125.141.120.143 port 57610 [preauth]
2026-09-02T05:51:46+02:00 Invalid user admin from 125.141.120.143 port 57900
2026-09-02T05:52:05+02:00 Invalid user admin from 125.141.120.143 port 58358
2026-09-02T05:52:25+02:00 Invalid user admin from 125.141.120.143 port 58850
2026-09-02T05:52:40+02:00 Invalid user oracle from 125.141.120.143 port 59208
2026-09-02T05:52:58+02:00 Inval
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 16/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 16/100 (low) | Phase: reconnaissance (low-volume probing)
Failed auth: 21 (21 bad password, 0 invalid user) | 0 success | 35 total SSH log events | seen on 1 sensor(s)
Origin: South Korea (KR) | AS4766 Korea Telecom | 125.141.120.0/24
First seen: 2026-08-21 12:43:03 UTC | Last seen: 2026-08-21 12:45:29 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-08-21T11:20:42.025813+00:00 netbird.franssen.xyz sshd-session[1249290]: Failed password for roo ...
show more2026-08-21T11:20:42.025813+00:00 netbird.franssen.xyz sshd-session[1249290]: Failed password for root from 125.141.120.143 port 60136 ssh2
2026-08-21T11:20:46.433643+00:00 netbird.franssen.xyz sshd-session[1249290]: Failed password for root from 125.141.120.143 port 60136 ssh2
2026-08-21T11:20:49.846304+00:00 netbird.franssen.xyz sshd-session[1249290]: Failed password for root from 125.141.120.143 port 60136 ssh2
2026-08-21T11:20:53.995332+00:00 netbird.franssen.xyz sshd-session[1249290]: Failed password for root from 125.141.120.143 port 60136 ssh2
2026-08-21T11:20:57.797711+00:00 netbird.franssen.xyz sshd-session[1249290]: Failed password for root from 125.141.120.143 port 60136 ssh2
...
show less
2026-08-20T05:40:19.221163-07:00 localhost sshd[740606]: Failed password for root from 125.141.120.1 ...
show more2026-08-20T05:40:19.221163-07:00 localhost sshd[740606]: Failed password for root from 125.141.120.143 port 59024 ssh2
2026-08-20T05:40:24.348086-07:00 localhost sshd[740606]: Failed password for root from 125.141.120.143 port 59024 ssh2
2026-08-20T05:40:28.158219-07:00 localhost sshd[740606]: Failed password for root from 125.141.120.143 port 59024 ssh2
2026-08-20T05:40:32.422727-07:00 localhost sshd[740606]: Failed password for root from 125.141.120.143 port 59024 ssh2
...
show less
Aug 20 09:52:13 obsidian sshd[3071603]: Failed password for root from 125.141.120.143 port 49828 ssh ...
show moreAug 20 09:52:13 obsidian sshd[3071603]: Failed password for root from 125.141.120.143 port 49828 ssh2
Aug 20 09:52:27 obsidian sshd[3071603]: Failed password for root from 125.141.120.143 port 49828 ssh2
Aug 20 09:52:31 obsidian sshd[3071603]: Failed password for root from 125.141.120.143 port 49828 ssh2
...
show less