This IP address has been reported a total of
55
times from
48 distinct
sources.
125.141.72.225 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CrowdSec detected Known vulnerability exploitation attempt. Scenario: crowdsecurity/http-cve-2021-41 ...
show moreCrowdSec detected Known vulnerability exploitation attempt. Scenario: crowdsecurity/http-cve-2021-41773. Automatic ban triggered. Detection time (UTC): 2026-08-21T19:44:55.920409891Z. Context: http_status=400
show less
2026-08-21T18:20:39.508662+02:00 milkyway sshd[4049184]: pam_unix(sshd:auth): authentication failure ...
show more2026-08-21T18:20:39.508662+02:00 milkyway sshd[4049184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.72.225
2026-08-21T18:20:42.029322+02:00 milkyway sshd[4049184]: Failed password for invalid user admin from 125.141.72.225 port 50336 ssh2
2026-08-21T18:34:56.317225+02:00 milkyway sshd[4050380]: Invalid user user from 125.141.72.225 port 58398
...
show less
blocked for webapp attack | path requested: /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.p ...
show moreblocked for webapp attack | path requested: /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | seen at 2026-08-21 13:01:53.447 |
show less