JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.16.137.6

125.16.137.6 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 91%: ?

91%

ISP	BHARTI-AIRTEL
Usage Type	Mobile ISP
ASN	AS9498
Domain Name	airtel.in
Country	🇮🇳 India
City	Gurugram, Haryana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.16.137.6

Whois 125.16.137.6

IP Abuse Reports for 125.16.137.6:

This IP address has been reported a total of 21 times from 19 distinct sources. 125.16.137.6 was first reported on July 20th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MrCbrue	2026-07-25 03:27:34 (6 days ago)	Cowrie Activity: Executed cmd: cat /proc/cpuinfo \| Executed cmd: ls -la ~/.local/share/TelegramDeskt ... show more Cowrie Activity: Executed cmd: cat /proc/cpuinfo \| Executed cmd: ls -la ~/.local/share/TelegramDesktop/tdata /home//.local/share/TelegramDesktop/tdata /dev/ttyGSM /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/* \| Executed cmd: ps -ef \| grep '[Mm]iner' \| Executed cmd: uname -a \| Failed login (user: root) \| Executed cmd: /ip cloud print \| Executed cmd: ifconfig \| Executed cmd: ps \| grep '[Mm]iner' \| Executed cmd: locate D877F783D5D3EF8Cs \| Executed cmd: echo Hi \| cat -n \| Successful login (user: root) show less	Brute-Force SSH Hacking
🇨🇿 lp	2026-07-24 21:18:37 (6 days ago)	SSH Brute force: 14 attempts were recorded from 125.16.137.6 2026-07-24T22:38:42+02:00 error: maximu ... show more SSH Brute force: 14 attempts were recorded from 125.16.137.6 2026-07-24T22:38:42+02:00 error: maximum authentication attempts exceeded for root from 125.16.137.6 port 49241 ssh2 [preauth] 2026-07-24T22:38:52+02:00 error: maximum authentication attempts exceeded for root from 125.16.137.6 port 49297 ssh2 [preauth] 2026-07-24T22:39:02+02:00 error: maximum authentication attempts exceeded for root from 125.16.137.6 port 49367 ssh2 [preauth] 2026-07-24T22:39:11+02:00 Disconnected from authenticating user root 125.16.137.6 port 49419 [preauth] 2026-07-24T22:39:19+02:00 Invalid user admin from 125.16.137.6 port 49474 2026-07-24T22:39:31+02:00 Invalid user admin from 125.16.137.6 port 49534 2026-07-24T22:39:41+02:00 Invalid user admin from 125.16.137.6 port 49600 2026-07-24T22:39:52+02:00 Invalid user oracle from 125.16.137.6 port 49671 2026-07-24T22:39:59+02:00 Invalid user oracle from 125.16. show less	Brute-Force SSH
Anonymous	2026-07-24 20:51:44 (6 days ago)	2026-07-24T22:51:43.661958 localhost.localdomain sshd-session[215454]: error: kex_exchange_identific ... show more 2026-07-24T22:51:43.661958 localhost.localdomain sshd-session[215454]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-24T22:51:43.661996 localhost.localdomain sshd-session[215454]: Connection reset by 125.16.137.6 port 42320 ... show less	Brute-Force SSH
🇵🇱 pshost.pl	2026-07-24 20:26:37 (6 days ago)	2026-07-24T20:26:37.063Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ... show more 2026-07-24T20:26:37.063Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 125.16.137.6. show less	Port Scan Brute-Force SSH
🇧🇾 lns.bz	2026-07-24 20:03:27 (6 days ago)	SSH bruteforce [BY]	SSH
🇫🇮 FDC	2026-07-24 16:30:48 (6 days ago)	Malicious activity from 125.16.137.6 detected by FDC honeypots. Categories: 14,15,18,22. 4 events in ... show more Malicious activity from 125.16.137.6 detected by FDC honeypots. Categories: 14,15,18,22. 4 events in last 24h. show less	Port Scan Hacking Brute-Force SSH
🇩🇪 rh24	2026-07-24 10:26:58 (6 days ago)	(sshd) Failed SSH login from 125.16.137.6 (IN/India/-)	Brute-Force SSH
🇺🇸 HamSammich	2026-07-24 10:17:10 (6 days ago)	Automated sensor: 161 SSH brute-force attempts over the last 24h (latest 2026-07-24T10:17Z). Usernam ... show more Automated sensor: 161 SSH brute-force attempts over the last 24h (latest 2026-07-24T10:17Z). Usernames tried: root, admin, ftpuser, ubuntu. show less	Brute-Force SSH
Anonymous	2026-07-24 08:44:41 (6 days ago)	Port Scanner	Port Scan
🇳🇱 Fr13nds.Tech	2026-07-24 08:34:24 (6 days ago)	Jul 24 10:34:08 plesk sshd[28568]: Failed password for root from 125.16.137.6 port 49707 ssh2 Jul 24 ... show more Jul 24 10:34:08 plesk sshd[28568]: Failed password for root from 125.16.137.6 port 49707 ssh2 Jul 24 10:34:13 plesk sshd[28568]: Failed password for root from 125.16.137.6 port 49707 ssh2 Jul 24 10:34:17 plesk sshd[28568]: Failed password for root from 125.16.137.6 port 49707 ssh2 Jul 24 10:34:21 plesk sshd[28568]: Failed password for root from 125.16.137.6 port 49707 ssh2 Jul 24 10:34:23 plesk sshd[28568]: Failed password for root from 125.16.137.6 port 49707 ssh2 show less	Brute-Force SSH
🇨🇭 Boxis.net NOC	2026-07-24 01:52:39 (1 week ago)	(sshd) Failed SSH login from 125.16.137.6 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction ... show more (sshd) Failed SSH login from 125.16.137.6 (IN/India/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jul 24 03:51:44 da057 sshd[973306]: error: maximum authentication attempts exceeded for root from 125.16.137.6 port 55904 ssh2 [preauth] Jul 24 03:51:52 da057 sshd[973518]: error: maximum authentication attempts exceeded for root from 125.16.137.6 port 55953 ssh2 [preauth] Jul 24 03:52:01 da057 sshd[973684]: error: maximum authentication attempts exceeded for root from 125.16.137.6 port 56001 ssh2 [preauth] Jul 24 03:52:18 da057 sshd[974016]: error: maximum authentication attempts exceeded for admin from 125.16.137.6 port 56104 ssh2 [preauth] Jul 24 03:52:27 da057 sshd[974180]: error: maximum authentication attempts exceeded for admin from 125.16.137.6 port 56167 ssh2 [preauth] show less	Port Scan
🇵🇱 AuthenticHowler	2026-07-22 06:37:57 (1 week ago)	sshd on monitor: 5 attempts in 3600 seconds	Brute-Force SSH
🇵🇱 webadmin	2026-07-21 14:44:51 (1 week ago)	Fail2Ban Cluster BAN	Brute-Force Web App Attack
Anonymous	2026-07-21 14:00:37 (1 week ago)	2026-07-21T16:00:18.639646 www.yerkanian.com sshd-session[342783]: Failed password for root from 125 ... show more 2026-07-21T16:00:18.639646 www.yerkanian.com sshd-session[342783]: Failed password for root from 125.16.137.6 port 51003 ssh2 2026-07-21T16:00:22.177425 www.yerkanian.com sshd-session[342783]: Failed password for root from 125.16.137.6 port 51003 ssh2 2026-07-21T16:00:23.878263 www.yerkanian.com sshd-session[342783]: Failed password for root from 125.16.137.6 port 51003 ssh2 2026-07-21T16:00:26.580121 www.yerkanian.com sshd-session[342783]: Failed password for root from 125.16.137.6 port 51003 ssh2 2026-07-21T16:00:30.795745 www.yerkanian.com sshd-session[342783]: Failed password for root from 125.16.137.6 port 51003 ssh2 2026-07-21T16:00:34.679855 www.yerkanian.com sshd-session[342783]: Failed password for root from 125.16.137.6 port 51003 ssh2 2026-07-21T16:00:36.440579 www.yerkanian.com sshd-session[342783]: error: maximum authentication attempts exceeded for root from 125.16.137.6 port 51003 ssh2 [preauth] ... show less	Brute-Force SSH
🇺🇸 FurrIX vIX	2026-07-21 13:44:16 (1 week ago)	[FurrIX NOC, Automated, PHY TWO]: Bonked into empty SSH door. Whatcha looking for in there, eh?!	Brute-Force SSH

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.170.224.116

🇧🇷 164.163.24.11

🇨🇮 160.154.233.7

🇺🇸 66.132.172.225

🇺🇸 20.169.106.110

🇺🇸 2620:171:fe:f0::237

🇺🇸 207.90.244.18

🇺🇸 162.216.149.159

🇨🇳 123.117.154.34

🇮🇩 110.35.80.116

🇮🇳 103.192.67.179

🇺🇸 67.85.146.216

🇺🇸 66.132.195.67

🇺🇸 66.132.172.229

🇳🇱 217.60.195.65

🇺🇿 198.163.192.143

🇮🇩 180.251.146.5

🇨🇳 106.13.122.214

🇷🇴 92.118.39.77

🇺🇸 91.230.168.91