This IP address has been reported a total of
470
times from
229 distinct
sources.
125.215.52.45 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-28T06:21:40.357214+08:00 *hostname* sshd-session[82136]: Invalid user admin from 125.215.52. ...
show more2026-05-28T06:21:40.357214+08:00 *hostname* sshd-session[82136]: Invalid user admin from 125.215.52.45 port 55854
2026-05-28T06:22:22.517543+08:00 *hostname* sshd-session[82144]: Connection from 125.215.52.45 port 49500 on 10.0.4.13 port 22 rdomain ""
2026-05-28T06:22:22.966098+08:00 *hostname* sshd-session[82144]: Invalid user debian from 125.215.52.45 port 49500
2026-05-28T06:23:05.610163+08:00 *hostname* sshd-session[82153]: Connection from 125.215.52.45 port 39012 on 10.0.4.13 port 22 rdomain ""
2026-05-28T06:23:06.081048+08:00 *hostname* sshd-session[82153]: Invalid user roots from 125.215.52.45 port 39012
show less
Brute-Force
SSH
Anonymous
2026-05-27T21:31:22.106634+02:00 de-fsn1-host1 sshd-session[1102214]: Invalid user devops from 125.2 ...
show more2026-05-27T21:31:22.106634+02:00 de-fsn1-host1 sshd-session[1102214]: Invalid user devops from 125.215.52.45 port 55190
2026-05-27T21:32:41.239270+02:00 de-fsn1-host1 sshd-session[1105988]: Invalid user zjw from 125.215.52.45 port 37456
2026-05-27T21:34:18.357503+02:00 de-fsn1-host1 sshd-session[1119112]: Invalid user admin from 125.215.52.45 port 60324
...
show less
2026-05-27T18:12:43.723961+02:00 gw-de02-01.guestgw.net sshd[427811]: Connection closed by 125.215.5 ...
show more2026-05-27T18:12:43.723961+02:00 gw-de02-01.guestgw.net sshd[427811]: Connection closed by 125.215.52.45 port 49230 [preauth]
2026-05-27T18:15:05.615984+02:00 gw-de02-01.guestgw.net sshd[428572]: Connection closed by 125.215.52.45 port 33188 [preauth]
2026-05-27T18:17:51.140869+02:00 gw-de02-01.guestgw.net sshd[429700]: Connection closed by 125.215.52.45 port 53214 [preauth]
2026-05-27T18:18:23.959835+02:00 gw-de02-01.guestgw.net sshd[429954]: Connection closed by 125.215.52.45 port 37800 [preauth]
2026-05-27T18:19:57.143932+02:00 gw-de02-01.guestgw.net sshd[430074]: Connection closed by 125.215.52.45 port 39794 [preauth]
show less
May 27 13:23:34 instance1 sshd[1408306]: Disconnected from invalid user contab 125.215.52.45 port 51 ...
show moreMay 27 13:23:34 instance1 sshd[1408306]: Disconnected from invalid user contab 125.215.52.45 port 51652 [preauth]
...
show less
125.215.52.45 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more125.215.52.45 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 27 03:19:36 15624 sshd[6905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.100.201 user=root
May 27 03:19:38 15624 sshd[6905]: Failed password for root from 140.246.100.201 port 57676 ssh2
May 27 03:22:11 15624 sshd[7368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.249.111.82 user=root
May 27 03:19:20 15624 sshd[6890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.52.45 user=root
May 27 03:19:22 15624 sshd[6890]: Failed password for root from 125.215.52.45 port 32958 ssh2
IP Addresses Blocked:
140.246.100.201 (CN/China/-)
113.249.111.82 (CN/China/-)
show less
(sshd) Failed SSH login from 125.215.52.45 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 125.215.52.45 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 27 01:32:27 14772 sshd[30726]: Invalid user cds from 125.215.52.45 port 42632
May 27 01:32:28 14772 sshd[30726]: Failed password for invalid user cds from 125.215.52.45 port 42632 ssh2
May 27 01:48:15 14772 sshd[1245]: Invalid user ubuntu from 125.215.52.45 port 42440
May 27 01:48:17 14772 sshd[1245]: Failed password for invalid user ubuntu from 125.215.52.45 port 42440 ssh2
May 27 01:50:21 14772 sshd[1621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.52.45 user=root
show less
125.215.52.45 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more125.215.52.45 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 26 16:25:06 24398 sshd[20150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.16.234 user=root
May 26 16:25:09 24398 sshd[20150]: Failed password for root from 154.92.16.234 port 56286 ssh2
May 26 16:19:04 24398 sshd[15548]: Failed password for root from 125.215.52.45 port 46562 ssh2
May 26 16:19:03 24398 sshd[15548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.52.45 user=root
May 26 16:26:02 24398 sshd[20177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.16.234 user=root
IP Addresses Blocked:
154.92.16.234 (HK/Hong Kong/-)
show less
125.215.52.45 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more125.215.52.45 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 26 10:19:01 21255 sshd[26538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.52.45 user=root
May 26 10:19:03 21255 sshd[26538]: Failed password for root from 125.215.52.45 port 53590 ssh2
May 26 10:17:25 21255 sshd[26277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.167.10.243 user=root
May 26 10:16:37 21255 sshd[26099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.167.10.243 user=root
May 26 10:16:39 21255 sshd[26099]: Failed password for root from 43.167.10.243 port 57626 ssh2
IP Addresses Blocked:
show less
(sshd) Failed SSH login from 125.215.52.45 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 125.215.52.45 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 26 09:00:17 14850 sshd[3275]: Invalid user daniela from 125.215.52.45 port 35948
May 26 09:00:20 14850 sshd[3275]: Failed password for invalid user daniela from 125.215.52.45 port 35948 ssh2
May 26 09:27:12 14850 sshd[7846]: Invalid user tk from 125.215.52.45 port 47818
May 26 09:27:14 14850 sshd[7846]: Failed password for invalid user tk from 125.215.52.45 port 47818 ssh2
May 26 09:57:02 14850 sshd[12490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.52.45 user=root
show less
Brute-Force
SSH
Showing 76 to
90
of 470 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩