JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.23.203.138

125.23.203.138 was found in our database!

This IP was reported 2,597 times. Confidence of Abuse is 100%: ?

100%

ISP	Bharti Televentures Ltd. - ABTS
Usage Type	Mobile ISP
ASN	AS9498
Domain Name	airtel.in
Country	🇮🇳 India
City	Greater Noida, Uttar Pradesh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.23.203.138

Whois 125.23.203.138

IP Abuse Reports for 125.23.203.138:

This IP address has been reported a total of 2,597 times from 343 distinct sources. 125.23.203.138 was first reported on August 18th 2025, and the most recent report was 10 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Brian Minton	2026-06-04 18:35:31 (10 minutes ago)	2026-06-03 13:46:09 no host name found for IP address 125.23.203.138 2026-06-03 17:40:14 no host nam ... show more 2026-06-03 13:46:09 no host name found for IP address 125.23.203.138 2026-06-03 17:40:14 no host name found for IP address 125.23.203.138 2026-06-04 13:35:31 no host name found for IP address 125.23.203.138 ... show less	Brute-Force
🇬🇧 AdrianT	2026-06-04 17:48:57 (56 minutes ago)	SMTP port scanning	Port Scan
🇩🇪 FeG Deutschland	2026-06-04 14:48:04 (3 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇹🇷 ferique	2026-06-04 12:02:09 (6 hours ago)	Real-time Intercept: SMTP attack. Reference: 2026-06-04 15:01:59.4560 Login failure: 125.23.203.138 ... show more Real-time Intercept: SMTP attack. Reference: 2026-06-04 15:01:59.4560 Login failure: 125.23.203.138 SMTP show less	Brute-Force Email Spam
Anonymous	2026-06-04 11:11:36 (7 hours ago)	IMAP brute-force: 1 failed authentication attempt(s) in 24h detected by CRMON security monitor. Abus ... show more IMAP brute-force: 1 failed authentication attempt(s) in 24h detected by CRMON security monitor. AbuseIPDB confidence score at block time: 100%. show less	Brute-Force
🇺🇸 chrisj	2026-06-04 10:30:09 (8 hours ago)	2026-06-04T10:30:09.090819+00:00 aws postfix/smtps/smtpd[192693]: warning: unknown[125.23.203.138]: ... show more 2026-06-04T10:30:09.090819+00:00 aws postfix/smtps/smtpd[192693]: warning: unknown[125.23.203.138]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-04T10:30:09.091001+00:00 aws postfix/smtps/smtpd[192693]: lost connection after AUTH from unknown[125.23.203.138] 2026-06-04T10:30:09.091068+00:00 aws postfix/smtps/smtpd[192693]: disconnect from unknown[125.23.203.138] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇷🇴 iulianh	2026-06-04 09:21:17 (9 hours ago)	25,465,587	Brute-Force SSH
🇬🇧 gaztronics	2026-06-04 07:42:45 (11 hours ago)	2026-06-04T07:42:42.464604 liberator sendmail[1371998]: 6546gVgq1371998: [125.23.203.138] did not is ... show more 2026-06-04T07:42:42.464604 liberator sendmail[1371998]: 6546gVgq1371998: [125.23.203.138] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA ... show less	Brute-Force
🇬🇧 gaztronics	2026-06-04 06:42:44 (12 hours ago)	2026-06-04T06:42:42.363272 liberator sendmail[1371998]: 6546gVgq1371998: AUTH failure (LOGIN): authe ... show more 2026-06-04T06:42:42.363272 liberator sendmail[1371998]: 6546gVgq1371998: AUTH failure (LOGIN): authentication failure (-13) SASL(-13): authentication failure: checkpass failed, [email protected], relay=[125.23.203.138] ... show less	Brute-Force
🇩🇪 chris_yooo	2026-06-04 02:02:12 (16 hours ago)	Jun 4 04:02:11 isp postfix/smtps/smtpd[2508119]: warning: unknown[125.23.203.138]: SASL LOGIN authe ... show more Jun 4 04:02:11 isp postfix/smtps/smtpd[2508119]: warning: unknown[125.23.203.138]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 4 04:02:12 isp postfix/smtps/smtpd[2508119]: lost connection after AUTH from unknown[125.23.203.138] Jun 4 04:02:12 isp postfix/smtps/smtpd[2508119]: disconnect from unknown[125.23.203.138] ehlo=1 auth=0/1 commands=1/2 ... show less	Spoofing Brute-Force
🇩🇪 Paul Smith	2026-06-04 01:28:19 (17 hours ago)	Email Auth Brute force attack 7/7 in last day	Brute-Force
🇪🇸 alferez	2026-06-04 00:59:03 (17 hours ago)	Searching random mail account login	Email Spam
🇩🇪 EGP Abuse Dept	2026-06-04 00:27:13 (18 hours ago)	SMTP AUTH attack	Brute-Force
Anonymous	2026-06-03 23:37:50 (19 hours ago)	2026-06-04T01:37:49.260672+02:00 gollum postfix/smtps/smtpd[2598227]: warning: unknown[125.23.203.13 ... show more 2026-06-04T01:37:49.260672+02:00 gollum postfix/smtps/smtpd[2598227]: warning: unknown[125.23.203.138]: SASL PLAIN authentication failed: (reason unavailable), [email protected] 2026-06-04T01:37:49.260797+02:00 gollum postfix/smtps/smtpd[2598227]: lost connection after AUTH from unknown[125.23.203.138] 2026-06-04T01:37:49.261117+02:00 gollum postfix/smtps/smtpd[2598227]: disconnect from unknown[125.23.203.138] ehlo=1 auth=0/1 commands=1/2 ... show less	DDoS Attack Brute-Force
Anonymous	2026-06-03 23:30:11 (19 hours ago)	2026-06-04T01:30:09.451489 biopolis.pcconsultant.it postfix/smtpd[1017054]: warning: unknown[125.23. ... show more 2026-06-04T01:30:09.451489 biopolis.pcconsultant.it postfix/smtpd[1017054]: warning: unknown[125.23.203.138]: SASL LOGIN authentication failed: authentication failure, sasl_username=mailer-daemon ... show less	Brute-Force

Showing 1 to 15 of 2597 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:2:d1:0:1:51da:6001

🇮🇹 149.22.91.85

🇺🇸 205.210.31.55

🇪🇬 197.49.31.129

🇪🇬 196.218.240.133

🇺🇸 147.185.132.49

🇫🇷 144.91.91.231

🇮🇳 103.160.197.242

🇵🇰 103.125.177.231

🇷🇺 185.16.214.226

🇦🇷 181.117.161.71

🇺🇸 162.216.150.104

🇳🇱 158.94.210.75

🇮🇳 154.61.69.74

🇩🇪 141.11.250.239

🇺🇸 74.7.242.137

🇺🇸 66.132.186.129

🇬🇧 35.203.211.254

🇬🇧 35.203.210.182

🇫🇷 34.155.121.179