JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.25.202.55

125.25.202.55

Neutral Activity

118 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Static IP Addresses for Internet Services

Usage Type

Fixed Line ISP

ASN

AS23969

Hostname(s)

node-13xz.pool-125-25.dynamic.nt-isp.net

Domain Name

totbb.net

Country

🇹🇭 Thailand

City

Phitsanulok, Phitsanulok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

125.25.202.55 has been reported 118 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 125.25.202.55:

This IP address has been reported a total of 118 times from 64 distinct sources. 125.25.202.55 was first reported on August 11th 2023, and the most recent report was 7 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 nfsec.pl	2026-01-14 07:02:39 (7 months ago)	Detected: TCP scan on port: 445 with flags: SYN	Port Scan
🇨🇳 ThreatBook.io	2023-08-13 01:40:41 (3 years ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/125.25.202.55	SSH
🇫🇷 Falco	2023-08-13 01:12:31 (3 years ago)	Aug 13 03:08:15 ovh-proxmox sshd[4139279]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Aug 13 03:08:15 ovh-proxmox sshd[4139279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 Aug 13 03:08:17 ovh-proxmox sshd[4139279]: Failed password for invalid user mc2 from 125.25.202.55 port 48803 ssh2 Aug 13 03:12:30 ovh-proxmox sshd[4140127]: Invalid user luky from 125.25.202.55 port 38838 ... show less	Brute-Force SSH
Anonymous	2023-08-13 00:24:42 (3 years ago)	tw: Invalid user yuan from 125.25.202.55 port 56089 tw: Invalid user dev from 125.25.202.55 port 382 ... show more tw: Invalid user yuan from 125.25.202.55 port 56089 tw: Invalid user dev from 125.25.202.55 port 38226 tw: Invalid user user from 125.25.202.55 port 48594 show less	Brute-Force SSH
🇩🇪 HoneyPotDu3	2023-08-13 00:21:46 (3 years ago)	Aug 13 02:14:53 [redacted] sshd[1071009]: Failed password for root from 125.25.202.55 port 46059 ssh ... show more Aug 13 02:14:53 [redacted] sshd[1071009]: Failed password for root from 125.25.202.55 port 46059 ssh2 Aug 13 02:21:45 [redacted] sshd[1071050]: Invalid user yuan from 125.25.202.55 port 44870 ... show less	Brute-Force SSH
🇫🇷 dsl	2023-08-12 23:34:20 (3 years ago)	Aug 12 23:34:18 dgserver sshd[3976]: Invalid user ubuntu from 125.25.202.55 port 55785 Aug 12 23:34: ... show more Aug 12 23:34:18 dgserver sshd[3976]: Invalid user ubuntu from 125.25.202.55 port 55785 Aug 12 23:34:18 dgserver sshd[3976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 Aug 12 23:34:20 dgserver sshd[3976]: Failed password for invalid user ubuntu from 125.25.202.55 port 55785 ssh2 ... show less	Brute-Force SSH
🇬🇧 yvoictra	2023-08-12 23:29:42 (3 years ago)	Aug 13 01:29:41 lavrea sshd[119976]: Invalid user ubuntu from 125.25.202.55 port 43567 ...	Brute-Force SSH
🇮🇳 Bread™️	2023-08-12 22:20:37 (3 years ago)	Aug 12 22:09:16 BreadVPS sshd[148442]: Disconnected from invalid user cameras 125.25.202.55 port 419 ... show more Aug 12 22:09:16 BreadVPS sshd[148442]: Disconnected from invalid user cameras 125.25.202.55 port 41940 [preauth] Aug 12 22:19:23 BreadVPS sshd[330627]: Disconnected from authenticating user root 125.25.202.55 port 34948 [preauth] Aug 12 22:20:36 BreadVPS sshd[352606]: Invalid user ncs from 125.25.202.55 port 44661 Aug 12 22:20:36 BreadVPS sshd[352606]: Disconnected from invalid user ncs 125.25.202.55 port 44661 [preauth] ... show less	Brute-Force SSH
🇮🇳 Bread™️	2023-08-12 21:56:01 (3 years ago)	Aug 12 21:48:03 BreadVPS sshd[3950490]: Disconnected from authenticating user root 125.25.202.55 por ... show more Aug 12 21:48:03 BreadVPS sshd[3950490]: Disconnected from authenticating user root 125.25.202.55 port 51320 [preauth] Aug 12 21:54:35 BreadVPS sshd[4070242]: Invalid user testa from 125.25.202.55 port 48018 Aug 12 21:54:35 BreadVPS sshd[4070242]: Disconnected from invalid user testa 125.25.202.55 port 48018 [preauth] Aug 12 21:55:59 BreadVPS sshd[4094687]: Disconnected from authenticating user root 125.25.202.55 port 57733 [preauth] ... show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2023-08-12 21:21:42 (3 years ago)	Lines containing failures of 125.25.202.55 Aug 11 04:36:52 penfold sshd[4693]: AD user peipei from 1 ... show more Lines containing failures of 125.25.202.55 Aug 11 04:36:52 penfold sshd[4693]: AD user peipei from 125.25.202.55 port 54352 Aug 11 04:36:52 penfold sshd[4693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 Aug 11 04:36:54 penfold sshd[4693]: Failed password for AD user peipei from 125.25.202.55 port 54352 ssh2 Aug 11 04:36:56 penfold sshd[4693]: Received disconnect from 125.25.202.55 port 54352:11: Bye Bye [preauth] Aug 11 04:36:56 penfold sshd[4693]: Disconnected from AD user peipei 125.25.202.55 port 54352 [preauth] Aug 11 04:44:59 penfold sshd[5512]: AD user pcpqa from 125.25.202.55 port 55326 Aug 11 04:44:59 penfold sshd[5512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.25.202.55 show less	FTP Brute-Force Hacking
🇩🇪 pr0vieh	2023-08-12 21:07:24 (3 years ago)	Aug 12 23:02:18 Linux14 sshd[3303615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Aug 12 23:02:18 Linux14 sshd[3303615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 user=root Aug 12 23:02:21 Linux14 sshd[3303615]: Failed password for root from 125.25.202.55 port 54545 ssh2 Aug 12 23:03:33 Linux14 sshd[3308850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 user=root Aug 12 23:03:35 Linux14 sshd[3308850]: Failed password for root from 125.25.202.55 port 37221 ssh2 Aug 12 23:04:48 Linux14 sshd[3314461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 user=root Aug 12 23:04:51 Linux14 sshd[3314461]: Failed password for root from 125.25.202.55 port 48131 ssh2 Aug 12 23:06:06 Linux14 sshd[3320985]: Invalid user admin from 125.25.202.55 port 59036 Aug 12 23:06:06 Linux14 sshd[3320985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.25.202.55 Aug 12 23:06:08 L ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2023-08-12 20:48:24 (3 years ago)	Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port ... show more Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port 46097 Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Disconnected from invalid user sn 125.25.202.55 port 46097 [preauth] Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Invalid user esa from 125.25.202.55 port 56070 Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Disconnected from invalid user esa 125.25.202.55 port 56070 [preauth] Aug 12 22:48:22 temp-router-sip.merkur.local sshd[1306480]: Invalid user dvd from 125.25.202.55 port 37811 show less	Brute-Force
🇩🇪 ipcop.net	2023-08-12 20:48:24 (3 years ago)	Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port ... show more Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port 46097 Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Disconnected from invalid user sn 125.25.202.55 port 46097 [preauth] Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Invalid user esa from 125.25.202.55 port 56070 Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Disconnected from invalid user esa 125.25.202.55 port 56070 [preauth] Aug 12 22:48:22 temp-router-sip.merkur.local sshd[1306480]: Invalid user dvd from 125.25.202.55 port 37811 show less	Brute-Force
🇩🇪 ipcop.net	2023-08-12 20:48:24 (3 years ago)	Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port ... show more Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port 46097 Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Disconnected from invalid user sn 125.25.202.55 port 46097 [preauth] Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Invalid user esa from 125.25.202.55 port 56070 Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Disconnected from invalid user esa 125.25.202.55 port 56070 [preauth] Aug 12 22:48:22 temp-router-sip.merkur.local sshd[1306480]: Invalid user dvd from 125.25.202.55 port 37811 show less	Brute-Force
🇩🇪 ipcop.net	2023-08-12 20:48:24 (3 years ago)	Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port ... show more Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Invalid user sn from 125.25.202.55 port 46097 Aug 12 22:45:37 temp-router-sip.merkur.local sshd[1306182]: Disconnected from invalid user sn 125.25.202.55 port 46097 [preauth] Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Invalid user esa from 125.25.202.55 port 56070 Aug 12 22:46:54 temp-router-sip.merkur.local sshd[1306291]: Disconnected from invalid user esa 125.25.202.55 port 56070 [preauth] Aug 12 22:48:22 temp-router-sip.merkur.local sshd[1306480]: Invalid user dvd from 125.25.202.55 port 37811 show less	Brute-Force

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.165

🇨🇳 222.128.169.174

🇨🇳 220.196.191.58

🇬🇧 193.163.125.126

🇦🇷 153.67.183.3

🇮🇳 135.235.138.43

🇨🇳 118.145.115.134

🇨🇳 115.190.245.176

🇨🇳 112.94.253.96

🇺🇸 91.230.168.231

🇷🇺 87.117.48.35

🇺🇸 52.26.129.107

🇺🇸 34.187.222.241

🇺🇸 34.138.218.150

🇺🇸 34.50.179.214

🇮🇳 20.193.141.133

🇺🇸 2607:f8b0:400e:c07::12d

🇨🇳 220.202.112.101

🇧🇷 186.233.207.79

🇳🇱 185.93.89.167