JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.25.228.94

125.25.228.94 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 46%: ?

46%

ISP	TOT Public Company Limited Bangkok
Usage Type	Fixed Line ISP
ASN	AS23969
Hostname(s)	node-193y.pool-125-25.dynamic.nt-isp.net
Domain Name	totisp.net
Country	🇹🇭 Thailand
City	Phitsanulok, Phitsanulok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.25.228.94

Whois 125.25.228.94

IP Abuse Reports for 125.25.228.94:

This IP address has been reported a total of 46 times from 22 distinct sources. 125.25.228.94 was first reported on March 26th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-07-16 19:31:39 (3 days ago)	2026-07-16 19:31:39 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇯🇵 jay hung	2026-07-15 18:42:07 (4 days ago)	2026-07-15T18:42:06.339741+00:00 quarktech kernel: [2785586.732880] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-15T18:42:06.339741+00:00 quarktech kernel: [2785586.732880] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=125.25.228.94 DST=172.237.20.248 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=12874 DF PROTO=TCP SPT=35183 DPT=23 WINDOW=14380 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 sefinek.net	2026-07-15 18:26:04 (4 days ago)	Blocked by UFW on NY01 [23/tcp] \| SPT: 45016 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on NY01 [23/tcp] \| SPT: 45016 \| TTL: 45 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
Anonymous	2026-07-15 14:42:54 (4 days ago)	Unauthorized access (23/tcp/telnet) Targeted IoT device:Unknown (Probability:High)	Port Scan IoT Targeted
🇺🇸 pcprincipal8752	2026-07-15 13:02:00 (4 days ago)	NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| ... show more NULLPOT TELNET HONEYPOT · SESSION REPORT: 1) enable \| 2) system \| 3) shell \| 4) sh \| 5) linuxshell \| 6) ping ;sh \| 7) /bin/busybox \| 8) iptables -F \| 9) /bin/busybox echo > /tmp/.fxcat && sh /tmp/.fxcat && cd /tmp/ \| 10) /bin/busybox echo > /var/.fxcat && sh /var/.fxcat && cd /var/ \| 11) /bin/busybox echo > /var/run/.fxcat && sh /var/run/.fxcat && cd /var/run/ \| 12) /bin/busybox echo > /var/tmp/.fxcat && sh /var/tmp/.fxcat && cd /var/tmp/ \| 13) /bin/busybox echo > /dev/.fxcat && sh /dev/.fxcat && cd /dev/ \| 14) /bin/busybox echo > /dev/shm/.fxcat && sh /dev/shm/.fxcat && cd /dev/shm/ \| 15) /bin/busybox echo > /etc/.fxcat && sh /etc/.fxcat && cd /etc/ \| 16) /bin/busybox echo > /mnt/.fxcat && sh /mnt/.fxcat && cd /mnt/ \| 17) /bin/busybox echo > /usr/.fxcat && sh /usr/.fxcat && cd /usr/ \| 18) /bin/busybox echo > /boot/.fxcat && sh /boot/.fxcat && cd /boot/ \| 19) /bin/busybox echo > /home/.fxcat && sh /home/.fxcat && cd /home/ \| 20) for pid in /proc/[0-9]; do pid_num="${pid##/}"; if [ -r "$pid/maps" ]; then sus show less	Brute-Force
Anonymous	2026-07-15 12:11:57 (4 days ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 RAP	2026-07-15 08:29:45 (5 days ago)	2026-07-15 08:29:45 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇵🇱 mkey	2026-07-15 07:30:02 (5 days ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-07-15 09:24:59 \| LAST=2026-07-15 09:25:00. Last seen 2026-07-15 09:25:00. show less	Port Scan
🇹🇷 rtbh.com.tr	2025-12-13 20:10:26 (7 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇺🇸 RAP	2025-12-13 12:37:36 (7 months ago)	2025-12-13 12:37:36 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 RAP	2025-12-10 10:38:12 (7 months ago)	2025-12-10 10:38:12 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇹🇷 rtbh.com.tr	2025-12-10 00:10:22 (7 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇫🇷 security.rdmc.fr	2025-12-10 00:04:37 (7 months ago)	Port Scan Attack proto:TCP src:50838 dst:23	Port Scan
Anonymous	2025-12-02 06:49:41 (7 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 MPL	2025-12-02 01:58:11 (7 months ago)	tcp/23 (2 or more attempts)	Port Scan

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 201.249.192.30

🇨🇷 190.112.222.22

🇮🇳 106.222.230.78

🇳🇱 195.178.110.217

🇷🇺 195.88.120.62

🇸🇪 194.71.103.104

🇳🇱 185.226.197.28

🇸🇪 171.25.158.24

🇺🇸 147.185.132.77

🇫🇷 146.70.194.230

🇨🇳 121.46.250.155

🇸🇬 101.47.27.73

🇺🇸 74.125.40.87

🇬🇧 5.252.83.16

🇸🇬 198.46.163.56

🇵🇱 176.53.159.198

🇨🇦 139.177.196.132

🇧🇷 138.99.116.214

🇱🇹 81.30.98.26

🇻🇳 45.117.83.212