This IP address has been reported a total of
41
times from
25 distinct
sources.
125.253.56.119 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Rule : PLESK BOT
2026-06-02 02:25:45 Unauthorized login attempt to Plesk Panel from IP 125.253.56.11 ...
show moreRule : PLESK BOT
2026-06-02 02:25:45 Unauthorized login attempt to Plesk Panel from IP 125.253.56.119 with username admin
show less
Suricata IDS: 4 alerts in 15min. [2] ET TOR Known Tor Exit Node Traffic group 12; [2] ET TOR Known T ...
show moreSuricata IDS: 4 alerts in 15min. [2] ET TOR Known Tor Exit Node Traffic group 12; [2] ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 12;
show less
2026-05-24T02:07:13.456925+03:00 kotiacat.nexus sshd-session[8400]: Invalid user admin from 125.253. ...
show more2026-05-24T02:07:13.456925+03:00 kotiacat.nexus sshd-session[8400]: Invalid user admin from 125.253.56.119 port 57688
...
show less
Brute-Force
SSH
Anonymous
2026-05-05 19:00:08,963 fail2ban.actions [3625835]: NOTICE [tor] Ban 125.253.56.119
2026-05- ...
show more2026-05-05 19:00:08,963 fail2ban.actions [3625835]: NOTICE [tor] Ban 125.253.56.119
2026-05-05 22:00:06,254 fail2ban.actions [3625835]: NOTICE [tor] Ban 125.253.56.119
2026-05-06 01:00:05,259 fail2ban.actions [3625835]: NOTICE [tor] Ban 125.253.56.119
2026-05-06 04:00:11,583 fail2ban.actions [3625835]: NOTICE [tor] Ban 125.253.56.119
2026-05-06 07:00:19,222 fail2ban.actions [3625835]: NOTICE [tor] Ban 125.253.56.119
show less
Brute-Force
Anonymous
2026-04-24 12:00:06,998 fail2ban.actions [7718]: NOTICE [tor] Ban 125.253.56.119
2026-04-24 ...
show more2026-04-24 12:00:06,998 fail2ban.actions [7718]: NOTICE [tor] Ban 125.253.56.119
2026-04-24 15:00:06,926 fail2ban.actions [7718]: NOTICE [tor] Ban 125.253.56.119
2026-04-24 18:00:06,830 fail2ban.actions [7718]: NOTICE [tor] Ban 125.253.56.119
2026-04-24 21:00:17,765 fail2ban.actions [7718]: NOTICE [tor] Ban 125.253.56.119
2026-04-25 00:00:31,898 fail2ban.actions [7718]: NOTICE [tor] Ban 125.253.56.119
show less
Triggered Cloudflare WAF from AU.
Action taken: BLOCK
ASN: 38195 (SUPERLOOP-AS-AP Superloop)
Protoco ...
show moreTriggered Cloudflare WAF from AU.
Action taken: BLOCK
ASN: 38195 (SUPERLOOP-AS-AP Superloop)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-02-24T19:17:44Z
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Mobile/15E148 Safari/604.1
show less
ban-reviewer auto report; ip=125.253.56.119; scenario=http:exploit; verdict=valid_ban; confidence=0. ...
show moreban-reviewer auto report; ip=125.253.56.119; scenario=http:exploit; verdict=valid_ban; confidence=0.90; categories=14,15,18; active_decisions=2; lookback_decisions=2; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP exploit scenario; Active decisions count of 2 in lookback window; Decision duration of 7620 minutes (127 hours) indicates sustained threat
show less
Port Scan
Hacking
Brute-Force
Anonymous
Feb 18 21:59:49 f2b auth.info sshd[6875]: Invalid user openhab from 125.253.56.119 port 37054
Feb 18 ...
show moreFeb 18 21:59:49 f2b auth.info sshd[6875]: Invalid user openhab from 125.253.56.119 port 37054
Feb 18 21:59:50 f2b auth.info sshd[6875]: Failed password for invalid user openhab from 125.253.56.119 port 37054 ssh2
Feb 18 21:59:51 f2b auth.info sshd[6875]: Disconnected from invalid user openhab 125.253.56.119 port 37054 [preauth]
...
show less
Blocked by UFW (TCP on 9050)
Source port: 39726
TTL: 51
Packet length: 60
TOS: 0x08
This report (fo ...
show moreBlocked by UFW (TCP on 9050)
Source port: 39726
TTL: 51
Packet length: 60
TOS: 0x08
This report (for 125.253.56.119) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 16322)
Source port: 52904
TTL: 51
Packet length: 60
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 16322)
Source port: 52904
TTL: 51
Packet length: 60
TOS: 0x08
This report (for 125.253.56.119) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
15
of 41 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
