JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.31.29.226

125.31.29.226 was found in our database!

This IP was reported 108 times. Confidence of Abuse is 51%: ?

51%

ISP	CTM
Usage Type	Fixed Line ISP
ASN	AS4609
Hostname(s)	n12531z29l226.static.ctmip.net
Domain Name	ctm.com.mo
Country	🇲🇴 Macao
City	Macau

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.31.29.226

Whois 125.31.29.226

IP Abuse Reports for 125.31.29.226:

This IP address has been reported a total of 108 times from 83 distinct sources. 125.31.29.226 was first reported on August 20th 2024, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kemonos.net	2026-06-26 06:40:30 (11 hours ago)	2026-06-26T02:40:26.698834-04:00 raspberrypi sshd[1192020]: Invalid user admin from 125.31.29.226 po ... show more 2026-06-26T02:40:26.698834-04:00 raspberrypi sshd[1192020]: Invalid user admin from 125.31.29.226 port 59687 2026-06-26T02:40:29.070659-04:00 raspberrypi sshd[1192028]: Invalid user admin from 125.31.29.226 port 59728 2026-06-26T02:40:30.253324-04:00 raspberrypi sshd[1192034]: Invalid user user from 125.31.29.226 port 59755 ... show less	Brute-Force SSH
Anonymous	2026-06-26 06:24:08 (11 hours ago)	2026-06-26T02:24:02.384675-04:00 seraldthethird sshd[239946]: Invalid user admin from 125.31.29.226 ... show more 2026-06-26T02:24:02.384675-04:00 seraldthethird sshd[239946]: Invalid user admin from 125.31.29.226 port 57291 2026-06-26T02:24:05.250612-04:00 seraldthethird sshd[239952]: Invalid user admin from 125.31.29.226 port 57359 2026-06-26T02:24:06.669430-04:00 seraldthethird sshd[239954]: Invalid user user from 125.31.29.226 port 57394 ... show less	Brute-Force SSH
🇺🇸 NeverBehave	2026-06-26 03:29:58 (14 hours ago)	[fail2ban] service sshd jail	Brute-Force SSH
Anonymous	2026-06-24 14:46:46 (2 days ago)	$f2bV_matches	Brute-Force SSH
🇪🇸 bohl-aiG5aef	2026-06-15 04:50:37 (1 week ago)	2026-06-15T06:50:34.775515 gitlab00corp sshd[2412812]: User root from 125.31.29.226 not allowed beca ... show more 2026-06-15T06:50:34.775515 gitlab00corp sshd[2412812]: User root from 125.31.29.226 not allowed because none of user's groups are listed in AllowGroups 2026-06-15T06:50:35.210984 gitlab00corp sshd[2412829]: Connection from 125.31.29.226 port 50782 on 10.100.88.177 port 22 2026-06-15T06:50:36.315486 gitlab00corp sshd[2412829]: Invalid user admin from 125.31.29.226 port 50782 ... show less	Brute-Force SSH
🇫🇷 LRob.fr	2026-06-13 03:30:03 (1 week ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇫🇷 EDSL	2026-06-13 01:09:44 (1 week ago)	[SRV-VPN1] Blocked by SysWarden Firewall (SMB/Possible Ransomware Attack)	Brute-Force Port Scan Hacking
🇳🇱 knock	2026-05-25 19:09:23 (1 month ago)	Knock-Knock honeypot brute-force: SSH, SMB (370 total hits)	Brute-Force SSH
🇳🇱 wolfemium	2026-05-25 09:22:05 (1 month ago)	2026-05-25T12:22:01.599129+03:00 wolfemium.cloud sshd-session[1621577]: Failed password for invalid ... show more 2026-05-25T12:22:01.599129+03:00 wolfemium.cloud sshd-session[1621577]: Failed password for invalid user admin from 125.31.29.226 port 62585 ssh2 2026-05-25T12:22:02.830120+03:00 wolfemium.cloud sshd-session[1621582]: Invalid user admin from 125.31.29.226 port 62720 2026-05-25T12:22:01.113720+03:00 wolfemium.cloud sshd-session[1621579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.31.29.226 user=root 2026-05-25T12:22:03.207726+03:00 wolfemium.cloud sshd-session[1621579]: Failed password for root from 125.31.29.226 port 62650 ssh2 2026-05-25T12:22:04.552615+03:00 wolfemium.cloud sshd-session[1621584]: Invalid user user from 125.31.29.226 port 62785 ... show less	Brute-Force SSH
🇩🇪 jjjjj	2026-05-20 20:11:56 (1 month ago)	ssh fail2ban: 2026-05-20 22:11:49 +02:00 conn closed by, port=55266 [preauth] 2026-05-20 22:11:52 +0 ... show more ssh fail2ban: 2026-05-20 22:11:49 +02:00 conn closed by, port=55266 [preauth] 2026-05-20 22:11:52 +02:00 Invalid user admin, port=55294 2026-05-20 22:11:52 +02:00 auth fail: user unspecified 2026-05-20 22:11:54 +02:00 wrong password: user=admin, port=55294 2026-05-20 22:11:55 +02:00 disconnect invalid: user=admin, port=55294 [preauth] 2026-05-20 22:11:56 +02:00 Invalid user admin, port=55346 (automated) show less	Brute-Force SSH
🇨🇦 Largnet SOC	2026-05-03 12:32:58 (1 month ago)	125.31.29.226 triggered Icarus honeypot on port 445. Check us out on github.	Port Scan Hacking
🇨🇳 ThreatBook.io	2026-04-28 23:09:53 (1 month ago)	ThreatBook Intelligence: iot_device,Gateway more details on https://threatbook.io/ip/125.31.29.226	SSH
🇨🇳 ThreatBook.io	2026-04-23 22:54:36 (2 months ago)	ThreatBook Intelligence: iot_device,Gateway more details on https://threatbook.io/ip/125.31.29.226	Brute-Force
Anonymous	2026-04-22 03:52:56 (2 months ago)	$f2bV_matches	Brute-Force SSH
🇧🇷 ItsClairton	2026-04-16 13:32:25 (2 months ago)	Apr 16 10:32:19 proxy-03 sshd[1854224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Apr 16 10:32:19 proxy-03 sshd[1854224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.31.29.226 user=root Apr 16 10:32:21 proxy-03 sshd[1854224]: Failed password for root from 125.31.29.226 port 57797 ssh2 Apr 16 10:32:22 proxy-03 sshd[1854252]: Invalid user admin from 125.31.29.226 port 57874 Apr 16 10:32:22 proxy-03 sshd[1854252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.31.29.226 Apr 16 10:32:24 proxy-03 sshd[1854252]: Failed password for invalid user admin from 125.31.29.226 port 57874 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.242.222

🇳🇱 172.211.56.214

🇮🇶 169.224.20.153

🇳🇱 94.102.49.125

🇨🇦 85.217.149.10

🇨🇳 42.234.197.101

🇬🇧 31.14.254.89

🇧🇷 200.196.50.91

🇬🇧 198.244.226.88

🇵🇰 154.192.12.89

🇺🇸 23.234.76.108

🇸🇪 20.240.242.146

🇺🇸 20.127.245.101

🇮🇳 168.144.115.253

🇺🇸 162.216.150.168

🇫🇷 143.244.57.84

🇰🇷 125.136.45.208

🇮🇩 103.157.26.188

🇻🇳 14.248.82.157

🇪🇪 5.101.120.25