JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.39.141.143

125.39.141.143 was found in our database!

This IP was reported 520 times. Confidence of Abuse is 62%: ?

62%

ISP	China Unicom Tianjin province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	no-data
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.39.141.143

Whois 125.39.141.143

IP Abuse Reports for 125.39.141.143:

This IP address has been reported a total of 520 times from 100 distinct sources. 125.39.141.143 was first reported on May 7th 2025, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-13 05:59:44 (17 hours ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
🇨🇳 Indexyz	2026-07-11 10:36:20 (2 days ago)	2026-07-11T18:35:06.762883+08:00 hostname sshd-session[1496582]: Invalid user albert from 125.39.1 ... show more 2026-07-11T18:35:06.762883+08:00 hostname sshd-session[1496582]: Invalid user albert from 125.39.141.143 port 51774 2026-07-11T18:35:41.728141+08:00 hostname sshd-session[1496627]: Connection from 125.39.141.143 port 45808 on 10.89.160.7 port 22 rdomain "" 2026-07-11T18:35:41.810145+08:00 hostname sshd-session[1496627]: Invalid user fangke from 125.39.141.143 port 45808 2026-07-11T18:36:18.907888+08:00 hostname sshd-session[1496716]: Connection from 125.39.141.143 port 58054 on 10.89.160.7 port 22 rdomain "" 2026-07-11T18:36:18.988323+08:00 hostname sshd-session[1496716]: Invalid user monery from 125.39.141.143 port 58054 show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-07-08 17:33:07 (5 days ago)	Jul 9 01:33:04 pbs sshd[751232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jul 9 01:33:04 pbs sshd[751232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.141.143 user=root Jul 9 01:33:05 pbs sshd[751232]: Failed password for root from 125.39.141.143 port 45982 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-07-07 16:07:56 (6 days ago)	2026-07-07T18:07:52.161106+02:00 gw2.wira-gmbh.de sshd[3867864]: Connection closed by authenticating ... show more 2026-07-07T18:07:52.161106+02:00 gw2.wira-gmbh.de sshd[3867864]: Connection closed by authenticating user root 125.39.141.143 port 39046 [preauth] 2026-07-07T18:07:53.490910+02:00 gw2.wira-gmbh.de sshd[3867866]: Connection closed by authenticating user root 125.39.141.143 port 39058 [preauth] 2026-07-07T18:07:54.656496+02:00 gw2.wira-gmbh.de sshd[3867870]: Connection closed by authenticating user root 125.39.141.143 port 39070 [preauth] 2026-07-07T18:07:55.508722+02:00 gw2.wira-gmbh.de sshd[3867872]: Connection closed by authenticating user root 125.39.141.143 port 39076 [preauth] 2026-07-07T18:07:56.474163+02:00 gw2.wira-gmbh.de sshd[3867875]: Invalid user axe from 125.39.141.143 port 39088 show less	Brute-Force
🇩🇪 ipcop.net	2026-07-07 15:07:50 (6 days ago)	2026-07-07T17:07:48.405392+02:00 gw2.wira-gmbh.de sshd[3858968]: Connection closed by authenticating ... show more 2026-07-07T17:07:48.405392+02:00 gw2.wira-gmbh.de sshd[3858968]: Connection closed by authenticating user root 125.39.141.143 port 33084 [preauth] 2026-07-07T17:07:49.062791+02:00 gw2.wira-gmbh.de sshd[3858970]: Invalid user albert from 125.39.141.143 port 33096 2026-07-07T17:07:49.213576+02:00 gw2.wira-gmbh.de sshd[3858970]: Connection closed by invalid user albert 125.39.141.143 port 33096 [preauth] 2026-07-07T17:07:50.018780+02:00 gw2.wira-gmbh.de sshd[3858973]: Invalid user ADMIN from 125.39.141.143 port 33100 2026-07-07T17:07:50.172985+02:00 gw2.wira-gmbh.de sshd[3858973]: Connection closed by invalid user ADMIN 125.39.141.143 port 33100 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-07-06 06:25:13 (1 week ago)	2026-07-06T08:25:10.644585+02:00 router02.w-p-k.de sshd[3508007]: Connection closed by authenticatin ... show more 2026-07-06T08:25:10.644585+02:00 router02.w-p-k.de sshd[3508007]: Connection closed by authenticating user root 125.39.141.143 port 58842 [preauth] 2026-07-06T08:25:11.933893+02:00 router02.w-p-k.de sshd[3508010]: Invalid user albert from 125.39.141.143 port 58852 2026-07-06T08:25:12.182841+02:00 router02.w-p-k.de sshd[3508010]: Connection closed by invalid user albert 125.39.141.143 port 58852 [preauth] 2026-07-06T08:25:12.797723+02:00 router02.w-p-k.de sshd[3508012]: Invalid user ADMIN from 125.39.141.143 port 58866 2026-07-06T08:25:12.933104+02:00 router02.w-p-k.de sshd[3508012]: Connection closed by invalid user ADMIN 125.39.141.143 port 58866 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-07-02 16:41:20 (1 week ago)	2026-07-02T18:41:14.539099+02:00 guestgw-router01.remscheid.de sshd-session[3668579]: Connection clo ... show more 2026-07-02T18:41:14.539099+02:00 guestgw-router01.remscheid.de sshd-session[3668579]: Connection closed by authenticating user root 125.39.141.143 port 42324 [preauth] 2026-07-02T18:41:15.865196+02:00 guestgw-router01.remscheid.de sshd-session[3668583]: Connection closed by authenticating user root 125.39.141.143 port 42328 [preauth] 2026-07-02T18:41:16.590930+02:00 guestgw-router01.remscheid.de sshd-session[3668587]: Connection closed by authenticating user root 125.39.141.143 port 44700 [preauth] 2026-07-02T18:41:17.646619+02:00 guestgw-router01.remscheid.de sshd-session[3668592]: Connection closed by authenticating user root 125.39.141.143 port 44714 [preauth] 2026-07-02T18:41:18.283112+02:00 guestgw-router01.remscheid.de sshd-session[3668596]: Invalid user ops from 125.39.141.143 port 44720 show less	Brute-Force
🇩🇪 ipcop.net	2026-07-02 15:41:03 (1 week ago)	2026-07-02T17:41:01.188738+02:00 guestgw-router01.remscheid.de sshd-session[3659236]: Connection clo ... show more 2026-07-02T17:41:01.188738+02:00 guestgw-router01.remscheid.de sshd-session[3659236]: Connection closed by authenticating user root 125.39.141.143 port 36778 [preauth] 2026-07-02T17:41:01.800696+02:00 guestgw-router01.remscheid.de sshd-session[3659240]: Invalid user albert from 125.39.141.143 port 36798 2026-07-02T17:41:01.960247+02:00 guestgw-router01.remscheid.de sshd-session[3659240]: Connection closed by invalid user albert 125.39.141.143 port 36798 [preauth] 2026-07-02T17:41:02.595099+02:00 guestgw-router01.remscheid.de sshd-session[3659245]: Invalid user ADMIN from 125.39.141.143 port 36800 2026-07-02T17:41:02.760454+02:00 guestgw-router01.remscheid.de sshd-session[3659245]: Connection closed by invalid user ADMIN 125.39.141.143 port 36800 [preauth] show less	Brute-Force
🇨🇳 Indexyz	2026-07-01 05:35:28 (1 week ago)	2026-07-01T13:34:12.742326+08:00 hostname sshd-session[1227253]: Invalid user albert from 125.39.1 ... show more 2026-07-01T13:34:12.742326+08:00 hostname sshd-session[1227253]: Invalid user albert from 125.39.141.143 port 34134 2026-07-01T13:34:48.737164+08:00 hostname sshd-session[1227327]: Connection from 125.39.141.143 port 40122 on 10.89.160.7 port 22 rdomain "" 2026-07-01T13:34:48.821880+08:00 hostname sshd-session[1227327]: Invalid user fangke from 125.39.141.143 port 40122 2026-07-01T13:35:25.852242+08:00 hostname sshd-session[1227445]: Connection from 125.39.141.143 port 56564 on 10.89.160.7 port 22 rdomain "" 2026-07-01T13:35:25.940712+08:00 hostname sshd-session[1227445]: Invalid user monery from 125.39.141.143 port 56564 show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-06-30 17:03:00 (1 week ago)	2026-06-30T19:02:57.355116+02:00 router02.boersch-gmbh.de sshd[4129720]: Connection closed by authen ... show more 2026-06-30T19:02:57.355116+02:00 router02.boersch-gmbh.de sshd[4129720]: Connection closed by authenticating user root 125.39.141.143 port 48456 [preauth] 2026-06-30T19:02:58.009499+02:00 router02.boersch-gmbh.de sshd[4129723]: Invalid user albert from 125.39.141.143 port 48462 2026-06-30T19:02:58.155061+02:00 router02.boersch-gmbh.de sshd[4129723]: Connection closed by invalid user albert 125.39.141.143 port 48462 [preauth] 2026-06-30T19:02:59.488085+02:00 router02.boersch-gmbh.de sshd[4129725]: Invalid user ADMIN from 125.39.141.143 port 48470 2026-06-30T19:02:59.749281+02:00 router02.boersch-gmbh.de sshd[4129725]: Connection closed by invalid user ADMIN 125.39.141.143 port 48470 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-06-26 16:53:18 (2 weeks ago)	2026-06-26T18:53:13.964673+02:00 guestgw-router01.remscheid.de sshd-session[2303852]: Connection clo ... show more 2026-06-26T18:53:13.964673+02:00 guestgw-router01.remscheid.de sshd-session[2303852]: Connection closed by authenticating user root 125.39.141.143 port 59648 [preauth] 2026-06-26T18:53:15.276396+02:00 guestgw-router01.remscheid.de sshd-session[2303854]: Connection closed by authenticating user root 125.39.141.143 port 59650 [preauth] 2026-06-26T18:53:16.124082+02:00 guestgw-router01.remscheid.de sshd-session[2303860]: Invalid user curl from 125.39.141.143 port 59660 2026-06-26T18:53:16.330855+02:00 guestgw-router01.remscheid.de sshd-session[2303860]: Connection closed by invalid user curl 125.39.141.143 port 59660 [preauth] 2026-06-26T18:53:17.023753+02:00 guestgw-router01.remscheid.de sshd-session[2303864]: Connection closed by authenticating user root 125.39.141.143 port 57390 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-06-26 15:53:11 (2 weeks ago)	2026-06-26T17:53:08.419829+02:00 guestgw-router01.remscheid.de sshd-session[2294777]: Connection clo ... show more 2026-06-26T17:53:08.419829+02:00 guestgw-router01.remscheid.de sshd-session[2294777]: Connection closed by authenticating user root 125.39.141.143 port 33622 [preauth] 2026-06-26T17:53:09.078035+02:00 guestgw-router01.remscheid.de sshd-session[2294781]: Invalid user albert from 125.39.141.143 port 33630 2026-06-26T17:53:09.250611+02:00 guestgw-router01.remscheid.de sshd-session[2294781]: Connection closed by invalid user albert 125.39.141.143 port 33630 [preauth] 2026-06-26T17:53:10.075913+02:00 guestgw-router01.remscheid.de sshd-session[2294785]: Invalid user ADMIN from 125.39.141.143 port 33634 2026-06-26T17:53:10.279221+02:00 guestgw-router01.remscheid.de sshd-session[2294785]: Connection closed by invalid user ADMIN 125.39.141.143 port 33634 [preauth] show less	Brute-Force
🇯🇵 Indexyz	2026-06-25 13:04:08 (2 weeks ago)	2026-06-25T21:04:07.100756+08:00 hostname sshd-session[721037]: Invalid user albert from 125.39.14 ... show more 2026-06-25T21:04:07.100756+08:00 hostname sshd-session[721037]: Invalid user albert from 125.39.141.143 port 44338 2026-06-25T21:04:07.162532+08:00 hostname sshd-session[721039]: Connection from 125.39.141.143 port 44348 on 115.231.27.164 port 22 rdomain "" 2026-06-25T21:04:07.511921+08:00 hostname sshd-session[721039]: Invalid user taobao from 125.39.141.143 port 44348 2026-06-25T21:04:07.577727+08:00 hostname sshd-session[721041]: Connection from 125.39.141.143 port 44350 on 115.231.27.164 port 22 rdomain "" 2026-06-25T21:04:07.703965+08:00 hostname sshd-session[721041]: Invalid user sysadmin from 125.39.141.143 port 44350 show less	Brute-Force SSH
🇧🇷 ICS Labs	2026-06-22 15:58:07 (3 weeks ago)	ICS Labs identified 125.39.141.143 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇮🇳 evicky2002	2026-06-22 05:25:06 (3 weeks ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH

Showing 1 to 15 of 520 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.245

🇺🇸 147.185.132.106

🇻🇳 117.5.142.176

🇻🇳 103.200.25.198

🇩🇪 45.130.203.223

🇧🇷 205.210.31.251

🇧🇷 205.210.31.218

🇦🇷 181.116.220.251

🇮🇳 172.253.229.211

🇮🇩 103.191.14.210

🇲🇦 41.140.122.238

🇬🇧 35.203.210.70

🇺🇸 20.65.194.2

🇧🇷 179.97.29.18

🇺🇸 173.252.82.29

🇨🇴 129.222.203.2

🇺🇸 107.150.101.57

🇫🇮 77.105.130.18

🇺🇸 47.42.131.93

🇯🇴 37.202.114.254