JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.39.148.106

125.39.148.106 was found in our database!

This IP was reported 704 times. Confidence of Abuse is 100%: ?

100%

ISP	Tianjin Youji Science Technology Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	no-data
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.39.148.106

Whois 125.39.148.106

IP Abuse Reports for 125.39.148.106:

This IP address has been reported a total of 704 times from 342 distinct sources. 125.39.148.106 was first reported on April 10th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 mkaraki	2026-04-27 22:40:49 (1 month ago)	1777329644 # Service_probe # SIGNATURE_SEND # source_ip:125.39.148.106 # dst_port:22 ...	Port Scan
🇺🇸 z3rg	2026-04-27 22:27:13 (1 month ago)	2026-04-27T22:27:05.877559+00:00 ubuntu sshd[4014333]: Failed password for root from 125.39.148.106 ... show more 2026-04-27T22:27:05.877559+00:00 ubuntu sshd[4014333]: Failed password for root from 125.39.148.106 port 36824 ssh2 2026-04-27T22:27:10.040767+00:00 ubuntu sshd[4014335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root 2026-04-27T22:27:12.248724+00:00 ubuntu sshd[4014335]: Failed password for root from 125.39.148.106 port 36838 ssh2 ... show less	Brute-Force SSH
🇵🇱 sefinek.net	2026-04-27 21:07:47 (1 month ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:---fuck_you----, root:root12 ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:---fuck_you----, root:root123456, root:h3c.com! • Number of login attempts: 3 • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force SSH
🇩🇪 Gregor Makdac	2026-04-27 17:13:25 (1 month ago)	-Hetzner-F2B blocked SSH BF-	Brute-Force SSH
🇳🇴 thorn5011	2026-04-27 15:20:00 (1 month ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-04-27T15:19:55Z and 2026-04-2 ... show more Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-04-27T15:19:55Z and 2026-04-27T15:20:00Z show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-27 10:20:31 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 PP-VTNK	2026-04-27 04:15:35 (1 month ago)	2026-04-27T06:15:34.735304+02:00 vatnik sshd[617508]: error: kex_exchange_identification: Connection ... show more 2026-04-27T06:15:34.735304+02:00 vatnik sshd[617508]: error: kex_exchange_identification: Connection closed by remote host 2026-04-27T06:15:34.735366+02:00 vatnik sshd[617508]: Connection closed by 125.39.148.106 port 39300 ... show less	Hacking Brute-Force SSH
🇩🇪 on1x.cloud	2026-04-27 00:09:51 (1 month ago)	[on1x.cloud] SSH-Multi login Attempt	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-26 23:01:42 (1 month ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/125.39.148.106 202 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/125.39.148.106 2026-04-26 04:15:22 ["uname -s -m"] show less	Brute-Force
🇫🇷 otiima	2026-04-26 07:24:37 (1 month ago)	Apr 26 08:24:29 box sshd[917506]: Failed password for root from 125.39.148.106 port 51468 ssh2 Apr 2 ... show more Apr 26 08:24:29 box sshd[917506]: Failed password for root from 125.39.148.106 port 51468 ssh2 Apr 26 08:24:35 box sshd[917547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root Apr 26 08:24:37 box sshd[917547]: Failed password for root from 125.39.148.106 port 51488 ssh2 ... show less	Brute-Force SSH
🇸🇪 bing	2026-04-26 02:41:53 (1 month ago)	2026-04-26T03:41:50.963388+01:00 Sweden sshd-session[693816]: pam_unix(sshd:auth): authentication fa ... show more 2026-04-26T03:41:50.963388+01:00 Sweden sshd-session[693816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root 2026-04-26T03:41:52.670519+01:00 Sweden sshd-session[693816]: Failed password for root from 125.39.148.106 port 34560 ssh2 ... show less	Brute-Force SSH
🇵🇱 Kitki30.com	2026-04-26 02:03:22 (1 month ago)	Entered SSH Tarpit (endlessh). Log: 2026-04-26T02:03:21.117Z ACCEPT host=::ffff:125.39.148.106 port= ... show more Entered SSH Tarpit (endlessh). Log: 2026-04-26T02:03:21.117Z ACCEPT host=::ffff:125.39.148.106 port=42866 fd=5 n=2/4096 show less	Brute-Force SSH Port Scan
🇺🇸 mc4bbs	2026-04-25 19:24:44 (1 month ago)	Apr 25 15:24:41 ChazTelPlex sshd[211659]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Apr 25 15:24:41 ChazTelPlex sshd[211659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root Apr 25 15:24:43 ChazTelPlex sshd[211659]: Failed password for root from 125.39.148.106 port 40832 ssh2 ... show less	Brute-Force SSH
🇺🇸 rscott.us	2026-04-25 17:00:13 (1 month ago)	Brute force SSH login attempts.	Brute-Force SSH
🇳🇱 soverin	2026-04-25 06:58:41 (1 month ago)	Network scan on port 22	Email Spam

Showing 556 to 570 of 704 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 37.77.150.241

🇨🇳 220.202.112.178

🇻🇳 171.231.188.52

🇻🇳 115.84.183.240

🇨🇳 106.117.114.54

🇫🇷 91.231.89.138

🇩🇪 69.5.169.162

🇩🇪 69.5.169.85

🇨🇳 218.66.22.202

🇮🇹 172.235.235.248

🇺🇸 162.216.150.154

🇪🇬 154.182.245.159

🇪🇬 144.123.77.27

🇺🇸 18.116.60.76

🇬🇧 206.189.120.50

🇨🇳 171.211.85.166

🇨🇳 123.207.99.233

🇨🇳 117.172.64.102

🇻🇳 103.200.25.79

🇩🇪 102.220.160.137