This IP address has been reported a total of
704
times from
342 distinct
sources.
125.39.148.106 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Apr 18 03:31:27 smtp sshd[354220]: Failed password for invalid user root from 125.39.148.106 port 42 ...
show moreApr 18 03:31:27 smtp sshd[354220]: Failed password for invalid user root from 125.39.148.106 port 42856 ssh2
...
show less
Apr 17 11:06:31 node1 sshd[3955620]: Failed password for root from 125.39.148.106 port 52872 ssh2
Ap ...
show moreApr 17 11:06:31 node1 sshd[3955620]: Failed password for root from 125.39.148.106 port 52872 ssh2
Apr 17 11:06:34 node1 sshd[3958243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root
Apr 17 11:06:36 node1 sshd[3958243]: Failed password for root from 125.39.148.106 port 52884 ssh2
...
show less
2026-04-17T07:23:36.788118+01:00 nbg-vs01-mailserver sshd-session[3917874]: Failed password for root ...
show more2026-04-17T07:23:36.788118+01:00 nbg-vs01-mailserver sshd-session[3917874]: Failed password for root from 125.39.148.106 port 36768 ssh2
2026-04-17T07:23:40.557019+01:00 nbg-vs01-mailserver sshd-session[3917933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root
2026-04-17T07:23:43.264434+01:00 nbg-vs01-mailserver sshd-session[3917933]: Failed password for root from 125.39.148.106 port 36778 ssh2
...
show less
125.39.148.106 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more125.39.148.106 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 276B. Report generated by Endlessh Report Generator v1.2.3
show less
2026-04-17T03:21:14.126626+00:00 aws sshd[270308]: Failed password for invalid user root from 125.39 ...
show more2026-04-17T03:21:14.126626+00:00 aws sshd[270308]: Failed password for invalid user root from 125.39.148.106 port 59668 ssh2
2026-04-17T03:21:18.434293+00:00 aws sshd[270318]: User root from 125.39.148.106 not allowed because not listed in AllowUsers
2026-04-17T03:21:18.919660+00:00 aws sshd[270318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root
2026-04-17T03:21:20.519345+00:00 aws sshd[270318]: Failed password for invalid user root from 125.39.148.106 port 59698 ssh2
...
show less
Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy ...
show moreReconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: P0f. Decoy listen port: 22220/tcp. Observed event time: 2026-04-17 01:03:23 UTC. Report from passive honeypot only; no payload or credentials included.
show less
Port Scan
Showing 631 to
645
of 704 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩