JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.39.148.106

125.39.148.106 was found in our database!

This IP was reported 703 times. Confidence of Abuse is 100%: ?

100%

ISP	Tianjin Youji Science Technology Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	no-data
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.39.148.106

Whois 125.39.148.106

IP Abuse Reports for 125.39.148.106:

This IP address has been reported a total of 703 times from 342 distinct sources. 125.39.148.106 was first reported on April 10th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 KIsmay	2026-04-13 14:36:09 (1 month ago)	2026-04-13T07:35:54.663310-07:00 cohoe sshd[1771242]: Failed password for root from 125.39.148.106 p ... show more 2026-04-13T07:35:54.663310-07:00 cohoe sshd[1771242]: Failed password for root from 125.39.148.106 port 36772 ssh2 2026-04-13T07:35:58.946801-07:00 cohoe sshd[1771244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root 2026-04-13T07:36:01.226887-07:00 cohoe sshd[1771244]: Failed password for root from 125.39.148.106 port 36786 ssh2 2026-04-13T07:36:06.385451-07:00 cohoe sshd[1771250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root 2026-04-13T07:36:08.424244-07:00 cohoe sshd[1771250]: Failed password for root from 125.39.148.106 port 36794 ssh2 ... show less	Brute-Force SSH
🇨🇦 senkodev	2026-04-13 11:34:35 (1 month ago)	2026-04-13T11:34:34.208841Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 125.39.148.106:422 ... show more 2026-04-13T11:34:34.208841Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 125.39.148.106:42240 (158.69.22.11:2222) [session: d7f53322dd54] 2026-04-13T11:34:34.657174Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 125.39.148.106:42246 (158.69.22.11:2222) [session: 8c1ad5dcd2ce] ... show less	Brute-Force SSH
🇫🇷 SiyCah	2026-04-13 06:00:01 (1 month ago)	125.39.148.106 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more 125.39.148.106 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 276B. Report generated by Endlessh Report Generator v1.2.3 show less	Brute-Force Port Scan SSH Hacking
🇨🇦 zXero	2026-04-13 03:57:15 (1 month ago)	Fail2Ban automatic report - jail: geoip-ssh	Brute-Force SSH DDoS Attack
🇩🇪 ghostwarriors	2026-04-13 03:50:05 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇬🇧 gbzret4d	2026-04-13 01:51:39 (1 month ago)	Honeypot [uk-production01]: Empty payload (likely service probe); 22022 [1] TCP	Port Scan
🇨🇦 Largnet SOC	2026-04-13 01:48:53 (1 month ago)	125.39.148.106 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
Anonymous	2026-04-13 01:37:34 (1 month ago)	$f2bV_matches	Brute-Force SSH
🇰🇷 winter	2026-04-13 01:31:41 (1 month ago)	Connection attemp from 125.39.148.106 to port 22	Brute-Force SSH
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2026-04-13 00:12:14 (1 month ago)	2026-04-13T02:11:47.398327+02:00 www sshd[1650699]: Failed password for root from 125.39.148.106 por ... show more 2026-04-13T02:11:47.398327+02:00 www sshd[1650699]: Failed password for root from 125.39.148.106 port 48860 ssh2 2026-04-13T02:11:50.956443+02:00 www sshd[1650728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root 2026-04-13T02:11:52.735976+02:00 www sshd[1650728]: Failed password for root from 125.39.148.106 port 48872 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-12 18:50:18 (1 month ago)	(sshd) Failed SSH login from 125.39.148.106 (CN/China/no-data): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 125.39.148.106 (CN/China/no-data): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 12 13:49:27 15011 sshd[12257]: Did not receive identification string from 125.39.148.106 port 35910 Apr 12 13:49:54 15011 sshd[12258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root Apr 12 13:49:55 15011 sshd[12258]: Failed password for root from 125.39.148.106 port 35912 ssh2 Apr 12 13:50:02 15011 sshd[12270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.106 user=root Apr 12 13:50:04 15011 sshd[12270]: Failed password for root from 125.39.148.106 port 35988 ssh2 show less	Brute-Force SSH
🇫🇷 menibit	2026-04-12 18:28:25 (1 month ago)	[ks7-AI-SEC] SSH brute-force attack - 3 failed attempts from 125.39.148.106	Brute-Force SSH
🇫🇷 MisterXBest	2026-04-12 17:42:23 (1 month ago)	[BloumeGen Security] IP Access: 125.39.148.106. SSH brute-force login attempt. Target: Unknown. Path ... show more [BloumeGen Security] IP Access: 125.39.148.106. SSH brute-force login attempt. Target: Unknown. Paths: Multiple probes. Hits: 5 show less	Brute-Force SSH
🇫🇮 6kilowatti	2026-04-12 15:44:42 (1 month ago)	2026-04-12T18:44:41.638253+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:f ... show more 2026-04-12T18:44:41.638253+03:00 koti kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:bd:29:2d:18:fd:74:70:71:9e:08:00 SRC=125.39.148.106 DST=10.0.0.30 LEN=64 TOS=0x00 PREC=0x00 TTL=38 ID=40140 DF PROTO=TCP SPT=53272 DPT=22 WINDOW=502 RES=0x00 ACK PSH URGP=0 ... show less	Port Scan
🇧🇷 helix	2026-04-12 15:18:41 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH

Showing 676 to 690 of 703 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.254

🇹🇼 152.32.232.185

🇮🇳 117.248.21.20

🇳🇱 45.153.34.195

🇬🇧 31.14.254.116

🇪🇹 196.189.224.179

🇺🇸 165.154.206.223

🇷🇴 92.84.130.90

🇰🇷 59.26.193.177

🇩🇪 213.209.159.226

🇸🇬 129.227.75.98

🇺🇸 74.7.227.42

🇩🇪 51.75.149.221

🇹🇼 36.230.103.182

🇮🇩 36.88.180.115

🇺🇸 35.252.141.163

🇮🇩 182.3.9.130

🇫🇷 130.185.119.80

🇹🇼 104.199.176.250

🇨🇳 101.96.193.131