JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.39.148.201

125.39.148.201 was found in our database!

This IP was reported 120 times. Confidence of Abuse is 0%: ?

ISP	Tianjin Youji Science Technology Co., Ltd.
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	no-data
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Tianjin, Tianjin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.39.148.201

Whois 125.39.148.201

IP Abuse Reports for 125.39.148.201:

This IP address has been reported a total of 120 times from 79 distinct sources. 125.39.148.201 was first reported on March 17th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 jonathanselea.se	2026-05-13 07:17:08 (1 month ago)	$f2bV_matches	SSH
🇮🇳 evicky2002	2026-04-30 13:02:46 (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 netup.at	2026-04-22 04:14:36 (2 months ago)	IP 125.39.148.201 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇧🇷 helix	2026-04-09 06:10:33 (2 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇩🇪 netup.at	2026-04-09 04:10:08 (2 months ago)	IP 125.39.148.201 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-30 20:12:19 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-28 20:12:18 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇦 senkodev	2026-03-28 18:22:03 (3 months ago)	2026-03-28T18:22:02.310327Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 125.39.148.201:358 ... show more 2026-03-28T18:22:02.310327Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 125.39.148.201:35842 (158.69.22.11:2222) [session: 6f4dc500e05a] 2026-03-28T18:22:02.842933Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 125.39.148.201:36772 (158.69.22.11:2222) [session: 74b48c7db708] ... show less	Brute-Force SSH
🇰🇷 hanb.jp	2026-03-28 18:12:02 (3 months ago)	Mar 28 18:11:58 v4bgp sshd[3436255]: Failed password for root from 125.39.148.201 port 52794 ssh2 Ma ... show more Mar 28 18:11:58 v4bgp sshd[3436255]: Failed password for root from 125.39.148.201 port 52794 ssh2 Mar 28 18:12:00 v4bgp sshd[3436257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.201 user=root Mar 28 18:12:02 v4bgp sshd[3436257]: Failed password for root from 125.39.148.201 port 55940 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-03-28 08:50:33 (3 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 bigscoots.com	2026-03-28 08:11:49 (3 months ago)	125.39.148.201 (CN/China/no-data), 6 distributed sshd attacks on account [root] in the last 3600 sec ... show more 125.39.148.201 (CN/China/no-data), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 28 03:11:38 15172 sshd[9901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.201 user=root Mar 28 02:52:30 15172 sshd[5876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.123.249.114 user=root Mar 28 02:46:38 15172 sshd[4653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.123.249.114 user=root Mar 28 02:46:39 15172 sshd[4653]: Failed password for root from 39.123.249.114 port 37794 ssh2 Mar 28 02:39:05 15172 sshd[3102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.123.249.114 user=root Mar 28 02:39:07 15172 sshd[3102]: Failed password for root from 39.123.249.114 port 38768 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇫🇮 misfit	2026-03-28 04:36:10 (3 months ago)	SSH brute-force (3 attempts). Org: AS4837 CHINA UNICOM China169 Backbone, Tianjin, CN.	Brute-Force SSH
🇺🇸 octageeks.com	2026-03-28 04:10:04 (3 months ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇰🇷 Woodie	2026-03-28 02:22:56 (3 months ago)	2026-03-27T21:22:52.827713-05:00 debian sshd[3610489]: Failed password for root from 125.39.148.201 ... show more 2026-03-27T21:22:52.827713-05:00 debian sshd[3610489]: Failed password for root from 125.39.148.201 port 43656 ssh2 2026-03-27T21:22:52.076940-05:00 debian sshd[3610617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.201 user=root 2026-03-27T21:22:54.726450-05:00 debian sshd[3610617]: Failed password for root from 125.39.148.201 port 54510 ssh2 2026-03-27T21:22:54.586125-05:00 debian sshd[3610622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.201 user=root 2026-03-27T21:22:55.846087-05:00 debian sshd[3610622]: Failed password for root from 125.39.148.201 port 60474 ssh2 ... show less	Brute-Force SSH
🇺🇸 Ukn0w1t	2026-03-28 00:25:41 (3 months ago)	2026-03-28T00:25:32.339011+00:00 edge-mini sshd[135504]: Failed password for root from 125.39.148.20 ... show more 2026-03-28T00:25:32.339011+00:00 edge-mini sshd[135504]: Failed password for root from 125.39.148.201 port 46058 ssh2 2026-03-28T00:25:39.143839+00:00 edge-mini sshd[135506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.39.148.201 user=root 2026-03-28T00:25:40.620591+00:00 edge-mini sshd[135506]: Failed password for root from 125.39.148.201 port 49686 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.107

🇩🇪 164.90.236.201

🇻🇳 160.191.87.31

🇫🇷 91.231.89.83

🇸🇪 83.255.209.245

🇳🇱 45.148.10.183

🇳🇱 45.148.10.151

🇳🇱 213.21.248.107

🇺🇸 207.145.12.160

🇧🇷 200.141.47.190

🇩🇪 185.242.3.195

🇬🇧 144.126.203.24

🇰🇷 121.132.27.238

🇫🇷 85.217.140.48

🇺🇸 66.132.186.198

🇺🇸 66.132.186.130

🇫🇮 2a00:1450:4010:c20::12c

🇦🇷 181.104.2.87

🇺🇸 165.22.134.78

🇮🇳 152.58.138.51