JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.66.125.199

125.66.125.199 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Hostname(s)	199.125.66.125.broad.zg.sc.dynamic.163data.com.cn
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Zigong, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.66.125.199

Whois 125.66.125.199

IP Abuse Reports for 125.66.125.199:

This IP address has been reported a total of 128 times from 98 distinct sources. 125.66.125.199 was first reported on March 16th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:04:29 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-24 20:12:15 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-23 23:26:08 (3 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-23 20:12:13 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇦🇹 urnilxfgbez	2026-03-21 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 SpaceHost-Server	2026-03-21 23:28:50 (3 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-21 20:12:11 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2026-03-21 17:20:16 (3 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇮🇪 AutosOnShow	2026-03-21 16:33:05 (3 months ago)	blocked for webapp attack \| path requested: / \| seen at 2026-03-21 16:32:16.072 \|	Web App Attack
🇦🇺 CalmBrain	2026-03-21 16:03:54 (3 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-42013	Web App Attack Hacking
🇺🇸 aboschke	2026-03-21 16:00:20 (3 months ago)	SSH brute force attempt. Tried invalid user: orangepi	Brute-Force SSH
🇺🇸 pixiekat	2026-03-21 15:08:58 (3 months ago)	[Sat Mar 21 15:08:55.170787 2026] [authz_core:error] [pid 543929:tid 543934] [client 125.66.125.199: ... show more [Sat Mar 21 15:08:55.170787 2026] [authz_core:error] [pid 543929:tid 543934] [client 125.66.125.199:57122] AH01630: client denied by server configuration: /var/www/html/hello.world [Sat Mar 21 15:08:56.095195 2026] [authz_core:error] [pid 543929:tid 543932] [client 125.66.125.199:57122] AH01630: client denied by server configuration: /var/www/html/ [Sat Mar 21 15:08:56.484047 2026] [authz_core:error] [pid 543929:tid 543954] [client 125.66.125.199:57122] AH01630: client denied by server configuration: /var/www/html/vendor [Sat Mar 21 15:08:57.604914 2026] [authz_core:error] [pid 543929:tid 543935] [client 125.66.125.199:57122] AH01630: client denied by server configuration: /var/www/html/vendor [Sat Mar 21 15:08:57.990885 2026] [authz_core:error] [pid 543929:tid 543937] [client 125.66.125.199:57122] AH01630: client denied by server configuration: /var/www/html/vendor ... show less	Brute-Force
🇭🇰 1stDim.org	2026-03-21 10:48:57 (3 months ago)	Mar 21 18:48:15 pve-hkg1 sshd[2852662]: Invalid user orangepi from 125.66.125.199 port 59880 Mar 21 ... show more Mar 21 18:48:15 pve-hkg1 sshd[2852662]: Invalid user orangepi from 125.66.125.199 port 59880 Mar 21 18:48:15 pve-hkg1 sshd[2852662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.66.125.199 Mar 21 18:48:17 pve-hkg1 sshd[2852662]: Failed password for invalid user orangepi from 125.66.125.199 port 59880 ssh2 Mar 21 18:48:55 pve-hkg1 sshd[2857353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.66.125.199 user=root Mar 21 18:48:57 pve-hkg1 sshd[2857353]: Failed password for root from 125.66.125.199 port 59826 ssh2 ... show less	Brute-Force SSH
🇺🇸 juguemosalacarioca.com	2026-03-21 09:53:45 (3 months ago)	(sshd) Failed SSH login from 125.66.125.199 (CN/China/199.125.66.125.broad.zg.sc.dynamic.163data.com ... show more (sshd) Failed SSH login from 125.66.125.199 (CN/China/199.125.66.125.broad.zg.sc.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 21 09:46:36 arachne sshd[19528]: Invalid user admin from 125.66.125.199 port 51996 Mar 21 09:47:20 arachne sshd[19940]: Invalid user orangepi from 125.66.125.199 port 37650 Mar 21 09:51:39 arachne sshd[21173]: Invalid user test from 125.66.125.199 port 40050 Mar 21 09:52:14 arachne sshd[21316]: Invalid user user from 125.66.125.199 port 39758 Mar 21 09:53:41 arachne sshd[21722]: Invalid user admin from 125.66.125.199 port 48470 show less	Port Scan
🇺🇸 RAP	2026-03-21 08:49:32 (3 months ago)	2026-03-21 08:49:32 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.38

🇺🇸 147.185.132.111

🇬🇧 35.203.210.35

🇧🇪 35.189.213.181

🇰🇷 221.163.5.228

🇬🇧 185.216.145.165

🇺🇸 137.184.139.196

🇨🇳 122.114.113.177

🇩🇪 69.5.169.160

🇸🇪 20.240.51.74

🇻🇳 14.225.7.70

🇺🇸 216.25.89.77

🇲🇽 187.216.224.85

🇻🇳 152.32.162.142

🇨🇳 123.120.163.71

🇮🇳 66.116.205.19

🇳🇱 50.7.233.211

🇩🇪 47.254.173.90

🇸🇬 47.128.61.222

🇺🇸 205.210.31.56