AbuseIPDB » 125.74.48.7

125.74.48.7 was found in our database!

This IP was reported 1,059 times. Confidence of Abuse is 79%: ?

79%

ISP	CHINANET Gansu province network
Usage Type	Fixed Line ISP
Domain Name	chinatelecom.cn
Country	China
City	Lanzhou, Gansu

Report 125.74.48.7

Whois 125.74.48.7

IP Abuse Reports for 125.74.48.7:

This IP address has been reported a total of 1,059 times from 502 distinct sources. 125.74.48.7 was first reported on September 19th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Hessfr	2024-10-25 23:27:55 (1 month ago)	Oct 25 23:26:14 hms35143 sshd[561211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreOct 25 23:26:14 hms35143 sshd[561211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 25 23:26:16 hms35143 sshd[561211]: Failed password for invalid user akbarshamsi from 125.74.48.7 port 47190 ssh2 Oct 25 23:27:52 hms35143 sshd[561235]: Invalid user shiwy from 125.74.48.7 port 36684 Oct 25 23:27:52 hms35143 sshd[561235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 25 23:27:55 hms35143 sshd[561235]: Failed password for invalid user shiwy from 125.74.48.7 port 36684 ssh2 ... show less	Brute-Force SSH
louis.stanford	2024-10-25 23:14:06 (1 month ago)	Oct 26 01:14:06 zadana sshd[491739]: Invalid user maryamamz from 125.74.48.7 port 38666 ...	Brute-Force SSH
nikoladd	2024-10-25 22:35:33 (1 month ago)	Oct 26 01:26:58 server2 sshd\[21609\]: Invalid user pam from 125.74.48.7 Oct 26 01:28:39 serve ... show moreOct 26 01:26:58 server2 sshd\[21609\]: Invalid user pam from 125.74.48.7 Oct 26 01:28:39 server2 sshd\[21809\]: Invalid user gary from 125.74.48.7 Oct 26 01:30:20 server2 sshd\[22160\]: Invalid user team2 from 125.74.48.7 Oct 26 01:32:05 server2 sshd\[22372\]: Invalid user deployer from 125.74.48.7 Oct 26 01:33:46 server2 sshd\[22498\]: User root from 125.74.48.7 not allowed because not listed in AllowUsers Oct 26 01:35:32 server2 sshd\[22873\]: Invalid user parth from 125.74.48.7 show less	Brute-Force
Lars	2024-10-25 22:22:34 (1 month ago)	Oct 26 00:19:15 h2996638 sshd[3764954]: Invalid user dns from 125.74.48.7 port 34916 Oct 26 00 ... show moreOct 26 00:19:15 h2996638 sshd[3764954]: Invalid user dns from 125.74.48.7 port 34916 Oct 26 00:19:15 h2996638 sshd[3764954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 26 00:19:17 h2996638 sshd[3764954]: Failed password for invalid user dns from 125.74.48.7 port 34916 ssh2 Oct 26 00:22:34 h2996638 sshd[3766570]: Invalid user cosmo from 125.74.48.7 port 47400 ... show less	Brute-Force SSH
maddler	2024-10-25 21:29:03 (1 month ago)	2024-10-25T22:26:31.989627+01:00 saccapposh sshd[1259866]: Invalid user boy from 125.74.48.7 port 60 ... show more2024-10-25T22:26:31.989627+01:00 saccapposh sshd[1259866]: Invalid user boy from 125.74.48.7 port 60640 2024-10-25T22:27:46.782100+01:00 saccapposh sshd[1262099]: Invalid user saba from 125.74.48.7 port 51982 2024-10-25T22:29:02.547618+01:00 saccapposh sshd[1264333]: Invalid user reader from 125.74.48.7 port 43316 ... show less	Brute-Force SSH
JL41414141	2024-10-25 21:27:59 (1 month ago)	2024-10-25T21:26:43.402967+00:00 messaround sshd[579498]: Invalid user saba from 125.74.48.7 port 60 ... show more2024-10-25T21:26:43.402967+00:00 messaround sshd[579498]: Invalid user saba from 125.74.48.7 port 60060 2024-10-25T21:27:59.527366+00:00 messaround sshd[579505]: Invalid user reader from 125.74.48.7 port 51406 ... show less	Brute-Force SSH
rtbh.com.tr	2024-10-25 20:53:45 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
LoNET	2024-10-25 20:14:59 (1 month ago)	Report 1394493 with IP 2401746 for SSH brute-force attack by source 2436718 via ssh-honeypot/0.2.0+h ... show moreReport 1394493 with IP 2401746 for SSH brute-force attack by source 2436718 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
walkerit.ch	2024-10-25 20:14:53 (1 month ago)	Oct 25 22:04:10 ctl sshd[27710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreOct 25 22:04:10 ctl sshd[27710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 25 22:04:12 ctl sshd[27710]: Failed password for invalid user lavori from 125.74.48.7 port 55012 ssh2 Oct 25 22:04:12 ctl sshd[27710]: Disconnected from invalid user lavori 125.74.48.7 port 55012 [preauth] Oct 25 22:13:51 ctl sshd[29879]: Connection closed by 125.74.48.7 port 54076 [preauth] Oct 25 22:14:53 ctl sshd[30435]: Invalid user cms from 125.74.48.7 port 60470 ... show less	Brute-Force SSH
Anonymous	2024-10-25 20:14:21 (1 month ago)	SSH Brute Force Attempt	Brute-Force SSH
formality	2024-10-25 19:52:09 (1 month ago)	Invalid user brandon from 125.74.48.7 port 37006	Brute-Force SSH
Anonymous	2024-10-25 18:18:12 (1 month ago)	2024-10-26T02:05:47.183425+08:00 kltw-debian sshd[414618]: Invalid user ts from 125.74.48.7 port 439 ... show more2024-10-26T02:05:47.183425+08:00 kltw-debian sshd[414618]: Invalid user ts from 125.74.48.7 port 43928 2024-10-26T02:05:47.762397+08:00 kltw-debian sshd[414618]: Disconnected from invalid user ts 125.74.48.7 port 43928 [preauth] 2024-10-26T02:14:32.901462+08:00 kltw-debian sshd[414637]: Disconnected from authenticating user root 125.74.48.7 port 39756 [preauth] 2024-10-26T02:15:09.718351+08:00 kltw-debian sshd[414639]: Disconnected from authenticating user root 125.74.48.7 port 46948 [preauth] 2024-10-26T02:16:15.660287+08:00 kltw-debian sshd[414646]: Invalid user marko from 125.74.48.7 port 33086 ... show less	Brute-Force SSH
Dominik Lysiak	2024-10-25 16:40:20 (1 month ago)	2024-10-25T18:38:20.699736+02:00 main sshd[358369]: Failed password for invalid user rusmini from 12 ... show more2024-10-25T18:38:20.699736+02:00 main sshd[358369]: Failed password for invalid user rusmini from 125.74.48.7 port 49666 ssh2 2024-10-25T18:39:18.580375+02:00 main sshd[359002]: Invalid user ventas from 125.74.48.7 port 34996 2024-10-25T18:39:18.582508+02:00 main sshd[359002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 2024-10-25T18:39:20.613954+02:00 main sshd[359002]: Failed password for invalid user ventas from 125.74.48.7 port 34996 ssh2 2024-10-25T18:40:19.587142+02:00 main sshd[359909]: Invalid user kostyamop from 125.74.48.7 port 48678 ... show less	Brute-Force SSH
SANYALnet Labs	2024-10-25 16:28:25 (1 month ago)	Oct 25 16:28:19 hecnet-us-east-gw sshd[795181]: Invalid user ltfoods from 125.74.48.7 port 43310<br ... show moreOct 25 16:28:19 hecnet-us-east-gw sshd[795181]: Invalid user ltfoods from 125.74.48.7 port 43310 Oct 25 16:28:22 hecnet-us-east-gw sshd[795181]: Failed password for invalid user ltfoods from 125.74.48.7 port 43310 ssh2 Oct 25 16:28:25 hecnet-us-east-gw sshd[795181]: Disconnected from invalid user ltfoods 125.74.48.7 port 43310 [preauth] ... show less	Brute-Force
John Doe	2024-10-25 15:13:32 (1 month ago)		Brute-Force SSH