AbuseIPDB » 125.74.48.7

125.74.48.7 was found in our database!

This IP was reported 1,059 times. Confidence of Abuse is 90%: ?

90%

ISP	CHINANET Gansu province network
Usage Type	Fixed Line ISP
Domain Name	chinatelecom.cn
Country	China
City	Lanzhou, Gansu

Report 125.74.48.7

Whois 125.74.48.7

IP Abuse Reports for 125.74.48.7:

This IP address has been reported a total of 1,059 times from 502 distinct sources. 125.74.48.7 was first reported on September 19th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Information Security	2024-10-25 01:37:15 (1 month ago)	Brute-force SSH server	Brute-Force SSH
Ralf Piotrowsky	2024-10-25 01:36:03 (1 month ago)	Oct 25 03:34:41 h2691902 sshd[24789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreOct 25 03:34:41 h2691902 sshd[24789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 25 03:34:43 h2691902 sshd[24789]: Failed password for invalid user student from 125.74.48.7 port 39220 ssh2 Oct 25 03:36:01 h2691902 sshd[24808]: Invalid user administrador from 125.74.48.7 port 59282 Oct 25 03:36:01 h2691902 sshd[24808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 25 03:36:03 h2691902 sshd[24808]: Failed password for invalid user administrador from 125.74.48.7 port 59282 ssh2 ... show less	Brute-Force SSH
Max la Menace	2024-10-25 01:10:58 (1 month ago)	SSH Brute Force (F)	Brute-Force SSH
Samsteve169	2024-10-25 00:54:25 (1 month ago)	Attempt from 125.74.48.7	Brute-Force SSH
vcis.de	2024-10-25 00:53:37 (1 month ago)	SSH brute force attack detected from [125.74.48.7]	Brute-Force SSH
lushy	2024-10-25 00:34:16 (1 month ago)	Oct 25 00:23:20 web4 sshd[999492]: Failed password for invalid user renqs from 125.74.48.7 port 4925 ... show moreOct 25 00:23:20 web4 sshd[999492]: Failed password for invalid user renqs from 125.74.48.7 port 49258 ssh2 Oct 25 00:33:22 web4 sshd[1001830]: Invalid user jazmin from 125.74.48.7 port 56346 Oct 25 00:33:22 web4 sshd[1001830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 25 00:33:24 web4 sshd[1001830]: Failed password for invalid user jazmin from 125.74.48.7 port 56346 ssh2 Oct 25 00:34:16 web4 sshd[1001896]: Invalid user amirtala from 125.74.48.7 port 38608 show less	Brute-Force SSH
hacktegic.com	2024-10-24 23:37:19 (1 month ago)	2024-10-25T02:30:41.284240+03:00 kiv01.hacktegic.com sshd-session[2691857]: Disconnected from authen ... show more2024-10-25T02:30:41.284240+03:00 kiv01.hacktegic.com sshd-session[2691857]: Disconnected from authenticating user root 125.74.48.7 port 34678 [preauth] 2024-10-25T02:35:57.218698+03:00 kiv01.hacktegic.com sshd-session[2692460]: Disconnected from authenticating user user 125.74.48.7 port 53026 [preauth] 2024-10-25T02:37:18.656559+03:00 kiv01.hacktegic.com sshd-session[2692623]: Invalid user lbx from 125.74.48.7 port 40570 ... show less	Brute-Force SSH
Dolutech.com	2024-10-24 23:36:31 (1 month ago)	Block WAF - Dolutech AI	Port Scan Brute-Force Web App Attack
Anonymous	2024-10-24 23:18:06 (1 month ago)	2024-10-25T01:08:31.513753+02:00 saturn sshd[600108]: Invalid user ventasford from 125.74.48.7 port ... show more2024-10-25T01:08:31.513753+02:00 saturn sshd[600108]: Invalid user ventasford from 125.74.48.7 port 38796 2024-10-25T01:08:31.822577+02:00 saturn sshd[600108]: Disconnected from invalid user ventasford 125.74.48.7 port 38796 [preauth] 2024-10-25T01:18:04.246034+02:00 saturn sshd[600527]: Invalid user trial from 125.74.48.7 port 48292 ... show less	Brute-Force SSH
mahdielector	2024-10-24 22:51:08 (1 month ago)	Oct 25 02:21:03 Digitalogic sshd[1555642]: pam_unix(sshd:auth): authentication failure; logname= uid ... show moreOct 25 02:21:03 Digitalogic sshd[1555642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.74.48.7 Oct 25 02:21:06 Digitalogic sshd[1555642]: Failed password for invalid user ganesha from 125.74.48.7 port 35140 ssh2 Oct 25 02:21:07 Digitalogic sshd[1555642]: Disconnected from invalid user ganesha 125.74.48.7 port 35140 [preauth] ... show less	Brute-Force SSH
compilergeek	2024-10-24 22:29:56 (1 month ago)	Oct 24 22:26:34 do-nyc3-1 sshd[14056]: Invalid user nti from 125.74.48.7 port 43466 Oct 24 22: ... show moreOct 24 22:26:34 do-nyc3-1 sshd[14056]: Invalid user nti from 125.74.48.7 port 43466 Oct 24 22:27:26 do-nyc3-1 sshd[14073]: Invalid user wuxianjin from 125.74.48.7 port 56620 Oct 24 22:28:17 do-nyc3-1 sshd[14087]: Invalid user wshouse from 125.74.48.7 port 41566 Oct 24 22:29:08 do-nyc3-1 sshd[14102]: Invalid user kbdw from 125.74.48.7 port 54810 Oct 24 22:29:56 do-nyc3-1 sshd[14120]: Invalid user sbsafety from 125.74.48.7 port 39808 ... show less	Brute-Force SSH
blackpanther	2024-10-24 22:16:42 (1 month ago)	2024-10-25T00:10:43.651123+02:00 sshd[3247457]: Disconnected from authenticating user shellinabox 1 ... show more2024-10-25T00:10:43.651123+02:00 sshd[3247457]: Disconnected from authenticating user shellinabox 125.74.48.7 port 42986 [preauth] 2024-10-25T00:16:40.899836+02:00 sshd[3328937]: Invalid user parvinbagheri from 125.74.48.7 port 40056 2024-10-25T00:16:41.289308+02:00 sshd[3328937]: Disconnected from invalid user parvinbagheri 125.74.48.7 port 40056 [preauth] show less	Brute-Force SSH
Babu Chang	2024-10-24 22:09:56 (1 month ago)	sshguard	SSH
nicosqc	2024-10-24 22:00:28 (1 month ago)	Invalid user geyson from 125.74.48.7 port 51786	Brute-Force SSH
nicosqc	2024-10-24 22:00:28 (1 month ago)	Invalid user geyson from 125.74.48.7 port 51786	Brute-Force SSH