JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

125.80.200.195

Neutral Activity

Abuse confidence score ?

0% Low Risk

115 reports

56 reporters · latest 3 years ago

ISP	CHINANET Chongqing province network
Usage Type	Fixed Line ISP
ASN	AS141739
Domain Name	cta.cq.cn
Country	🇨🇳 China
City	Chongqing, Chongqing

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

125.80.200.195 has been reported 115 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 125.80.200.195

Export CSV

This IP address has been reported a total of 115 times from 56 distinct sources. 125.80.200.195 was first reported on April 15th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 GeekSec	2023-05-12 13:27:00 (3 years ago)	Failed SSH Attack	Hacking Brute-Force SSH
🇫🇷 Neko-World Network	2023-04-22 03:03:38 (3 years ago)	2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023 ... show more 2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023-04-16 00:40:20,746 fail2ban.actions [587]: NOTICE [sshd] Ban 125.80.200.195 show less	Web Spam Hacking Brute-Force Bad Web Bot
🇫🇷 Neko-World Network	2023-04-21 03:03:02 (3 years ago)	2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023 ... show more 2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023-04-16 00:40:20,746 fail2ban.actions [587]: NOTICE [sshd] Ban 125.80.200.195 show less	Web Spam Hacking Brute-Force Bad Web Bot
🇮🇳 Parth Maniar	2023-04-19 13:11:09 (3 years ago)	This IP address carried out 2 SSH credential attack (attempts) on 18-04-2023. For more information o ... show more This IP address carried out 2 SSH credential attack (attempts) on 18-04-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇫🇷 Neko-World Network	2023-04-19 03:03:27 (3 years ago)	2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023 ... show more 2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023-04-16 00:40:20,746 fail2ban.actions [587]: NOTICE [sshd] Ban 125.80.200.195 show less	Web Spam Hacking Brute-Force Bad Web Bot
🇫🇷 Neko-World Network	2023-04-18 03:02:55 (3 years ago)	2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023 ... show more 2023-04-16 00:40:17,965 fail2ban.actions [587]: NOTICE [pam-generic] Ban 125.80.200.195 2023-04-16 00:40:20,746 fail2ban.actions [587]: NOTICE [sshd] Ban 125.80.200.195 show less	Web Spam Hacking Brute-Force Bad Web Bot
🇨🇳 ThreatBook.io	2023-04-18 00:43:00 (3 years ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/125.80.200.195 2023-04-17 08:4 ... show more ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/125.80.200.195 2023-04-17 08:49:04 ["uname -a"] 2023-04-17 06:53:33 ["uname -a"] 2023-04-17 07:25:43 ["uname -a"] 2023-04-17 06:53:35 ["uname -a"] show less	Brute-Force
🇧🇬 MazenHost	2023-04-17 11:10:28 (3 years ago)	Apr 17 13:10:27 kyotorp sshd[90775]: Failed password for invalid user devops from 125.80.200.195 por ... show more Apr 17 13:10:27 kyotorp sshd[90775]: Failed password for invalid user devops from 125.80.200.195 port 41486 ssh2 Apr 17 13:10:25 kyotorp sshd[90778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.80.200.195 Apr 17 13:10:24 kyotorp sshd[90778]: Invalid user station6 from 125.80.200.195 port 41492 Apr 17 13:10:27 kyotorp sshd[90778]: Failed password for invalid user station6 from 125.80.200.195 port 41492 ssh2 ... show less	Brute-Force SSH
🇬🇧 Bytemark	2023-04-17 11:02:28 (3 years ago)	Apr 17 12:02:26 dlcentre3 sshd[7826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Apr 17 12:02:26 dlcentre3 sshd[7826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.80.200.195 show less	Brute-Force SSH
🇩🇪 ipcop.net	2023-04-17 10:40:17 (3 years ago)	Apr 17 12:40:10 router.wipp.f-heim.de sshd[556121]: Invalid user user from 125.80.200.195 port 60290 ... show more Apr 17 12:40:10 router.wipp.f-heim.de sshd[556121]: Invalid user user from 125.80.200.195 port 60290 Apr 17 12:40:10 router.wipp.f-heim.de sshd[556121]: Connection closed by invalid user user 125.80.200.195 port 60290 [preauth] Apr 17 12:40:15 router.wipp.f-heim.de sshd[556138]: Connection closed by authenticating user root 125.80.200.195 port 60280 [preauth] Apr 17 12:40:15 router.wipp.f-heim.de sshd[556142]: Invalid user ubuntu from 125.80.200.195 port 60286 Apr 17 12:40:15 router.wipp.f-heim.de sshd[556142]: Connection closed by invalid user ubuntu 125.80.200.195 port 60286 [preauth] show less	Brute-Force
🇫🇷 jk jk	2023-04-17 10:24:47 (3 years ago)	WAF_blocked	Hacking Web App Attack
Anonymous	2023-04-17 10:21:33 (3 years ago)	$f2bV_matches	Brute-Force SSH
🇧🇪 sid3windr	2023-04-17 10:20:11 (3 years ago)	sshd[10764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ... show more sshd[10764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.80.200.195 show less	Brute-Force SSH
🇰🇷 winter	2023-04-17 09:21:08 (3 years ago)	Unauthorized connection attempt detected from IP address 125.80.200.195 to port 22 (vortex) [p]	Brute-Force SSH
🇺🇸 lavnet.net	2023-04-17 09:19:50 (3 years ago)	2023-04-17T09:19:49.035796angela sshd[2354318]: Invalid user deploy from 125.80.200.195 port 50340 2 ... show more 2023-04-17T09:19:49.035796angela sshd[2354318]: Invalid user deploy from 125.80.200.195 port 50340 2023-04-17T09:19:47.344031angela sshd[2354305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.80.200.195 2023-04-17T09:19:49.566134angela sshd[2354305]: Failed password for invalid user odoo15 from 125.80.200.195 port 50266 ssh2 ... show less	SSH

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 188.227.111.138

🇺🇸 184.105.139.75

🇮🇷 151.232.120.104

🇨🇳 125.36.255.248

🇺🇸 20.118.219.95

🇭🇰 104.143.36.100

🇮🇩 103.159.199.43

🇮🇩 103.131.61.136

🇵🇭 49.157.64.58

🇦🇿 37.61.117.57

🇺🇸 34.206.50.36

🇸🇳 196.207.215.174

🇳🇱 192.253.248.226

🇺🇸 167.71.93.209

🇪🇪 150.241.74.83

🇺🇸 147.185.132.243

🇩🇪 130.12.180.32

🇨🇳 111.162.158.126

🇨🇳 111.78.137.219

🇱🇹 91.224.92.44