This IP address has been reported a total of
13
times from
12 distinct
sources.
125.85.60.145 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-16T21:40:54.595554+02:00 web01.agentur-b-2.de sshd-session[1319748]: Connection closed by au ...
show more2026-07-16T21:40:54.595554+02:00 web01.agentur-b-2.de sshd-session[1319748]: Connection closed by authenticating user root 125.85.60.145 port 59234 [preauth]
2026-07-16T21:43:04.966695+02:00 web01.agentur-b-2.de sshd-session[1321589]: Connection closed by authenticating user root 125.85.60.145 port 34176 [preauth]
2026-07-16T21:43:31.302312+02:00 web01.agentur-b-2.de sshd-session[1322286]: Connection closed by authenticating user root 125.85.60.145 port 54400 [preauth]
2026-07-16T21:43:36.994097+02:00 web01.agentur-b-2.de sshd-session[1322325]: Connection closed by authenticating user root 125.85.60.145 port 34316 [preauth]
2026-07-16T21:44:07.158423+02:00 web01.agentur-b-2.de sshd-session[1322511]: Connection closed by authenticating user root 125.85.60.145 port 37032 [preauth]
show less
2026-07-16T19:00:45.201Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-07-16T19:00:45.201Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 125.85.60.145.
show less
Port Scan
Brute-Force
SSH
Anonymous
Unauthorized connection to SSH port 22
Port Scan
SSH
Anonymous
SSH brute force attempt. User: ubuntu, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-07-16T13:48:50.558833+00:00 boron sshd[136152]: Connection closed by authenticating user root 1 ...
show more2026-07-16T13:48:50.558833+00:00 boron sshd[136152]: Connection closed by authenticating user root 125.85.60.145 port 43982 [preauth]
2026-07-16T14:06:30.288183+00:00 boron sshd[137155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.85.60.145 user=root
2026-07-16T14:06:32.742886+00:00 boron sshd[137155]: Failed password for root from 125.85.60.145 port 60764 ssh2
...
show less
SSH Brute force: 59 attempts were recorded from 125.85.60.145
2026-07-16T15:06:38+02:00 Connection c ...
show moreSSH Brute force: 59 attempts were recorded from 125.85.60.145
2026-07-16T15:06:38+02:00 Connection closed by authenticating user root 125.85.60.145 port 44602 [preauth]
2026-07-16T15:06:41+02:00 Connection closed by authenticating user root 125.85.60.145 port 59656 [preauth]
2026-07-16T15:06:45+02:00 Connection closed by authenticating user root 125.85.60.145 port 33434 [preauth]
2026-07-16T15:07:01+02:00 Connection closed by authenticating user root 125.85.60.145 port 37078 [preauth]
2026-07-16T15:07:07+02:00 Connection closed by authenticating user root 125.85.60.145 port 44220 [preauth]
2026-07-16T15:07:19+02:00 Connection closed by authenticating user root 125.85.60.145 port 53664 [preauth]
2026-07-16T15:08:09+02:00 Connection closed by authenticating user root 125.85.60.145 port 39364 [preauth]
2026-07-16T15:08:26+02:00 Connection closed by authenticating user root 125.85.60.145 por
show less
2026-07-16T09:32:11.863100-04:00 mailstore.ab-data.us sshd-session[390548]: Connection closed by aut ...
show more2026-07-16T09:32:11.863100-04:00 mailstore.ab-data.us sshd-session[390548]: Connection closed by authenticating user root 125.85.60.145 port 49908 [preauth]
2026-07-16T09:32:14.015270-04:00 mailstore.ab-data.us sshd-session[390546]: Connection closed by authenticating user root 125.85.60.145 port 53790 [preauth]
2026-07-16T09:32:22.267055-04:00 mailstore.ab-data.us sshd-session[390565]: Connection closed by authenticating user root 125.85.60.145 port 33548 [preauth]
2026-07-16T09:32:28.130630-04:00 mailstore.ab-data.us sshd-session[390568]: Connection closed by authenticating user root 125.85.60.145 port 45088 [preauth]
...
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-07-16 11:46:41 | LAST=2026-07-16 11:46:42. Last seen 2026-07-16 11:46:42.
show less
2026-07-16T09:34:11.732955+00:00 prod-westeu sshd[2400941]: Failed password for root from 125.85.60. ...
show more2026-07-16T09:34:11.732955+00:00 prod-westeu sshd[2400941]: Failed password for root from 125.85.60.145 port 35974 ssh2
2026-07-16T09:34:16.408463+00:00 prod-westeu sshd[2400988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.85.60.145 user=root
2026-07-16T09:34:18.824244+00:00 prod-westeu sshd[2400988]: Failed password for root from 125.85.60.145 port 49058 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩