JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

125.87.82.158

Neutral Activity

Abuse confidence score ?

0% Low Risk

71 reports

25 reporters · latest 8 months ago

ISP	CHINANET Chongqing province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	cta.cq.cn
Country	🇨🇳 China
City	Chongqing, Chongqing

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

125.87.82.158 has been reported 71 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 125.87.82.158

Export CSV

This IP address has been reported a total of 71 times from 25 distinct sources. 125.87.82.158 was first reported on December 20th 2021, and the most recent report was 8 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-02-13 05:12:35 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 125.87.82.158 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 125.87.82.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:12:28.640430 2026] [security2:error] [pid 7099:tid 7099] [client 125.87.82.158:60003] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.raintechgutters.com\|F\|2"] [data ".raintechgutters.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.raintechgutters.com"] [uri "/how-long-does-gutter-installation-take/www.raintechgutters.com"] [unique_id "aY6yvBIlcLM4pJCAzq2DkQAAAAc"], referer: https://www.raintechgutters.com/how-long-does-gutter-installation-take/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-01-06 01:18:56 (1 year ago)	SSH Brute force: 52 attempts were recorded from 125.87.82.158 2025-01-06T00:55:41+01:00 Connection c ... show more SSH Brute force: 52 attempts were recorded from 125.87.82.158 2025-01-06T00:55:41+01:00 Connection closed by authenticating user root 125.87.82.158 port 43573 [preauth] 2025-01-06T00:55:43+01:00 Connection closed by authenticating user root 125.87.82.158 port 44295 [preauth] 2025-01-06T00:55:44+01:00 Connection closed by authenticating user root 125.87.82.158 port 45088 [preauth] 2025-01-06T00:55:46+01:00 Connection closed by authenticating user root 125.87.82.158 port 45847 [preauth] 2025-01-06T00:55:47+01:00 Connection closed by authenticating user root 125.87.82.158 port 46806 [preauth] 2025-01-06T00:55:49+01:00 Connection closed by authenticating user root 125.87.82.158 port 47715 [preauth] 2025-01-06T00:55:50+01:00 Connection closed by authenticating user root 125.87.82.158 port 48666 [preauth] 2025-01-06T00:55:52+01:00 Connection closed by authenticating user root 125.87.82.158 por show less	Brute-Force SSH
🇨🇦 Largnet SOC	2025-01-06 00:05:52 (1 year ago)	125.87.82.158 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
🇫🇮 Gregor Makdac	2025-01-05 23:56:17 (1 year ago)	Hetzner-F2B blocked SSH BF-	Brute-Force SSH
🇩🇪 FunyMails	2024-12-12 07:39:07 (1 year ago)	Dec 12 07:39:03 localhost sshd[1877127]: Connection closed by authenticating user root 125.87.82.158 ... show more Dec 12 07:39:03 localhost sshd[1877127]: Connection closed by authenticating user root 125.87.82.158 port 55681 [preauth] Dec 12 07:39:04 localhost sshd[1877129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.82.158 user=root Dec 12 07:39:06 localhost sshd[1877129]: Failed password for root from 125.87.82.158 port 59896 ssh2 ... show less	Brute-Force SSH
🇨🇿 lp	2024-12-11 10:21:03 (1 year ago)	SSH Brute force: 57 attempts were recorded from 125.87.82.158 2024-12-11T10:31:14+01:00 Connection c ... show more SSH Brute force: 57 attempts were recorded from 125.87.82.158 2024-12-11T10:31:14+01:00 Connection closed by authenticating user root 125.87.82.158 port 41845 [preauth] 2024-12-11T10:31:16+01:00 Connection closed by authenticating user root 125.87.82.158 port 42925 [preauth] 2024-12-11T10:31:18+01:00 Connection closed by authenticating user root 125.87.82.158 port 44122 [preauth] 2024-12-11T10:31:20+01:00 Connection closed by authenticating user root 125.87.82.158 port 45346 [preauth] 2024-12-11T10:31:25+01:00 Connection closed by authenticating user root 125.87.82.158 port 46393 [preauth] 2024-12-11T10:31:27+01:00 Connection closed by authenticating user root 125.87.82.158 port 49291 [preauth] 2024-12-11T10:31:29+01:00 Connection closed by authenticating user root 125.87.82.158 port 50320 [preauth] 2024-12-11T10:31:31+01:00 Connection closed by authenticating user root 125.87.82.158 por show less	Brute-Force SSH
🇷🇸 Scan	2024-09-15 01:41:56 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2023-03-28 22:22:40 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 125.87.82.158 (CN/China/-)	Brute-Force
🇪🇸 10dencehispahard SL	2023-01-05 00:27:16 (3 years ago)	Unauthorized login attempts [ postfix-sasl]	Brute-Force
🇳🇱 maxxsense	2022-12-11 11:47:55 (3 years ago)	(postfix-unknown) Failed postfix unknown login with username [redacted] from 125.87.82.158 (CN/China ... show more (postfix-unknown) Failed postfix unknown login with username [redacted] from 125.87.82.158 (CN/China/-) show less	Hacking
🇩🇪 roskack	2021-12-21 19:48:17 (4 years ago)	Dec 22 01:48:17 zeus sshd[471694]: User root from 125.87.82.158 not allowed because not listed in Al ... show more Dec 22 01:48:17 zeus sshd[471694]: User root from 125.87.82.158 not allowed because not listed in AllowUsers show less	Brute-Force SSH
🇩🇪 roskack	2021-12-21 18:47:43 (4 years ago)	Dec 22 00:47:43 zeus sshd[463300]: User root from 125.87.82.158 not allowed because not listed in Al ... show more Dec 22 00:47:43 zeus sshd[463300]: User root from 125.87.82.158 not allowed because not listed in AllowUsers show less	Brute-Force SSH
🇩🇪 roskack	2021-12-21 17:36:26 (4 years ago)	Dec 21 23:36:26 zeus sshd[453100]: User root from 125.87.82.158 not allowed because not listed in Al ... show more Dec 21 23:36:26 zeus sshd[453100]: User root from 125.87.82.158 not allowed because not listed in AllowUsers show less	Brute-Force SSH
🇩🇪 blueSh4rk	2021-12-21 17:01:46 (4 years ago)	Invalid Password for root	Brute-Force SSH
🇩🇪 roskack	2021-12-21 16:24:06 (4 years ago)	Dec 21 22:24:06 zeus sshd[443103]: User root from 125.87.82.158 not allowed because not listed in Al ... show more Dec 21 22:24:06 zeus sshd[443103]: User root from 125.87.82.158 not allowed because not listed in AllowUsers show less	Brute-Force SSH

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 207.161.55.76

🇹🇷 201.4.68.94

🇻🇳 210.245.30.140

🇧🇷 200.175.149.58

🇱🇾 165.16.90.4

🇭🇰 152.32.254.89

🇩🇪 151.243.11.231

🇺🇸 68.10.53.31

🇺🇸 31.134.3.121

🇮🇱 2a05:f480:2c00:14f9:5400:6ff:fe96:2b74

🇦🇷 190.138.123.49

🇸🇬 134.185.82.253

🇱🇹 77.90.185.244

🇬🇧 77.67.26.160

🇳🇱 45.148.10.157

🇷🇴 2.57.122.209

🇷🇴 2.57.122.76

🇺🇿 2a05:45c2:714f:f901:ac5a:25a7:abd4:ab9f

🇬🇧 200.138.46.196

🇳🇱 193.47.62.69