JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.87.89.99

125.87.89.99 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Chongqing province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	cta.cq.cn
Country	🇨🇳 China
City	Chongqing, Chongqing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.87.89.99

Whois 125.87.89.99

IP Abuse Reports for 125.87.89.99:

This IP address has been reported a total of 45 times from 33 distinct sources. 125.87.89.99 was first reported on July 4th 2022, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 www.elivecd.org	2025-06-20 01:53:47 (11 months ago)	125.87.89.99 - - [20/Jun/2025:01:01:03 +0100] "GET /newsletters/?reflect_27_month=7&reflect_27_year= ... show more 125.87.89.99 - - [20/Jun/2025:01:01:03 +0100] "GET /newsletters/?reflect_27_month=7&reflect_27_year=2008&reflect_27_day=false&reflect_27_start=0&reflect_332_month=9&reflect_332_year=2011&reflect_332_day=false&reflect_332_start=0&reflect_850_month=12&reflect_850_year=2009&reflect_850_day=false&reflect_850_start=0&start=8 HTTP/1.1" 301 162 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; moasigns=1.0.43; GWX:MANAGED; moasigns=1.0.43)" ... show less	DDoS Attack
🇰🇷 Woodie	2025-05-25 08:40:34 (1 year ago)	2025-05-25T04:40:18.793836-04:00 debian sshd[1951503]: Failed password for root from 125.87.89.99 po ... show more 2025-05-25T04:40:18.793836-04:00 debian sshd[1951503]: Failed password for root from 125.87.89.99 port 34496 ssh2 2025-05-25T04:40:24.852538-04:00 debian sshd[1951628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 user=root 2025-05-25T04:40:27.162737-04:00 debian sshd[1951628]: Failed password for root from 125.87.89.99 port 39955 ssh2 2025-05-25T04:40:31.639920-04:00 debian sshd[1951732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 user=root 2025-05-25T04:40:33.242815-04:00 debian sshd[1951732]: Failed password for root from 125.87.89.99 port 43581 ssh2 ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-03-29 20:48:28 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-03-29 00:48:30 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-03-28 20:48:30 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-03-27 15:20:19 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇨🇳 ThreatBook.io	2023-08-15 22:17:26 (2 years ago)	ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/125.87.89.99 202 ... show more ThreatBook Intelligence: Zombie,iot_device more details on https://threatbook.io/ip/125.87.89.99 2023-08-15 05:16:08 /help/user/project/web_ide/index.md/ 2023-08-15 05:23:04 /index.php 2023-08-15 05:19:17 /explore/cgi-bin-hax/ExportSettings.sh 2023-08-15 05:16:47 /index.php 2023-08-15 05:18:26 /help/administration/auth/README.md/ 2023-08-15 05:16:46 /help/topics/authentication/index.md/ 2023-08-15 05:19:15 /explore/bonita/login.jsp show less	Web App Attack
🇫🇷 JA	2023-07-12 14:00:37 (2 years ago)	ssh login attempt	Brute-Force SSH
🇪🇸 10dencehispahard SL	2023-01-03 21:28:43 (3 years ago)	Unauthorized login attempts [{'postfix-sasl'}]	Brute-Force
🇱🇺 TrainerGamer	2022-07-06 19:39:56 (3 years ago)	Jul 6 16:38:22 LU-VPS01 sshd[4064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Jul 6 16:38:22 LU-VPS01 sshd[4064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 Jul 6 16:38:24 LU-VPS01 sshd[4064]: Failed password for invalid user user14 from 125.87.89.99 port 58466 ssh2 Jul 6 16:39:56 LU-VPS01 sshd[4178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 ... show less	Brute-Force SSH
🇫🇷 inpec.fr	2022-07-06 19:12:40 (3 years ago)	$f2bV_matches	Brute-Force
🇩🇪 www.blocklist.de	2022-07-06 19:02:11 (3 years ago)	Lines containing failures of 125.87.89.99 Jul 5 14:24:21 v11 sshd[14287]: AD user teste from 125.87 ... show more Lines containing failures of 125.87.89.99 Jul 5 14:24:21 v11 sshd[14287]: AD user teste from 125.87.89.99 port 52614 Jul 5 14:24:21 v11 sshd[14287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 Jul 5 14:24:23 v11 sshd[14287]: Failed password for AD user teste from 125.87.89.99 port 52614 ssh2 Jul 5 14:24:24 v11 sshd[14287]: Received disconnect from 125.87.89.99 port 52614:11: Bye Bye [preauth] Jul 5 14:24:24 v11 sshd[14287]: Disconnected from AD user teste 125.87.89.99 port 52614 [preauth] Jul 5 14:27:57 v11 sshd[14583]: AD user train from 125.87.89.99 port 53878 Jul 5 14:27:57 v11 sshd[14583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 Jul 5 14:27:59 v11 sshd[14583]: Failed password for AD user train from 125.87.89.99 port 53878 ssh2 Jul 5 14:28:00 v11 sshd[14583]: Received disconnect from 125.87.89.99 port 53878:11: Bye Bye [preauth] Jul 5 14:28........ ------------------------------ show less	FTP Brute-Force Hacking
🇫🇮 pr0vieh	2022-07-06 18:44:15 (3 years ago)	Jul 6 22:39:52 Linux03 sshd[3705003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Jul 6 22:39:52 Linux03 sshd[3705003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 Jul 6 22:39:54 Linux03 sshd[3705003]: Failed password for invalid user arthur from 125.87.89.99 port 36554 ssh2 Jul 6 22:40:59 Linux03 sshd[3714275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 user=root Jul 6 22:41:01 Linux03 sshd[3714275]: Failed password for root from 125.87.89.99 port 50812 ssh2 Jul 6 22:42:06 Linux03 sshd[3723761]: Invalid user spi from 125.87.89.99 port 36840 Jul 6 22:42:06 Linux03 sshd[3723761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 Jul 6 22:42:09 Linux03 sshd[3723761]: Failed password for invalid user spi from 125.87.89.99 port 36840 ssh2 Jul 6 22:43:10 Linux03 sshd[3732004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 user=root Jul 6 22: ... show less	Brute-Force SSH
Anonymous	2022-07-06 18:40:28 (3 years ago)	prod3 ...	Brute-Force SSH
🇩🇪 www.blocklist.de	2022-07-06 16:43:24 (3 years ago)	Lines containing failures of 125.87.89.99 Jul 5 14:24:21 v11 sshd[14287]: AD user teste from 125.87 ... show more Lines containing failures of 125.87.89.99 Jul 5 14:24:21 v11 sshd[14287]: AD user teste from 125.87.89.99 port 52614 Jul 5 14:24:21 v11 sshd[14287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 Jul 5 14:24:23 v11 sshd[14287]: Failed password for AD user teste from 125.87.89.99 port 52614 ssh2 Jul 5 14:24:24 v11 sshd[14287]: Received disconnect from 125.87.89.99 port 52614:11: Bye Bye [preauth] Jul 5 14:24:24 v11 sshd[14287]: Disconnected from AD user teste 125.87.89.99 port 52614 [preauth] Jul 5 14:27:57 v11 sshd[14583]: AD user train from 125.87.89.99 port 53878 Jul 5 14:27:57 v11 sshd[14583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.89.99 Jul 5 14:27:59 v11 sshd[14583]: Failed password for AD user train from 125.87.89.99 port 53878 ssh2 Jul 5 14:28:00 v11 sshd[14583]: Received disconnect from 125.87.89.99 port 53878:11: Bye Bye [preauth] Jul 5 14:28........ ------------------------------ show less	FTP Brute-Force Hacking

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 185.65.135.248

🇦🇷 181.116.40.196

🇺🇸 172.237.155.29

🇺🇸 165.227.209.27

🇩🇪 155.117.127.153

🇨🇦 144.217.74.127

🇨🇳 117.92.244.141

🇮🇳 115.241.228.34

🇻🇳 103.143.207.18

🇮🇷 85.198.21.111

🇨🇳 60.208.177.124

🇷🇴 2.57.122.177

🇳🇱 195.178.110.30

🇰🇷 118.193.69.67

🇮🇳 103.180.212.135

🇳🇱 80.82.70.228

🇮🇳 74.125.16.178

🇩🇪 69.5.169.179

🇺🇸 20.65.194.16

🇨🇳 14.103.107.31