AbuseIPDB » 125.91.33.72

125.91.33.72 was found in our database!

This IP was reported 11,974 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 125.91.33.72

Whois 125.91.33.72

IP Abuse Reports for 125.91.33.72:

This IP address has been reported a total of 11,974 times from 1,432 distinct sources. 125.91.33.72 was first reported on September 14th 2023, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
LoNET	2025-04-25 12:04:26 (1 hour ago)	Report 1681046 with IP 1718918 for SSH brute-force attack by source 1731636 via ssh-honeypot/0.2.0+h ... show moreReport 1681046 with IP 1718918 for SSH brute-force attack by source 1731636 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
Wuck	2025-04-25 10:41:53 (2 hours ago)	Apr 25 11:42:01 Torux sshd[672434]: Failed password for invalid user salam from 125.91.33.72 port 57 ... show moreApr 25 11:42:01 Torux sshd[672434]: Failed password for invalid user salam from 125.91.33.72 port 57606 ssh2 Apr 25 12:17:12 Torux sshd[730440]: Invalid user monitoreo from 125.91.33.72 port 35822 Apr 25 12:17:12 Torux sshd[730440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.33.72 Apr 25 12:17:14 Torux sshd[730440]: Failed password for invalid user monitoreo from 125.91.33.72 port 35822 ssh2 Apr 25 12:41:52 Torux sshd[772772]: Invalid user alpha from 125.91.33.72 port 48300 ... show less	Brute-Force SSH
Private Private	2025-04-25 07:15:53 (5 hours ago)	Invalid user suncong from 125.91.33.72 port 45990	Brute-Force SSH
Onze Development	2025-04-25 06:34:45 (6 hours ago)	2025-04-25T01:40:14.651274-04:00 vps-dailymusic sshd[82548]: Invalid user erp from 125.91.33.72 port ... show more2025-04-25T01:40:14.651274-04:00 vps-dailymusic sshd[82548]: Invalid user erp from 125.91.33.72 port 33434 2025-04-25T01:45:01.465168-04:00 vps-dailymusic sshd[82920]: Invalid user kevin from 125.91.33.72 port 33416 2025-04-25T02:07:35.110713-04:00 vps-dailymusic sshd[83083]: Invalid user jenkins from 125.91.33.72 port 33452 2025-04-25T02:21:04.706373-04:00 vps-dailymusic sshd[83215]: Invalid user sadaf from 125.91.33.72 port 33424 2025-04-25T02:34:35.773440-04:00 vps-dailymusic sshd[83262]: Invalid user debian from 125.91.33.72 port 33370 ... show less	Brute-Force SSH
Private Private	2025-04-25 05:40:14 (7 hours ago)	Invalid user erp from 125.91.33.72 port 46152	Brute-Force SSH
security.rdmc.fr	2025-04-25 05:24:40 (7 hours ago)	IP in Malicious Database	Web App Attack
Anonymous	2025-04-25 03:19:27 (9 hours ago)	2025-04-25T05:19:24.256592 localhost.localdomain sshd[2044360]: pam_unix(sshd:auth): authentication ... show more2025-04-25T05:19:24.256592 localhost.localdomain sshd[2044360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.33.72 2025-04-25T05:19:26.716224 localhost.localdomain sshd[2044360]: Failed password for invalid user nginx1 from 125.91.33.72 port 43658 ssh2 ... show less	Brute-Force SSH
librebit	2025-04-25 02:36:38 (10 hours ago)	Brute force	Brute-Force
Heathrxw	2025-04-25 01:40:58 (11 hours ago)	Apr 25 02:40:55 s1-jellyfish sshd[1861710]: pam_unix(sshd:auth): authentication failure; logname= ui ... show moreApr 25 02:40:55 s1-jellyfish sshd[1861710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.33.72 user=root Apr 25 02:40:57 s1-jellyfish sshd[1861710]: Failed password for root from 125.91.33.72 port 59824 ssh2 ... show less	Brute-Force SSH
ThreatBook.io	2025-04-25 00:14:12 (12 hours ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/125.91.33.72	SSH
blik2108	2025-04-25 00:12:09 (12 hours ago)	2025-04-25T00:04:28.608360+00:00 wightpi sshd[3286398]: Invalid user kamera from 125.91.33.72 port 5 ... show more2025-04-25T00:04:28.608360+00:00 wightpi sshd[3286398]: Invalid user kamera from 125.91.33.72 port 56538 2025-04-25T00:12:08.342354+00:00 wightpi sshd[3288509]: Invalid user nader from 125.91.33.72 port 34186 ... show less	Brute-Force SSH
Heathrxw	2025-04-25 00:08:42 (12 hours ago)	Apr 25 01:08:40 s1-jellyfish sshd[937833]: pam_unix(sshd:auth): authentication failure; logname= uid ... show moreApr 25 01:08:40 s1-jellyfish sshd[937833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.33.72 Apr 25 01:08:41 s1-jellyfish sshd[937833]: Failed password for invalid user kamera from 125.91.33.72 port 56882 ssh2 ... show less	Brute-Force SSH
ICT KnTl	2025-04-24 23:31:01 (13 hours ago)	...	Brute-Force SSH
B P	2025-04-24 23:19:26 (13 hours ago)	2025-04-24T23:18:54.576429+00:00 hpprinter9 sshd[624127]: Disconnected from authenticating user root ... show more2025-04-24T23:18:54.576429+00:00 hpprinter9 sshd[624127]: Disconnected from authenticating user root 125.91.33.72 port 41582 [preauth] ... show less	SSH
valornode.com	2025-04-24 22:57:18 (14 hours ago)	Apr 24 22:53:50 mysql sshd[3311837]: Invalid user ubuntu from 125.91.33.72 port 54984 Apr 24 2 ... show moreApr 24 22:53:50 mysql sshd[3311837]: Invalid user ubuntu from 125.91.33.72 port 54984 Apr 24 22:53:50 mysql sshd[3311837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.33.72 Apr 24 22:53:50 mysql sshd[3311837]: Invalid user ubuntu from 125.91.33.72 port 54984 Apr 24 22:53:51 mysql sshd[3311837]: Failed password for invalid user ubuntu from 125.91.33.72 port 54984 ssh2 Apr 24 22:57:17 mysql sshd[3311872]: Invalid user es from 125.91.33.72 port 48420 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩