JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.94.180.74

125.94.180.74 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS140308
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.94.180.74

Whois 125.94.180.74

IP Abuse Reports for 125.94.180.74:

This IP address has been reported a total of 8 times from 6 distinct sources. 125.94.180.74 was first reported on July 3rd 2021, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-08-03 22:34:17 (10 months ago)	Ports: 25,2525,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-08-01 03:22:28 (10 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
Anonymous	2025-07-28 19:04:54 (10 months ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇹🇭 thaizone.com	2025-06-19 01:37:57 (11 months ago)	Mail credential brute-force attack (SM4) #1	Email Spam Brute-Force
Anonymous	2025-05-23 15:40:23 (1 year ago)	SMTP brute force - auth failed	Brute-Force Exploited Host
🇩🇪 www.blocklist.de	2021-07-07 01:21:19 (4 years ago)	[3678:Jul 7 07:11:44 j320955 sshd[28745]: Received disconnect from 125.94.180.74 port 35360:11: Bye ... show more [3678:Jul 7 07:11:44 j320955 sshd[28745]: Received disconnect from 125.94.180.74 port 35360:11: Bye Bye [preauth] 3679:Jul 7 07:11:44 j320955 sshd[28745]: Disconnected from authenticating user r.r 125.94.180.74 port 35360 [preauth] 3680:Jul 7 07:11:46 j320955 sshd[28747]: Received disconnect from 125.94.180.74 port 35389:11: Bye Bye [preauth] 3681:Jul 7 07:11:46 j320955 sshd[28747]: Disconnected from authenticating user r.r 125.94.180.74 port 35389 [preauth] 3682:Jul 7 07:11:47 j320955 sshd[28752]: Invalid user ubnt from 125.94.180.74 port 35413 3683:Jul 7 07:11:48 j320955 sshd[28752]: Received disconnect from 125.94.180.74 port 35413:11: Bye Bye [preauth] 3684:Jul 7 07:11:48 j320955 sshd[28752]: Disconnected from invalid user ubnt 125.94.180.74 port 35413 [preauth] 3685:Jul 7 07:11:50 j320955 sshd[28754]: Received disconnect from 125.94.180.74 port 35452:11: Bye Bye [preauth] 3686:Jul 7 07:11:50 j320955 sshd[28754]: Disconnected from authenticating user r.r 125........ ------------------------------ show less	FTP Brute-Force Hacking
🇩🇪 shantanoo	2021-07-04 07:05:32 (4 years ago)	Jul 4 16:35:23 dhoomketu sshd[3514408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Jul 4 16:35:23 dhoomketu sshd[3514408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.180.74 Jul 4 16:35:23 dhoomketu sshd[3514408]: Invalid user ubnt from 125.94.180.74 port 41294 Jul 4 16:35:25 dhoomketu sshd[3514408]: Failed password for invalid user ubnt from 125.94.180.74 port 41294 ssh2 Jul 4 16:35:30 dhoomketu sshd[3514410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.180.74 user=root Jul 4 16:35:32 dhoomketu sshd[3514410]: Failed password for root from 125.94.180.74 port 41440 ssh2 ... show less	Brute-Force SSH
🇩🇪 Lepainmaker	2021-07-03 19:37:39 (4 years ago)	Jul 4 01:37:37 workstation sshd[3932789]: pam_unix(sshd:auth): authentication failure; logname= uid ... show more Jul 4 01:37:37 workstation sshd[3932789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.180.74 user=root Jul 4 01:37:38 workstation sshd[3932789]: Failed password for root from 125.94.180.74 port 47850 ssh2 ... show less	Brute-Force SSH

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.81

🇫🇷 146.70.194.236

🇺🇸 147.185.132.208

🇻🇳 103.167.89.178

🇺🇸 54.224.176.230

🇸🇬 45.194.17.43

🇺🇸 2607:f8b0:4004:100d::128

🇰🇷 211.254.212.59

🇸🇪 192.178.93.147

🇫🇷 91.231.89.169

🇳🇱 86.54.31.34

🇨🇳 58.221.60.25

🇺🇸 23.105.162.48

🇲🇽 187.192.86.153

🇺🇸 150.107.38.160

🇺🇸 148.72.152.145

🇫🇷 91.196.152.219

🇨🇳 61.129.70.208

🇰🇷 59.21.37.60

🇨🇳 58.220.39.200