This IP address has been reported a total of
335
times from
173 distinct
sources.
130.61.74.125 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 42 SSH credential attack (attempts) between 21-04-2023 to 15-05-2023. Fo ...
show moreThis IP address carried out 42 SSH credential attack (attempts) between 21-04-2023 to 15-05-2023. For more information or to report interesting/incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
May 8 23:23:49 bongen-tmp-rt.local sshd[3124742]: Connection closed by authenticating user root 130 ...
show moreMay 8 23:23:49 bongen-tmp-rt.local sshd[3124742]: Connection closed by authenticating user root 130.61.74.125 port 62750 [preauth]
May 8 23:23:49 bongen-tmp-rt.local sshd[3124744]: Connection closed by authenticating user root 130.61.74.125 port 11318 [preauth]
May 8 23:23:50 bongen-tmp-rt.local sshd[3124747]: Connection closed by authenticating user root 130.61.74.125 port 16486 [preauth]
May 8 23:23:51 bongen-tmp-rt.local sshd[3124749]: Connection closed by authenticating user root 130.61.74.125 port 24490 [preauth]
May 8 23:23:51 bongen-tmp-rt.local sshd[3124751]: Connection closed by authenticating user root 130.61.74.125 port 31278 [preauth]
show less
May 8 23:23:49 bongen-tmp-rt.local sshd[3124742]: Connection closed by authenticating user root 130 ...
show moreMay 8 23:23:49 bongen-tmp-rt.local sshd[3124742]: Connection closed by authenticating user root 130.61.74.125 port 62750 [preauth]
May 8 23:23:49 bongen-tmp-rt.local sshd[3124744]: Connection closed by authenticating user root 130.61.74.125 port 11318 [preauth]
May 8 23:23:50 bongen-tmp-rt.local sshd[3124747]: Connection closed by authenticating user root 130.61.74.125 port 16486 [preauth]
May 8 23:23:51 bongen-tmp-rt.local sshd[3124749]: Connection closed by authenticating user root 130.61.74.125 port 24490 [preauth]
May 8 23:23:51 bongen-tmp-rt.local sshd[3124751]: Connection closed by authenticating user root 130.61.74.125 port 31278 [preauth]
show less
May 8 23:23:49 bongen-tmp-rt.local sshd[3124742]: Connection closed by authenticating user root 130 ...
show moreMay 8 23:23:49 bongen-tmp-rt.local sshd[3124742]: Connection closed by authenticating user root 130.61.74.125 port 62750 [preauth]
May 8 23:23:49 bongen-tmp-rt.local sshd[3124744]: Connection closed by authenticating user root 130.61.74.125 port 11318 [preauth]
May 8 23:23:50 bongen-tmp-rt.local sshd[3124747]: Connection closed by authenticating user root 130.61.74.125 port 16486 [preauth]
May 8 23:23:51 bongen-tmp-rt.local sshd[3124749]: Connection closed by authenticating user root 130.61.74.125 port 24490 [preauth]
May 8 23:23:51 bongen-tmp-rt.local sshd[3124751]: Connection closed by authenticating user root 130.61.74.125 port 31278 [preauth]
show less
May 8 20:16:56 tank sshd[9854]: Failed password for root from 130.61.74.125 port 55326 ssh2
May 8 ...
show moreMay 8 20:16:56 tank sshd[9854]: Failed password for root from 130.61.74.125 port 55326 ssh2
May 8 20:17:02 tank sshd[9859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.74.125 user=root
May 8 20:17:04 tank sshd[9859]: Failed password for root from 130.61.74.125 port 13778 ssh2
...
show less
Brute-Force
SSH
Anonymous
May 8 16:12:42 v sshd\[4284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid= ...
show moreMay 8 16:12:42 v sshd\[4284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.74.125 user=root
May 8 16:12:44 v sshd\[4284\]: Failed password for root from 130.61.74.125 port 18330 ssh2
May 8 16:12:45 v sshd\[4286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.74.125 user=root
...
show less
Brute-Force
SSH
Showing 1 to
15
of 335 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩