AbuseIPDB » 135.125.238.48

135.125.238.48 was found in our database!

This IP was reported 16,893 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-4a663f72.vps.ovh.net
Domain Name	ovh.net
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 135.125.238.48

Whois 135.125.238.48

IP Abuse Reports for 135.125.238.48:

This IP address has been reported a total of 16,893 times from 1,311 distinct sources. 135.125.238.48 was first reported on August 20th 2024, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
nickto	2025-06-20 00:12:12 (20 hours ago)		Brute-Force SSH
AdrianT	2025-05-27 16:49:57 (3 weeks ago)	SSH brute force	Brute-Force SSH
rtbh.com.tr	2025-05-25 20:08:23 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-24 20:08:21 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-05-24 00:39:49 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/135.125.238.48	SSH
rtbh.com.tr	2025-05-23 20:08:20 (4 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
diego	2025-05-23 12:54:26 (4 weeks ago)	[rede-44-49] (sshd) Failed SSH login from 135.125.238.48 (FR/France/vps-4a663f72.vps.ovh.net): 5 in ... show more[rede-44-49] (sshd) Failed SSH login from 135.125.238.48 (FR/France/vps-4a663f72.vps.ovh.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 23 09:42:44 sshd[4510]: Invalid user [USERNAME] from 135.125.238.48 port 37336 May 23 09:42:46 sshd[4510]: Failed password for invalid user [USERNAME] from 135.125.238.48 port 37336 ssh2 May 23 09:50:22 sshd[5027]: Invalid user [USERNAME] from 135.125.238.48 port 37438 May 23 09:50:25 sshd[5027]: Failed password for invalid user [USERNAME] from 135.125.238.48 port 37438 ssh2 May 23 09:54:21 sshd[5299]: Failed password for [USERNAME] from 135.125.238.48 port 50394 ssh2 show less	Port Scan
lmathe	2025-05-23 11:04:05 (4 weeks ago)	2025-05-23T12:38:49.296143+02:00 lorand sshd[497242]: Invalid user liufang from 135.125.238.48 port ... show more2025-05-23T12:38:49.296143+02:00 lorand sshd[497242]: Invalid user liufang from 135.125.238.48 port 42062 2025-05-23T13:04:04.294689+02:00 lorand sshd[497488]: Connection from 135.125.238.48 port 46090 on 185.39.222.252 port 22 rdomain "" 2025-05-23T13:04:04.436258+02:00 lorand sshd[497488]: Invalid user cyx from 135.125.238.48 port 46090 ... show less	Brute-Force SSH
trivox.sh	2025-05-23 07:27:35 (4 weeks ago)	May 23 07:23:17 honey3 sshd[473562]: Disconnected from authenticating user root 135.125.238.48 port ... show moreMay 23 07:23:17 honey3 sshd[473562]: Disconnected from authenticating user root 135.125.238.48 port 41884 [preauth] May 23 07:27:32 honey3 sshd[473884]: Invalid user pbserver from 135.125.238.48 port 44714 May 23 07:27:32 honey3 sshd[473884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.238.48 May 23 07:27:33 honey3 sshd[473884]: Failed password for invalid user pbserver from 135.125.238.48 port 44714 ssh2 May 23 07:27:34 honey3 sshd[473884]: Disconnected from invalid user pbserver 135.125.238.48 port 44714 [preauth] ... show less	Brute-Force SSH
maza	2025-05-23 06:53:15 (4 weeks ago)	2025-05-23T06:40:47.353990+00:00 oracle sshd[418087]: Invalid user gejian from 135.125.238.48 port 5 ... show more2025-05-23T06:40:47.353990+00:00 oracle sshd[418087]: Invalid user gejian from 135.125.238.48 port 53278 2025-05-23T06:44:56.645347+00:00 oracle sshd[418120]: Invalid user wjy from 135.125.238.48 port 37934 2025-05-23T06:53:13.935940+00:00 oracle sshd[418179]: Invalid user yangfangfang from 135.125.238.48 port 46276 ... show less	Brute-Force SSH
ghostwarriors	2025-05-23 06:50:18 (4 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
pr0vieh	2025-05-23 06:41:48 (4 weeks ago)	2025-05-23T06:25:11.953034+00:00 Linux02 sshd[3612274]: pam_unix(sshd:auth): authentication failure; ... show more2025-05-23T06:25:11.953034+00:00 Linux02 sshd[3612274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.238.48 user=root 2025-05-23T06:25:13.391919+00:00 Linux02 sshd[3612274]: Failed password for root from 135.125.238.48 port 55164 ssh2 2025-05-23T06:29:21.620114+00:00 Linux02 sshd[3629682]: Invalid user applprod from 135.125.238.48 port 59286 2025-05-23T06:29:21.621828+00:00 Linux02 sshd[3629682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.238.48 2025-05-23T06:29:23.381919+00:00 Linux02 sshd[3629682]: Failed password for invalid user applprod from 135.125.238.48 port 59286 ssh2 2025-05-23T06:33:31.420300+00:00 Linux02 sshd[3647893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.238.48 user=root 2025-05-23T06:33:33.501087+00:00 Linux02 sshd[3647893]: Failed password for root from 135.125.238.48 port 34770 ssh2 2025-05-23T06:37:35.235 ... show less	Brute-Force SSH
trivox.sh	2025-05-23 06:21:30 (4 weeks ago)	May 23 06:17:27 honey3 sshd[468968]: Failed password for root from 135.125.238.48 port 49216 ssh2<br ... show moreMay 23 06:17:27 honey3 sshd[468968]: Failed password for root from 135.125.238.48 port 49216 ssh2 May 23 06:17:27 honey3 sshd[468968]: Disconnected from authenticating user root 135.125.238.48 port 49216 [preauth] May 23 06:21:27 honey3 sshd[469299]: Invalid user webapp from 135.125.238.48 port 47596 May 23 06:21:27 honey3 sshd[469299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.238.48 May 23 06:21:29 honey3 sshd[469299]: Failed password for invalid user webapp from 135.125.238.48 port 47596 ssh2 ... show less	Brute-Force SSH
amit177	2025-05-23 01:55:08 (4 weeks ago)		Brute-Force SSH
NetWatch	2025-05-23 01:43:59 (4 weeks ago)	The IP 135.125.238.48 tried multiple SSH logins	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩