This IP address has been reported a total of
139
times from
128 distinct
sources.
181.23.42.25 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 32
reports;
United States of America
with 21
reports;
France
with 15
reports.
The most common categories in these recent reports were:
Brute-Force
132
times;
SSH
129
times;
Port Scan
6
times;
Web App Attack
4
times;
Exploited Host
3
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
2026-10-25T23:05:00.459942+01:00 rpi5 sshd[2788309]: Failed password for invalid user ggg from 181.2 ...
show more2026-10-25T23:05:00.459942+01:00 rpi5 sshd[2788309]: Failed password for invalid user ggg from 181.23.42.25 port 36278 ssh2
2026-10-25T23:09:51.102754+01:00 rpi5 sshd[2788653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.42.25 user=root
2026-10-25T23:09:52.955296+01:00 rpi5 sshd[2788653]: Failed password for root from 181.23.42.25 port 35003 ssh2
...
show less
2026-10-25T21:38:26.238711+00:00 melon sshd[1494020]: Invalid user filip from 181.23.42.25 port 4055 ...
show more2026-10-25T21:38:26.238711+00:00 melon sshd[1494020]: Invalid user filip from 181.23.42.25 port 40556
2026-10-25T21:43:08.103381+00:00 melon sshd[1499692]: Connection from 181.23.42.25 port 36258 on 65.108.201.187 port 22 rdomain ""
2026-10-25T21:43:09.941429+00:00 melon sshd[1499692]: Invalid user temp from 181.23.42.25 port 36258
2026-10-25T21:53:54.420712+00:00 melon sshd[1512082]: Connection from 181.23.42.25 port 46393 on 65.108.201.187 port 22 rdomain ""
2026-10-25T21:53:56.068299+00:00 melon sshd[1512082]: User root from 181.23.42.25 not allowed because none of user's groups are listed in AllowGroups
show less
2026-10-25T21:52:58.696514+00:00 vps3363447 sshd[308958]: Invalid user andrey from 181.23.42.25 port ...
show more2026-10-25T21:52:58.696514+00:00 vps3363447 sshd[308958]: Invalid user andrey from 181.23.42.25 port 34673
show less
2026-10-25T21:39:45.994578luna-spire sshd[2357500]: Failed password for root from 181.23.42.25 port ...
show more2026-10-25T21:39:45.994578luna-spire sshd[2357500]: Failed password for root from 181.23.42.25 port 38748 ssh2
2026-10-25T21:46:30.848676luna-spire sshd[2420257]: Invalid user temp from 181.23.42.25 port 40727
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 12/100 (info ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 12/100 (info) | Phase: reconnaissance (low-volume probing)
Failed auth: 6 (4 bad password, 2 invalid user) | 0 success | 16 total SSH log events | seen on 1 sensor(s)
Origin: Argentina (AR) | AS22927 Telefonica de Argentina | 181.23.42.0/24
First seen: 2026-10-25 21:17:08 UTC | Last seen: 2026-10-25 21:45:00 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Multiple SSH login attempts from 181.23.42.25 targeting user(s): filip,root | Server Managed by Focu ...
show moreMultiple SSH login attempts from 181.23.42.25 targeting user(s): filip,root | Server Managed by Focusnic
show less
2026-10-25T23:33:15.542007+02:00 nightland sshd-session[2494025]: Failed password for root from 181. ...
show more2026-10-25T23:33:15.542007+02:00 nightland sshd-session[2494025]: Failed password for root from 181.23.42.25 port 42865 ssh2
2026-10-25T23:37:56.853964+02:00 nightland sshd-session[2526010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.42.25 user=root
2026-10-25T23:37:58.549872+02:00 nightland sshd-session[2526010]: Failed password for root from 181.23.42.25 port 39613 ssh2
show less
2026-10-25T21:23:57.399309+00:00 helium sshd-session[2683144]: Disconnected from authenticating user ...
show more2026-10-25T21:23:57.399309+00:00 helium sshd-session[2683144]: Disconnected from authenticating user root 181.23.42.25 port 33013 [preauth]
2026-10-25T21:36:48.412777+00:00 helium sshd-session[2687238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.42.25 user=root
2026-10-25T21:36:50.220694+00:00 helium sshd-session[2687238]: Failed password for root from 181.23.42.25 port 57956 ssh2
...
show less
2026-10-26T00:31:53.520215+03:00 mail.consulting-ua.eu sshd-session[3232667]: Connection from 181.23 ...
show more2026-10-26T00:31:53.520215+03:00 mail.consulting-ua.eu sshd-session[3232667]: Connection from 181.23.42.25 port 39374 on 192.168.0.110 port 22 rdomain ""
2026-10-26T00:31:55.203455+03:00 mail.consulting-ua.eu sshd-session[3232667]: User root from 181.23.42.25 not allowed because not listed in AllowUsers
...
show less
