87.125.97.142
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- VODAFONE ESPANA S.A.U.
- Usage Type
- Fixed Line ISP
- ASN
- AS12430
- Domain Name
- vodafone.es
- Country
- 🇪🇸 Spain
- City
- Madrid, Madrid
Abuse Reports
Total reports
61 from
36 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 jaxyral |
Cowrie SSH/Telnet honeypot: 1 malicious events over 24h. 1 SSH/Telnet login attempts; creds tried: admin/qwaszxpo. Dest ports: 2223. First 2026-09-17T04:42:49+00:00, last 2026-09-17T04:42:49+00:00 UTC.
|
Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:45092 dst:23
|
Port Scan | |
| 🇵🇱 nfsec.pl |
Detected: TCP scan on port: 23 with flags: SYN
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-16 07:39:36 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 genokrad |
Unauthorized connection attempt on TCP/23 (Telnet)
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-15 21:16:17 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇭🇰 mutebot.net |
SRC=87.125.97.142, PROTO=TCP, SPT=47252, DPT=23
|
Port Scan | |
| 🇺🇸 RAP |
2026-09-15 06:49:33 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇷🇺 genokrad |
Unauthorized connection try on TCP/23 (Telnet)
|
Port Scan | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot | |
| 🇺🇸 drewf.ink |
[14:51] Attempted telnet login with credentials root:hs******am
|
Brute-Force IoT Targeted | |
| 🇺🇸 RAP |
2026-09-14 03:36:27 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 etu brutus |
87.125.97.142 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown