125.130.102.172 is an IP address with 2 abuse reports from 1 distinct reporter, submitted between 11/03/2026 and 11/03/2026. The AbuseTrack community rates it as Medium risk, with a score of 30/100. The most frequently reported threat categories are Brute Force.
Instant verdict
SUSPICIOUS
30/100
Community risk score
2
Reports
1
Reporters
11/03/2026
First seen
11/03/2026
Last seen
Threat type
Is this your address and is it listed wrongly? Request removal →
Intelligence
Country
South Korea (KR)
WHOIS (RDAP)
- Country
- South Korea
- Location
- Yongin-si, Gyeonggi-do
Report history (2)
2026-11-03T16:33:53.146544+01:00 dns sshd-session[41060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.102.172 2026-11-03T16:33:55.395485+01:00 dns sshd-session[41060]: Failed password for invalid user debian from 125.130.102.172 port 42823 ssh2 2026-11-03T16:37:54.628220+01:00 dns sshd-session[41084]: Invalid user operator from 125.130.102.172 port 40626 2026-11-03T16:37:54.630369+01:00 dns sshd-session[41084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.102.172 2026-11-03T16:37:56.291806+01:00 dns sshd-session[41084]: Failed password for invalid user operator from 125.130.102.172 port 40626 ssh2
2026-11-03T09:08:15.445924+00:00 IPAM sshd-session[74867]: Failed password for invalid user User from 125.130.102.172 port 45293 ssh2 2026-11-03T09:12:29.747955+00:00 IPAM sshd-session[74951]: Invalid user user1 from 125.130.102.172 port 55131 2026-11-03T09:12:29.749701+00:00 IPAM sshd-session[74951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.102.172 2026-11-03T09:12:32.187983+00:00 IPAM sshd-session[74951]: Failed password for invalid user user1 from 125.130.102.172 port 55131 ssh2 2026-11-03T09:13:03.996684+00:00 IPAM sshd-session[74955]: Invalid user support from 125.130.102.172 port 47469