This IP address has been reported a total of
33
times from
15 distinct
sources.
201.3.125.53 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-16T02:05:42.831812Z 5713193 [Note] [MY-010926] [Server] Access denied for user 'root'@'201.3 ...
show more2026-09-16T02:05:42.831812Z 5713193 [Note] [MY-010926] [Server] Access denied for user 'root'@'201.3.125.53' (using password: NO)
2026-09-16T02:05:42.977855Z 5713199 [Note] [MY-010926] [Server] Access denied for user 'root'@'201.3.125.53' (using password: NO)
2026-09-16T02:05:42.980775Z 5713200 [Note] [MY-010926] [Server] Access denied for user 'root'@'201.3.125.53' (using password: NO)
...
show less
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to MSSQL port 1433) dete ...
show moreWazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to MSSQL port 1433) detectado de 201.3.125.53
show less
[rede-top188] 09/14/2026-21:14:24.274100, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to m ...
show more[rede-top188] 09/14/2026-21:14:24.274100, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306
show less
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show moreMozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
Client failed challenge verification, marked as suspicious. HTTP request received over TCP on applic ...
show moreClient failed challenge verification, marked as suspicious. HTTP request received over TCP on application ports 80/443. Observed 2026-09-11T15:07:59Z.
show less
[rede-44-49] 09/08/2026-03:58:43.416420, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to MS ...
show more[rede-44-49] 09/08/2026-03:58:43.416420, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433
show less
2026-09-07T13:44:21.402736Z 1881172 [Note] [MY-010926] [Server] Access denied for user 'root'@'201.3 ...
show more2026-09-07T13:44:21.402736Z 1881172 [Note] [MY-010926] [Server] Access denied for user 'root'@'201.3.125.53' (using password: NO)
2026-09-07T13:44:21.525847Z 1881199 [Note] [MY-010926] [Server] Access denied for user 'root'@'201.3.125.53' (using password: NO)
...
show less
[rede-arem1] 09/07/2026-04:33:07.449243, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to MS ...
show more[rede-arem1] 09/07/2026-04:33:07.449243, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433
show less
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to MSSQL port 1433) dete ...
show moreWazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Suspicious inbound to MSSQL port 1433) detectado de 201.3.125.53
show less
Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[27]=3 ...
show moreRepeated requests classified as pathological web bot behavior, for example: /[redacted]?topics[27]=30&topics[37]=67&topics[38]=36&topics[39]=69 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36")
show less
[rede-arem1] 09/05/2026-23:49:03.460557, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to MS ...
show more[rede-arem1] 09/05/2026-23:49:03.460557, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433
show less
[rede-164-29] 09/02/2026-22:38:39.201523, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to M ...
show more[rede-164-29] 09/02/2026-22:38:39.201523, 201.3.125.53, Protocol: 6, ET SCAN Suspicious inbound to MSSQL port 1433
show less
Hacking
Showing 1 to
15
of 33 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩