JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 85.7.125.197

85.7.125.197 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 64%: ?

64%

ISP	Bluewin is an LIR and ISP in Switzerland.
Usage Type	Fixed Line ISP
ASN	AS3303
Hostname(s)	197.125.7.85.dynamic.cust.swisscom.net
Domain Name	bluewin.ch
Country	🇨🇭 Switzerland
City	Reinach, Basel-Landschaft

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 85.7.125.197

Whois 85.7.125.197

IP Abuse Reports for 85.7.125.197:

This IP address has been reported a total of 26 times from 20 distinct sources. 85.7.125.197 was first reported on August 10th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tecnicorioja	2026-08-11 10:01:34 (3 weeks ago)	Failed password for invalid user Aug 11 09:00:39 port [preauth]	Brute-Force SSH
🇩🇪 formality	2026-08-11 07:04:53 (3 weeks ago)	Invalid user wallet from 85.7.125.197 port 59890	Brute-Force SSH
Anonymous	2026-08-11 04:49:44 (3 weeks ago)	85.7.125.197 (CH/Switzerland/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 85.7.125.197 (CH/Switzerland/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Aug 11 00:48:14 server5 sshd[28447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.155.131.250 user=root Aug 11 00:43:04 server5 sshd[25128]: Failed password for root from 80.5.84.6 port 57608 ssh2 Aug 11 00:48:16 server5 sshd[28447]: Failed password for root from 43.155.131.250 port 51970 ssh2 Aug 11 00:48:48 server5 sshd[28783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.182.41 user=root Aug 11 00:48:50 server5 sshd[28783]: Failed password for root from 152.32.182.41 port 55964 ssh2 Aug 11 00:49:39 server5 sshd[29144]: Failed password for root from 85.7.125.197 port 40936 ssh2 IP Addresses Blocked: 43.155.131.250 (JP/Japan/-) 80.5.84.6 (GB/United Kingdom/-) 152.32.182.41 (HK/Hong Kong/-) show less	Brute-Force
🇫🇷 SimonB	2026-08-11 03:47:59 (3 weeks ago)	SSH bruteforce attempt	Brute-Force SSH
🇩🇪 Bigbear3	2026-08-11 03:41:55 (3 weeks ago)	Report-by-bigbear3	Brute-Force SSH
🇸🇪 Mailz1	2026-08-11 02:35:42 (3 weeks ago)	Aug 11 04:35:42 smtp sshd[3099651]: Failed password for invalid user root from 85.7.125.197 port 587 ... show more Aug 11 04:35:42 smtp sshd[3099651]: Failed password for invalid user root from 85.7.125.197 port 58748 ssh2 ... show less	Brute-Force SSH
🇩🇪 formality	2026-08-11 02:19:26 (3 weeks ago)	Invalid user solana from 85.7.125.197 port 58176	Brute-Force SSH
🇩🇪 LRob	2026-08-11 02:10:19 (3 weeks ago)	Unauthorised SSH login attempt	Brute-Force SSH
🇫🇷 tecnicorioja	2026-08-11 02:00:29 (3 weeks ago)	Failed password for invalid user Aug 11 00:22:31 port [preauth]	Brute-Force SSH
🇩🇪 formality	2026-08-11 01:27:33 (3 weeks ago)	Invalid user solana from 85.7.125.197 port 35566	Brute-Force SSH
🇬🇧 adnscom.net	2026-08-11 00:57:04 (3 weeks ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇩🇪 flixie	2026-08-10 23:16:32 (3 weeks ago)	2026-08-11T01:16:31.534120 ***** sshd[962663]: Invalid user devops from 85.7.125.197 port 46478 20 ... show more 2026-08-11T01:16:31.534120 *** sshd[962663]: Invalid user devops from 85.7.125.197 port 46478 2026-08-11T01:16:32.219910 *** sshd[962663]: Connection closed by invalid user devops 85.7.125.197 port 46478 [preauth] 2026-08-11T01:16:32.509840 ***** sshd[962676]: Invalid user solana from 85.7.125.197 port 47222 show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-08-10 20:20:19 (3 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 SANYALnet Labs	2026-08-10 20:02:23 (3 weeks ago)	Aug 10 20:02:16 sanyalnet-oracle-vps2 sshd[3462084]: pam_unix(sshd:auth): authentication failure; lo ... show more Aug 10 20:02:16 sanyalnet-oracle-vps2 sshd[3462084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.7.125.197 Aug 10 20:02:18 sanyalnet-oracle-vps2 sshd[3462084]: Failed none for invalid user postgres from 85.7.125.197 port 55664 ssh2 Aug 10 20:02:22 sanyalnet-oracle-vps2 sshd[3462084]: Failed password for invalid user postgres from 85.7.125.197 port 55664 ssh2 ... show less	Brute-Force
🇩🇪 www.fransveldman.world	2026-08-10 19:56:12 (3 weeks ago)	2026-08-10T19:56:11.102472+00:00 ubuntu sshd[3679197]: Invalid user postgres from 85.7.125.197 port ... show more 2026-08-10T19:56:11.102472+00:00 ubuntu sshd[3679197]: Invalid user postgres from 85.7.125.197 port 39330 2026-08-10T19:56:11.729512+00:00 ubuntu sshd[3679199]: Invalid user blockchain from 85.7.125.197 port 39866 ... show less	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.196.152.139

🇹🇷 2a00:1d34:77ed:f300:445e:11dc:2546:ffb0

🇦🇿 158.181.42.186

🇺🇸 147.185.132.24

🇨🇳 115.231.78.11

🇩🇪 65.111.31.207

🇬🇧 35.203.210.33

🇨🇻 165.90.106.140

🇺🇸 162.241.233.171

🇺🇸 159.223.203.237

🇺🇸 147.185.132.18

🇨🇦 135.19.213.156

🇨🇳 124.66.7.48

🇹🇼 111.70.32.6

🇨🇳 111.26.101.77

🇫🇷 91.231.89.233

🇺🇿 82.215.107.149

🇧🇬 78.128.112.30

🇹🇷 77.245.149.41

🇺🇸 20.124.91.188