JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 125.87.94.254

125.87.94.254 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Chongqing province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	cta.cq.cn
Country	🇨🇳 China
City	Chongqing, Chongqing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 125.87.94.254

Whois 125.87.94.254

IP Abuse Reports for 125.87.94.254:

This IP address has been reported a total of 14 times from 12 distinct sources. 125.87.94.254 was first reported on July 21st 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-06-12 12:55:13 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇹 urnilxfgbez	2025-03-05 23:45:00 (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇿 lp	2025-03-05 19:18:56 (1 year ago)	SSH Brute force: 3 attempts were recorded from 125.87.94.254 2025-03-05T19:40:05+01:00 Connection cl ... show more SSH Brute force: 3 attempts were recorded from 125.87.94.254 2025-03-05T19:40:05+01:00 Connection closed by authenticating user root 125.87.94.254 port 48000 [preauth] 2025-03-05T19:40:49+01:00 Connection closed by authenticating user root 125.87.94.254 port 50383 [preauth] 2025-03-05T19:40:56+01:00 Connection closed by authenticating user root 125.87.94.254 port 42199 [preauth] show less	Brute-Force SSH
🇺🇸 RAP	2025-03-05 18:39:11 (1 year ago)	2025-03-05 18:39:11 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇨🇳 CGT Software Webmaster	2025-01-23 04:52:20 (1 year ago)	2025-01-23T04:52:12.377103+00:00 CVM51718 sshd[367516]: Failed password for root from 125.87.94.254 ... show more 2025-01-23T04:52:12.377103+00:00 CVM51718 sshd[367516]: Failed password for root from 125.87.94.254 port 38392 ssh2 2025-01-23T04:52:17.129577+00:00 CVM51718 sshd[367520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.94.254 user=root 2025-01-23T04:52:19.533782+00:00 CVM51718 sshd[367520]: Failed password for root from 125.87.94.254 port 36225 ssh2 ... show less	Port Scan Brute-Force
🇬🇧 djboddington	2025-01-23 04:32:20 (1 year ago)	(sshd) Failed SSH login from 125.87.94.254 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 125.87.94.254 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: 2025-01-23T04:32:07.740323+00:00 dag sshd[242355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.94.254 user=root 2025-01-23T04:32:10.028383+00:00 dag sshd[242355]: Failed password for root from 125.87.94.254 port 55956 ssh2 2025-01-23T04:32:12.808293+00:00 dag sshd[242399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.94.254 user=root 2025-01-23T04:32:15.453546+00:00 dag sshd[242399]: Failed password for root from 125.87.94.254 port 58804 ssh2 2025-01-23T04:32:18.000060+00:00 dag sshd[242491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.94.254 user=root show less	Brute-Force
🇺🇸 MPL	2024-11-12 15:18:56 (1 year ago)	tcp/22 (4 or more attempts)	Port Scan
Anonymous	2024-11-12 15:03:15 (1 year ago)	sshd	Brute-Force SSH
Anonymous	2024-11-12 14:59:40 (1 year ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 chris_yooo	2023-09-12 14:47:28 (2 years ago)	Sep 12 14:47:24 loveeutravel postfix/smtpd[775199]: warning: unknown[125.87.94.254]: SASL LOGIN auth ... show more Sep 12 14:47:24 loveeutravel postfix/smtpd[775199]: warning: unknown[125.87.94.254]: SASL LOGIN authentication failed: authentication failure Sep 12 14:47:28 loveeutravel postfix/smtpd[775199]: warning: unknown[125.87.94.254]: SASL LOGIN authentication failed: authentication failure ... show less	Spoofing Brute-Force
🇿🇦 IrisFlower	2023-04-13 19:53:03 (3 years ago)	Unauthorized connection attempt detected from IP address 125.87.94.254 to port 443 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2023-04-07 20:11:07 (3 years ago)	Unauthorized connection attempt detected from IP address 125.87.94.254 to port 443 [J]	Port Scan Hacking
🇲🇾 syokadmin	2023-03-18 23:23:59 (3 years ago)	125.87.94.254 (CN/China/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 36 ... show more 125.87.94.254 (CN/China/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇩🇪 www.blocklist.de	2021-07-21 17:05:49 (4 years ago)	Lines containing failures of 125.87.94.254 (max 1000) Jul 21 22:58:31 dns01 sshd[1884783]: Invalid u ... show more Lines containing failures of 125.87.94.254 (max 1000) Jul 21 22:58:31 dns01 sshd[1884783]: Invalid user oracle from 125.87.94.254 port 57598 Jul 21 22:58:31 dns01 sshd[1884783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.94.254 Jul 21 22:58:33 dns01 sshd[1884783]: Failed password for invalid user oracle from 125.87.94.254 port 57598 ssh2 Jul 21 22:58:34 dns01 sshd[1884783]: Received disconnect from 125.87.94.254 port 57598:11: Bye Bye [preauth] Jul 21 22:58:34 dns01 sshd[1884783]: Disconnected from invalid user oracle 125.87.94.254 port 57598 [preauth] Jul 21 23:01:03 dns01 sshd[1885005]: Invalid user acct from 125.87.94.254 port 59572 Jul 21 23:01:03 dns01 sshd[1885005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.87.94.254 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.87.94.254 show less	FTP Brute-Force Hacking

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.228.203.3

🇷🇴 193.46.255.86

🇨🇳 183.222.14.242

🇨🇳 116.179.37.199

🇰🇪 105.27.148.94

🇧🇬 78.128.114.46

🇱🇻 45.131.102.56

🇸🇬 43.128.122.242

🇺🇸 185.223.152.103

🇺🇸 185.180.141.35

🇵🇪 181.66.151.144

🇰🇷 119.192.249.195

🇨🇳 106.12.172.151

🇷🇺 90.151.171.108

🇳🇱 83.168.106.26

🇺🇸 38.148.249.2

🇺🇸 216.25.89.144

🇩🇪 185.30.32.114

🇺🇸 162.216.149.16

🇧🇩 103.73.107.166