AbuseIPDB » 125.94.71.207

125.94.71.207 was found in our database!

This IP was reported 13,018 times. Confidence of Abuse is 85%: ?

85%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 125.94.71.207

Whois 125.94.71.207

IP Abuse Reports for 125.94.71.207:

This IP address has been reported a total of 13,018 times from 1,419 distinct sources. 125.94.71.207 was first reported on October 25th 2023, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Porter	2025-07-15 11:32:33 (15 hours ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-07-02 20:01:43 (1 week ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-06-20 01:47:50 (3 weeks ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-06-17 11:44:40 (4 weeks ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-06-10 11:25:08 (1 month ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
rtbh.com.tr	2025-06-06 20:07:00 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-06-05 20:06:59 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ThreatBook.io	2025-06-05 00:25:45 (1 month ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/125.94.71.207	SSH
rtbh.com.tr	2025-06-04 20:06:59 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
tinect	2025-06-04 12:16:17 (1 month ago)	authentication failure	Brute-Force SSH
ghostwarriors	2025-06-04 09:20:27 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
trivox.sh	2025-06-04 03:39:38 (1 month ago)	Jun 4 03:32:45 honey3 sshd[1013667]: Failed password for invalid user tunnel from 125.94.71.207 por ... show moreJun 4 03:32:45 honey3 sshd[1013667]: Failed password for invalid user tunnel from 125.94.71.207 port 54050 ssh2 Jun 4 03:32:46 honey3 sshd[1013667]: Disconnected from invalid user tunnel 125.94.71.207 port 54050 [preauth] Jun 4 03:39:33 honey3 sshd[1014059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.71.207 user=root Jun 4 03:39:35 honey3 sshd[1014059]: Failed password for root from 125.94.71.207 port 54646 ssh2 Jun 4 03:39:38 honey3 sshd[1014059]: Disconnected from authenticating user root 125.94.71.207 port 54646 [preauth] ... show less	Brute-Force SSH
servewaitaha.net.nz	2025-06-04 03:38:21 (1 month ago)	2025-06-04T15:31:31+12:00 sshd[1001058]: Failed password for invalid user svn from 125.94.71.207 po ... show more2025-06-04T15:31:31+12:00 sshd[1001058]: Failed password for invalid user svn from 125.94.71.207 port 60482 ssh2 2025-06-04T15:38:17+12:00 sshd[1001093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.71.207 user=root 2025-06-04T15:38:20+12:00 sshd[1001093]: Failed password for root from 125.94.71.207 port 32832 ssh2 ... show less	Brute-Force SSH
hoek	2025-06-04 02:23:50 (1 month ago)	2025-06-04T04:19:49.987908+02:00 0ut3r sshd[718294]: pam_unix(sshd:auth): authentication failure; lo ... show more2025-06-04T04:19:49.987908+02:00 0ut3r sshd[718294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.71.207 user=root 2025-06-04T04:19:51.603345+02:00 0ut3r sshd[718294]: Failed password for invalid user root from 125.94.71.207 port 37378 ssh2 2025-06-04T04:23:49.980191+02:00 0ut3r sshd[718335]: User root from 125.94.71.207 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Anonymous	2025-06-04 00:48:10 (1 month ago)	Jun 3 20:36:45 vps sshd[28594]: Failed password for root from 125.94.71.207 port 53670 ssh2 J ... show moreJun 3 20:36:45 vps sshd[28594]: Failed password for root from 125.94.71.207 port 53670 ssh2 Jun 3 20:42:34 vps sshd[28740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.71.207 user=root Jun 3 20:42:36 vps sshd[28740]: Failed password for root from 125.94.71.207 port 47922 ssh2 Jun 3 20:48:08 vps sshd[28782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.94.71.207 user=root Jun 3 20:48:10 vps sshd[28782]: Failed password for root from 125.94.71.207 port 42214 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩