JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.104.43.172

203.104.43.172 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Guangdong province network
Usage Type	Commercial
ASN	AS133774
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Fuzhou, Fujian

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.104.43.172

Whois 203.104.43.172

IP Abuse Reports for 203.104.43.172:

This IP address has been reported a total of 105 times from 57 distinct sources. 203.104.43.172 was first reported on September 15th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-11-11 23:58:40 (7 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.43.172	SSH
🇨🇳 ThreatBook.io	2025-11-02 23:47:11 (7 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.43.172	Brute-Force
🇨🇳 ThreatBook.io	2025-10-28 23:41:37 (7 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.43.172	Brute-Force
🇳🇱 Selckie	2025-10-28 21:17:21 (7 months ago)	fail2ban: SSH Brute-Force	Brute-Force SSH
🇬🇧 [email protected]	2025-10-27 00:55:26 (7 months ago)	...	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-26 23:14:52 (7 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.43.172	SSH
🇦🇺 marshy.com.au	2025-10-23 03:42:36 (7 months ago)	(sshd) Failed SSH login from 203.104.43.172 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 203.104.43.172 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Oct 23 14:42:23 ded01 sshd[36814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.43.172 user=root Oct 23 14:42:25 ded01 sshd[36814]: Failed password for root from 203.104.43.172 port 56164 ssh2 Oct 23 14:42:28 ded01 sshd[36897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.43.172 user=root Oct 23 14:42:30 ded01 sshd[36897]: Failed password for root from 203.104.43.172 port 57248 ssh2 Oct 23 14:42:32 ded01 sshd[36926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.43.172 user=root show less	Port Scan
🇮🇩 Diskominfo Lumajang	2025-10-17 08:45:02 (8 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=3	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-12 23:42:34 (8 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.43.172	SSH
🇨🇳 Bro Charlie	2025-10-12 04:11:40 (8 months ago)	2025-10-12T12:11:36.918345+08:00 localhost sshd[996964]: pam_unix(sshd:auth): authentication failure ... show more 2025-10-12T12:11:36.918345+08:00 localhost sshd[996964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.43.172 user=root 2025-10-12T12:11:38.931978+08:00 localhost sshd[996964]: Failed password for root from 203.104.43.172 port 48506 ssh2 ... show less	Brute-Force SSH
🇰🇷 ericshim.me	2025-10-11 13:29:27 (8 months ago)	Reported from fail2ban historical logs. (Detected at 2025-10-11 13:29:27)	Brute-Force SSH
🇰🇷 hanb.jp	2025-10-11 00:07:11 (8 months ago)	Oct 11 00:07:05 v4bgp sshd[508455]: Failed password for root from 203.104.43.172 port 57066 ssh2 Oct ... show more Oct 11 00:07:05 v4bgp sshd[508455]: Failed password for root from 203.104.43.172 port 57066 ssh2 Oct 11 00:07:08 v4bgp sshd[508457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.43.172 user=root Oct 11 00:07:10 v4bgp sshd[508457]: Failed password for root from 203.104.43.172 port 57354 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-10 23:29:06 (8 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.43.172	SSH
🇩🇪 club77	2025-10-10 04:38:46 (8 months ago)	2025-10-10T12:38:38.101429+08:00 raindance.club77.org sshd[2543539]: Failed password for root from 2 ... show more 2025-10-10T12:38:38.101429+08:00 raindance.club77.org sshd[2543539]: Failed password for root from 203.104.43.172 port 37660 ssh2 2025-10-10T12:38:40.427972+08:00 raindance.club77.org sshd[2543765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.43.172 user=root 2025-10-10T12:38:41.956198+08:00 raindance.club77.org sshd[2543765]: Failed password for root from 203.104.43.172 port 38526 ssh2 2025-10-10T12:38:43.377720+08:00 raindance.club77.org sshd[2543878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.43.172 user=root 2025-10-10T12:38:45.652938+08:00 raindance.club77.org sshd[2543878]: Failed password for root from 203.104.43.172 port 39164 ssh2 ... show less	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-10-08 07:36:12 (8 months ago)	203.104.43.172 banned on rtr - Threshold reached: 5 failures	SSH

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.120

🇪🇨 186.68.83.104

🇬🇧 172.70.86.213

🇰🇷 118.45.216.173

🇷🇴 80.94.92.168

🇺🇸 74.125.75.87

🇳🇱 45.153.34.195

🇨🇦 178.128.233.72

🇨🇳 175.162.26.71

🇯🇵 150.230.214.236

🇯🇵 111.238.174.6

🇷🇺 95.47.246.223

🇷🇴 80.94.92.177

🇨🇳 58.48.53.254

🇫🇷 51.83.77.144

🇨🇳 49.65.18.118

🇨🇳 1.116.190.153

🇺🇸 200.10.45.23

🇷🇼 197.243.14.52

🇨🇳 120.244.4.144