This IP address has been reported a total of
101
times from
78 distinct
sources.
31.42.125.206 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW (TCP on 23)
Source port: 43515
TTL: 44
Packet length: 40
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 23)
Source port: 43515
TTL: 44
Packet length: 40
TOS: 0x00
This report (for 31.42.125.206) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-07T06:44:12.118999+00:00 instance-20241019-1127 sshd[2824995]: Connection closed by 31.42.12 ...
show more2026-06-07T06:44:12.118999+00:00 instance-20241019-1127 sshd[2824995]: Connection closed by 31.42.125.206 port 52014 [preauth]
...
show less
Report 2439999 with IP 3487566 for SSH brute-force attack by source 3482224 via ssh-honeypot/0.2.1+h ...
show moreReport 2439999 with IP 3487566 for SSH brute-force attack by source 3482224 via ssh-honeypot/0.2.1+http
show less
06/07/2026-13:29:49.485381 [Drop] [**] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - W ...
show more06/07/2026-13:29:49.485381 [Drop] [**] [1:921373:1] Suricata Dibuat Gemini TCP SYN port scanner - Win 65535 [**] [Classification: (null)] [Priority: 3] {TCP} 31.42.125.206:40812 -> 103.166.156.58:23
...
show less
Blocked by UFW (TCP on 22)
Source port: 39845
TTL: 44
Packet length: 40
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 39845
TTL: 44
Packet length: 40
TOS: 0x00
This report (for 31.42.125.206) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-07T07:59:13.701951+02:00 monitoring.infra.crazycraftland.net sshd-session[3022559]: Invalid ...
show more2026-06-07T07:59:13.701951+02:00 monitoring.infra.crazycraftland.net sshd-session[3022559]: Invalid user admin from 31.42.125.206 port 59712
2026-06-07T08:04:25.673708+02:00 monitoring.infra.crazycraftland.net sshd-session[3023624]: Invalid user orangepi from 31.42.125.206 port 59084
2026-06-07T08:09:20.840660+02:00 monitoring.infra.crazycraftland.net sshd-session[3024563]: User root from 31.42.125.206 not allowed because not listed in AllowUsers
...
show less
Jun 7 07:38:45 bongen-tmp-rt.local sshd[1587029]: Connection closed by invalid user user 31.42.125. ...
show moreJun 7 07:38:45 bongen-tmp-rt.local sshd[1587029]: Connection closed by invalid user user 31.42.125.206 port 44464 [preauth]
Jun 7 07:44:13 bongen-tmp-rt.local sshd[1587667]: Connection closed by authenticating user root 31.42.125.206 port 38278 [preauth]
Jun 7 07:49:35 bongen-tmp-rt.local sshd[1588176]: Connection closed by authenticating user admin 31.42.125.206 port 42158 [preauth]
Jun 7 07:54:58 bongen-tmp-rt.local sshd[1588693]: Invalid user cirros from 31.42.125.206 port 41508
Jun 7 07:54:59 bongen-tmp-rt.local sshd[1588693]: Connection closed by invalid user cirros 31.42.125.206 port 41508 [preauth]
show less
2026-06-07T07:45:29.947241+02:00 smol sshd-session[3998612]: Invalid user orangepi from 31.42.125.20 ...
show more2026-06-07T07:45:29.947241+02:00 smol sshd-session[3998612]: Invalid user orangepi from 31.42.125.206 port 55032
2026-06-07T07:45:29.960166+02:00 smol sshd-session[3998612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.42.125.206
2026-06-07T07:45:31.757897+02:00 smol sshd-session[3998612]: Failed password for invalid user orangepi from 31.42.125.206 port 55032 ssh2
2026-06-07T07:50:41.274071+02:00 smol sshd-session[4004615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.42.125.206 user=root
2026-06-07T07:50:42.632362+02:00 smol sshd-session[4004615]: Failed password for root from 31.42.125.206 port 53300 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 101 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩