This IP address has been reported a total of
8
times from
8 distinct
sources.
43.139.4.252 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 16 07:07:46 spidey sshd-session[1962341]: pam_unix(sshd:auth): authentication failure; logname= ...
show moreJun 16 07:07:46 spidey sshd-session[1962341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.139.4.252
Jun 16 07:07:48 spidey sshd-session[1962341]: Failed password for invalid user ceo from 43.139.4.252 port 53694 ssh2
Jun 16 07:14:35 spidey sshd-session[1962652]: Invalid user user1 from 43.139.4.252 port 59908
...
show less
(sshd) Failed SSH login from 43.139.4.252 (CN/China/-): 3 in the last 3600 secs; IP: 43.139.4.252; P ...
show more(sshd) Failed SSH login from 43.139.4.252 (CN/China/-): 3 in the last 3600 secs; IP: 43.139.4.252; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2026-06-16T14:59:21.444339+02:00 vps1 sshd-session[840078]: Invalid user admin from 43.139.4.252 port 33126 2026-06-16T15:06:35.396954+02:00 vps1 sshd-session[842064]: Invalid user menu from 43.139.4.252 port 47836 2026-06-16T15:10:20.792577+02:00 vps1 sshd-session[843138]: Invalid user podpiska from 43.139.4.252 port 50534
show less
SSH Brute force: 9 attempts were recorded from 43.139.4.252
2026-06-16T10:39:38+02:00 Invalid user a ...
show moreSSH Brute force: 9 attempts were recorded from 43.139.4.252
2026-06-16T10:39:38+02:00 Invalid user andreacelo from 43.139.4.252 port 59920
2026-06-16T10:45:01+02:00 Invalid user postgres from 43.139.4.252 port 38910
2026-06-16T10:50:39+02:00 Invalid user uploader from 43.139.4.252 port 41694
2026-06-16T10:56:29+02:00 Disconnected from authenticating user root 43.139.4.252 port 35160 [preauth]
2026-06-16T10:57:52+02:00 Invalid user admin from 43.139.4.252 port 60186
2026-06-16T11:01:51+02:00 Invalid user filezilla from 43.139.4.252 port 46442
2026-06-16T11:08:51+02:00 Disconnected from authenticating user root 43.139.4.252 port 50744 [preauth]
2026-06-16T11:10:12+02:00 Invalid user mn from 43.139.4.252 port 45104
2026-06-16T11:11:24+02:00 Invalid user ubuntu from 43.139.4.252 port 37040
show less
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show moreIM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less