JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 43.254.106.125

43.254.106.125 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 100%: ?

100%

ISP	Shanghai ruisu Network Technology Co.,Ltd
Usage Type	Fixed Line ISP
ASN	AS4812
Domain Name	51idc.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 43.254.106.125

Whois 43.254.106.125

IP Abuse Reports for 43.254.106.125:

This IP address has been reported a total of 67 times from 49 distinct sources. 43.254.106.125 was first reported on July 4th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-10 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇪🇸 matatunos	2026-07-10 00:30:23 (2 days ago)	Honeypot favala.es: 1 intentos de login SSH por fuerza bruta; 1 comandos ejecutados tras acceder en ... show more Honeypot favala.es: 1 intentos de login SSH por fuerza bruta; 1 comandos ejecutados tras acceder en 24h. Reporte automático. show less	Brute-Force SSH Hacking
🇳🇬 SiteHUB Agency	2026-07-09 23:58:47 (2 days ago)	Brute force activities detected and blocked	Brute-Force
🇧🇬 MazenHost	2026-07-09 21:25:29 (2 days ago)	Jul 10 00:25:10 LIVROLEPLAY sshd[557676]: Failed password for root from 43.254.106.125 port 53498 ss ... show more Jul 10 00:25:10 LIVROLEPLAY sshd[557676]: Failed password for root from 43.254.106.125 port 53498 ssh2 Jul 10 00:25:12 LIVROLEPLAY sshd[557678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.106.125 user=root Jul 10 00:25:15 LIVROLEPLAY sshd[557678]: Failed password for root from 43.254.106.125 port 53508 ssh2 Jul 10 00:25:21 LIVROLEPLAY sshd[557680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.106.125 user=root Jul 10 00:25:23 LIVROLEPLAY sshd[557680]: Failed password for root from 43.254.106.125 port 54856 ssh2 Jul 10 00:25:26 LIVROLEPLAY sshd[557682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.106.125 user=root Jul 10 00:25:28 LIVROLEPLAY sshd[557682]: Failed password for root from 43.254.106.125 port 36706 ssh2 ... show less	Brute-Force SSH
🇨🇿 plzenskypruvodce.cz	2026-07-09 16:52:38 (2 days ago)	2026-07-09T18:52:35.661096+02:00 phishsim sshd[125737]: Invalid user user from 43.254.106.125 port 5 ... show more 2026-07-09T18:52:35.661096+02:00 phishsim sshd[125737]: Invalid user user from 43.254.106.125 port 54486 2026-07-09T18:52:37.938136+02:00 phishsim sshd[125740]: Invalid user user from 43.254.106.125 port 54496 ... show less	Web App Attack
🇺🇸 MPL	2026-07-09 14:43:33 (2 days ago)	tcp/22 (10 or more attempts)	Port Scan
Anonymous	2026-07-09 14:30:11 (2 days ago)	ez: User root from 43.254.106.125 not allowed because not listed in AllowUsers ez: User root from 43 ... show more ez: User root from 43.254.106.125 not allowed because not listed in AllowUsers ez: User root from 43.254.106.125 not allowed because not listed in AllowUsers show less	Brute-Force SSH
🇹🇷 SeczarSecureOps	2026-07-09 12:06:36 (2 days ago)	Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5 ... show more Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (5 events in 5min) at 2026-07-09 12:06 show less	Web App Attack
🇺🇸 vertali	2026-07-09 10:46:37 (2 days ago)	CSF/LFD blocked 43.254.106.125 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH ... show more CSF/LFD blocked 43.254.106.125 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 43.254.106.125 (CN/China/-): 5 in the last 3600 secs. Evidence: Jul 9 05:46:21 paladin sshd-session[1115935]: Invalid user debian from 43.254.106.125 port 45216 show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-09 08:20:36 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇮 GG UNLUCKI	2026-07-09 01:27:49 (3 days ago)	SSH brute-force attempt detected by Fail2Ban. Invalid login attempt against sshd.	Brute-Force SSH
🇩🇪 fynndows.de	2026-07-09 00:51:25 (3 days ago)	2026-07-09T00:51:22.786532+00:00 fynn-epyc3 sshd-session[23429]: pam_unix(sshd:auth): authentication ... show more 2026-07-09T00:51:22.786532+00:00 fynn-epyc3 sshd-session[23429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.106.125 user=root 2026-07-09T00:51:24.268946+00:00 fynn-epyc3 sshd-session[23429]: Failed password for root from 43.254.106.125 port 59856 ssh2 ... show less	Brute-Force SSH
🇭🇺 Istvan Rabel	2026-07-09 00:22:17 (3 days ago)	2026-07-09T02:22:12.984948+02:00 dolores sshd[2027024]: Invalid user user from 43.254.106.125 port 4 ... show more 2026-07-09T02:22:12.984948+02:00 dolores sshd[2027024]: Invalid user user from 43.254.106.125 port 49684 2026-07-09T02:22:14.931160+02:00 dolores sshd[2027026]: Invalid user user from 43.254.106.125 port 49064 2026-07-09T02:22:16.889544+02:00 dolores sshd[2027029]: Invalid user user from 43.254.106.125 port 49070 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-07-08 22:45:00 (3 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 Cirno	2026-07-08 21:29:35 (3 days ago)	2026-07-08T21:29:29.653527+00:00 cirno sshd[435236]: Failed password for root from 43.254.106.125 po ... show more 2026-07-08T21:29:29.653527+00:00 cirno sshd[435236]: Failed password for root from 43.254.106.125 port 53162 ssh2 2026-07-08T21:29:32.265451+00:00 cirno sshd[435238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.106.125 user=root 2026-07-08T21:29:34.575610+00:00 cirno sshd[435238]: Failed password for root from 43.254.106.125 port 53176 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 45.66.35.31

🇳🇱 213.177.179.80

🇩🇪 212.132.120.41

🇺🇸 205.210.31.26

🇮🇷 194.5.176.86

🇳🇮 190.143.244.210

🇭🇰 152.32.252.233

🇻🇳 152.32.223.215

🇩🇪 82.39.212.220

🇺🇸 66.132.172.244

🇺🇸 45.146.54.54

🇺🇸 45.33.105.182

🇳🇱 23.254.227.64

🇸🇪 212.113.102.0

🇺🇸 172.253.210.29

🇭🇰 165.154.41.232

🇺🇸 154.217.253.190

🇲🇺 102.117.39.73

🇺🇸 85.254.174.217

🇳🇱 81.19.216.91