JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

1.95.220.212

Neutral Activity

Abuse Confidence Score

0% Low Risk

140 reports

96 reporters · latest 11 months ago

ISP: Beijing Teletron Telecom Engineering Co., Ltd.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS55990
Domain Name: drpeng.com.cn
Country: 🇨🇳 China
City: Guiyang, Guizhou

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

1.95.220.212 has been reported 140 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

140 from 96 distinct reporters

First reported

November 4th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-10 01:32:33 UTC · (11 months ago)	$f2bV_matches	Brute-Force SSH
🇫🇷 billy549	2025-12-05 15:51:36 UTC · (11 months ago)	2025-12-05T15:50:59.110581+00:00 vps.billy.wales sshd[481625]: Failed password for root from 1.95.220.212 port 37606 ssh2 2025-12-05T15:51:05.096048+00:00 vps.billy.wales sshd[481627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more 2025-12-05T15:50:59.110581+00:00 vps.billy.wales sshd[481625]: Failed password for root from 1.95.220.212 port 37606 ssh2 2025-12-05T15:51:05.096048+00:00 vps.billy.wales sshd[481627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.220.212 user=root 2025-12-05T15:51:07.536056+00:00 vps.billy.wales sshd[481627]: Failed password for root from 1.95.220.212 port 37612 ssh2 2025-12-05T15:51:33.436688+00:00 vps.billy.wales sshd[481629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.220.212 user=root 2025-12-05T15:51:35.857821+00:00 vps.billy.wales sshd[481629]: Failed password for root from 1.95.220.212 port 49770 ssh2 ... show less	Brute-Force SSH
🇧🇪 sid3windr	2025-12-05 14:33:16 UTC · (11 months ago)	SSH port scan (Tarpitted for 20s, wasted 24B)	Port Scan SSH
🇺🇸 bigscoots.com	2025-12-05 14:21:33 UTC · (11 months ago)	(sshd) Failed SSH login from 1.95.220.212 (CN/China/ecs-1-95-220-212.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 5 08:21:07 16162 sshd[16453]: Did not receive identification string from 1.9 ... show more (sshd) Failed SSH login from 1.95.220.212 (CN/China/ecs-1-95-220-212.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 5 08:21:07 16162 sshd[16453]: Did not receive identification string from 1.95.220.212 port 48636 Dec 5 08:21:09 16162 sshd[16454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.220.212 user=root Dec 5 08:21:10 16162 sshd[16454]: Failed password for root from 1.95.220.212 port 48648 ssh2 Dec 5 08:21:13 16162 sshd[16458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.220.212 user=root Dec 5 08:21:15 16162 sshd[16458]: Failed password for root from 1.95.220.212 port 48650 ssh2 show less	Brute-Force SSH
🇺🇸 drodrig	2025-11-26 08:19:01 UTC · (11 months ago)	CrowdSec triggered: %!s(*string=0xc00b4a8450) (0 events)	Brute-Force
Anonymous	2025-11-26 06:59:53 UTC · (11 months ago)	$f2bV_matches	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-11-20 20:10:02 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 grassau.com	2025-11-20 07:48:41 UTC · (11 months ago)	(sshd) Failed SSH login from 1.95.220.212 (CN/China/ecs-1-95-220-212.compute.hwclouds-dns.com)	Brute-Force SSH
🇳🇱 jonathanselea.se	2025-11-20 06:19:24 UTC · (11 months ago)	"Exessive login attempts"	Brute-Force
🇺🇸 bigscoots.com	2025-11-20 06:02:47 UTC · (11 months ago)	1.95.220.212 (CN/China/ecs-1-95-220-212.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 20 00:02:37 15151 sshd[13117]: pam_unix(sshd:auth): authe ... show more 1.95.220.212 (CN/China/ecs-1-95-220-212.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 20 00:02:37 15151 sshd[13117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.220.212 user=root Nov 20 00:01:35 15151 sshd[13044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.235.118.35 user=root Nov 20 00:01:36 15151 sshd[13044]: Failed password for root from 89.235.118.35 port 50004 ssh2 Nov 20 00:01:39 15151 sshd[13046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.65.151.22 user=root Nov 20 00:01:42 15151 sshd[13046]: Failed password for root from 176.65.151.22 port 46316 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
Anonymous	2025-11-20 05:23:32 UTC · (11 months ago)	Automated abuse report by SpeedIT Security Team	Brute-Force Exploited Host SSH
🇵🇱 Wepted	2025-11-20 04:36:08 UTC · (11 months ago)	2025-11-20T05:31:54.620237+01:00 axisverse sshd-session[709077]: Invalid user ubuntu from 1.95.220.212 port 56194 2025-11-20T05:34:20.203970+01:00 axisverse sshd-session[715415]: Invalid user vr from 1.95.220.212 port 56966 2025-11-20T05:36:08.232118 ... show more 2025-11-20T05:31:54.620237+01:00 axisverse sshd-session[709077]: Invalid user ubuntu from 1.95.220.212 port 56194 2025-11-20T05:34:20.203970+01:00 axisverse sshd-session[715415]: Invalid user vr from 1.95.220.212 port 56966 2025-11-20T05:36:08.232118+01:00 axisverse sshd-session[720378]: Invalid user minikube from 1.95.220.212 port 33688 ... show less	Brute-Force SSH
🇺🇸 NeverBehave	2025-11-20 04:36:01 UTC · (11 months ago)	Fail2ban Triggered	Brute-Force SSH
🇩🇪 nicosqc	2025-11-20 04:03:11 UTC · (11 months ago)	Invalid user localhost from 1.95.220.212 port 42514	Brute-Force SSH
🇩🇪 nicosqc	2025-11-20 04:03:11 UTC · (11 months ago)	Invalid user localhost from 1.95.220.212 port 42514	Brute-Force SSH

Showing 1 to 15 of 140 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.242

🇳🇱 195.178.110.159

🇵🇱 172.64.198.67

🇵🇱 172.64.198.59

🇦🇺 45.67.96.32

🇳🇱 195.178.110.135

🇳🇱 195.178.110.108

🇷🇴 193.46.255.86

🇨🇱 186.189.105.82

🇵🇱 172.64.198.58

🇵🇱 172.64.198.54

🇺🇸 104.171.28.160

🇳🇱 64.205.72.188

🇺🇸 2400:cb00:650:1000:906f:79f0:56a1:7569

🇩🇪 209.38.248.17

🇳🇱 195.178.110.105

🇳🇱 195.178.110.102

🇵🇱 172.64.198.50

🇵🇱 172.64.198.47

🇵🇱 172.64.198.5