JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

106.225.138.204

Neutral Activity

Abuse confidence score ?

0% Low Risk

3,452 reports

486 reporters · latest 3 years ago

ISP	CHINANET JIANGXI PROVINCE NETWORK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS134238
Domain Name	bta.net.cn
Country	🇨🇳 China
City	Nanchang, Jiangxi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

106.225.138.204 has been reported 3,452 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 106.225.138.204

Export CSV

This IP address has been reported a total of 3,452 times from 486 distinct sources. 106.225.138.204 was first reported on June 8th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-09-22 00:31:52 (3 years ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.225.138.204 202 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.225.138.204 2023-09-21 00:00:12 ["uname -a"] 2023-09-21 00:00:09 ["uname -a"] 2023-09-21 00:00:12 ["uname -a"] 2023-09-21 00:00:10 ["uname -a"] 2023-09-21 00:00:10 ["uname -a"] show less	Brute-Force
🇨🇳 ThreatBook.io	2023-09-21 00:40:59 (3 years ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/106.225.138.204	SSH
🇩🇪 Inter-Technics.net	2023-09-20 18:54:49 (3 years ago)	Sep 20 20:43:41 inter-technics sshd[2701443]: Failed password for root from 106.225.138.204 port 460 ... show more Sep 20 20:43:41 inter-technics sshd[2701443]: Failed password for root from 106.225.138.204 port 46012 ssh2 Sep 20 20:43:44 inter-technics sshd[2701461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.138.204 user=root Sep 20 20:43:46 inter-technics sshd[2701461]: Failed password for root from 106.225.138.204 port 51864 ssh2 Sep 20 20:45:56 inter-technics sshd[2701979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.138.204 user=root Sep 20 20:45:59 inter-technics sshd[2701979]: Failed password for root from 106.225.138.204 port 43550 ssh2 ... show less	Brute-Force
🇩🇪 Inter-Technics.net	2023-09-20 18:41:49 (3 years ago)	Sep 20 20:32:48 inter-technics sshd[2698680]: Failed password for root from 106.225.138.204 port 587 ... show more Sep 20 20:32:48 inter-technics sshd[2698680]: Failed password for root from 106.225.138.204 port 58704 ssh2 Sep 20 20:32:51 inter-technics sshd[2698698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.138.204 user=root Sep 20 20:32:53 inter-technics sshd[2698698]: Failed password for root from 106.225.138.204 port 38086 ssh2 Sep 20 20:32:56 inter-technics sshd[2698716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.138.204 user=root Sep 20 20:32:58 inter-technics sshd[2698716]: Failed password for root from 106.225.138.204 port 45762 ssh2 ... show less	Brute-Force
🇺🇸 z3rg	2023-09-20 18:40:21 (3 years ago)	2023-09-20T18:40:10.234058vps-331c9132.vps.ovh.us sshd[1574313]: Failed password for root from 106.2 ... show more 2023-09-20T18:40:10.234058vps-331c9132.vps.ovh.us sshd[1574313]: Failed password for root from 106.225.138.204 port 47712 ssh2 2023-09-20T18:40:13.110268vps-331c9132.vps.ovh.us sshd[1574315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.138.204 user=root 2023-09-20T18:40:14.831201vps-331c9132.vps.ovh.us sshd[1574315]: Failed password for root from 106.225.138.204 port 36008 ssh2 2023-09-20T18:40:18.084867vps-331c9132.vps.ovh.us sshd[1574317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.138.204 user=root 2023-09-20T18:40:20.160918vps-331c9132.vps.ovh.us sshd[1574317]: Failed password for root from 106.225.138.204 port 43186 ssh2 ... show less	Brute-Force
🇷🇴 www.hazi.ro	2023-09-20 18:14:54 (3 years ago)	[2023-09-20 21:14:54] SSH Bruteforce Attack	Brute-Force SSH
Anonymous	2023-09-20 18:11:41 (3 years ago)	2023-09-20T20:11:40.596284ellie.*.de sshd[531126]: User root from 106.225.138.204 not allowed beca ... show more 2023-09-20T20:11:40.596284ellie.*.de sshd[531126]: User root from 106.225.138.204 not allowed because not listed in AllowUsers show less	Brute-Force SSH
🇬🇧 dwmp	2023-09-20 17:58:43 (3 years ago)	Sep 20 19:58:37 trace sshd[2464511]: refused connect from 106.225.138.204 (106.225.138.204) Sep 20 1 ... show more Sep 20 19:58:37 trace sshd[2464511]: refused connect from 106.225.138.204 (106.225.138.204) Sep 20 19:58:37 trace sshd[2464512]: refused connect from 106.225.138.204 (106.225.138.204) Sep 20 19:58:42 trace sshd[2464514]: refused connect from 106.225.138.204 (106.225.138.204) ... show less	Brute-Force SSH
🇰🇷 winter	2023-09-20 17:48:45 (3 years ago)	Unauthorized connection attempt detected from IP address 106.225.138.204 to port 22 (vortex) [k]	Brute-Force SSH
🇰🇷 winter	2023-09-20 17:33:24 (3 years ago)	Unauthorized connection attempt detected from IP address 106.225.138.204 to port 22 (vortex) [t]	Brute-Force SSH
🇰🇷 winter	2023-09-20 17:15:12 (3 years ago)	Unauthorized connection attempt detected from IP address 106.225.138.204 to port 22 (vortex) [a]	Brute-Force SSH
🇺🇸 RAP	2023-09-20 16:07:56 (3 years ago)	2023-09-20 16:07:56 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇬🇧 CRSSkynet	2023-09-20 15:43:25 (3 years ago)	Sep 20 16:42:53 DVSwitch-GM0WUR sshd[15188]: Failed password for root from 106.225.138.204 port 4099 ... show more Sep 20 16:42:53 DVSwitch-GM0WUR sshd[15188]: Failed password for root from 106.225.138.204 port 40998 ssh2 ... show less	Brute-Force SSH
🇩🇪 m2jest1c	2023-09-20 15:42:47 (3 years ago)	2023-09-20T11:42:47.311335-04:00 debian-8gb-ash-1 sshd[2272009]: Connection closed by authenticating ... show more 2023-09-20T11:42:47.311335-04:00 debian-8gb-ash-1 sshd[2272009]: Connection closed by authenticating user root 106.225.138.204 port 37746 [preauth] ... show less	Brute-Force SSH
🇬🇧 ISPLtd	2023-09-20 15:20:19 (3 years ago)	Sep 20 09:21:25 SRC=106.225.138.204 PROTO=TCP SPT=42970 DPT=22 SYN Sep 20 09:21:26 SRC=106.225.138.2 ... show more Sep 20 09:21:25 SRC=106.225.138.204 PROTO=TCP SPT=42970 DPT=22 SYN Sep 20 09:21:26 SRC=106.225.138.204 PROTO=TCP SPT=42970 DPT=22 SYN ... show less	Port Scan SSH

Showing 1 to 15 of 3452 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.205.100.72

🇺🇸 165.232.60.36

🇺🇸 147.185.132.204

🇲🇲 202.157.190.91

🇬🇧 200.138.46.225

🇺🇸 199.165.159.136

🇺🇸 162.216.150.81

🇧🇷 147.15.110.51

🇨🇦 142.44.228.162

🇺🇸 136.71.244.58

🇺🇸 134.33.66.248

🇮🇳 122.187.228.233

🇨🇳 116.179.32.93

🇺🇦 95.47.115.141

🇫🇷 91.231.89.9

🇨🇦 85.217.149.55

🇨🇦 85.217.149.13

🇫🇷 85.217.140.1

🇮🇳 66.116.253.71

🇺🇸 65.110.40.133