This IP address has been reported a total of
17
times from
10 distinct
sources.
106.225.218.135 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-08-13T21:28:58.110398+08:00 VM-0-3-ubuntu sshd[3531026]: Failed password for root from 106.225. ...
show more2026-08-13T21:28:58.110398+08:00 VM-0-3-ubuntu sshd[3531026]: Failed password for root from 106.225.218.135 port 48430 ssh2
2026-08-13T21:28:59.809680+08:00 VM-0-3-ubuntu sshd[3531035]: Invalid user albert from 106.225.218.135 port 51364
...
show less
2026-08-05T23:55:22.229588+08:00 localhost sshd-session[475624]: Invalid user albert from 106.225.21 ...
show more2026-08-05T23:55:22.229588+08:00 localhost sshd-session[475624]: Invalid user albert from 106.225.218.135 port 50470
2026-08-05T23:55:22.339771+08:00 localhost sshd-session[475626]: Invalid user ADMIN from 106.225.218.135 port 50696
2026-08-05T23:55:22.545399+08:00 localhost sshd-session[475632]: Invalid user albert from 106.225.218.135 port 51096
...
show less
2026-08-03T19:18:57.867609+08:00 VM-0-4-ubuntu sshd[3749061]: Failed password for root from 106.225. ...
show more2026-08-03T19:18:57.867609+08:00 VM-0-4-ubuntu sshd[3749061]: Failed password for root from 106.225.218.135 port 48900 ssh2
2026-08-03T19:24:41.472941+08:00 VM-0-4-ubuntu sshd[3750646]: Invalid user albert from 106.225.218.135 port 39890
...
show less
2026-07-22T13:57:15.888316+08:00 self-dedi-wyse-5070-tna sshd-session[1879099]: Invalid user albert ...
show more2026-07-22T13:57:15.888316+08:00 self-dedi-wyse-5070-tna sshd-session[1879099]: Invalid user albert from 106.225.218.135 port 34182
2026-07-22T13:57:16.359193+08:00 self-dedi-wyse-5070-tna sshd-session[1879101]: Invalid user ADMIN from 106.225.218.135 port 34518
2026-07-22T13:57:16.857815+08:00 self-dedi-wyse-5070-tna sshd-session[1879106]: Invalid user albert from 106.225.218.135 port 35570
...
show less
SSH authentication failures over threshold (4/600s). Attempts: user=root src_port=34916; user=unknow ...
show moreSSH authentication failures over threshold (4/600s). Attempts: user=root src_port=34916; user=unknown src_port=36788; user=unknown src_port=53602. Password plaintext is not available in dropbear logs.
show less
SSH authentication failures over threshold (4/600s). Attempts: user=root src_port=34460; user=unknow ...
show moreSSH authentication failures over threshold (4/600s). Attempts: user=root src_port=34460; user=unknown src_port=35336. Password plaintext is not available in dropbear logs.
show less
2026-04-10T17:20:57.564178+02:00 router01.bongen-auto.de sshd[1248479]: Connection closed by authent ...
show more2026-04-10T17:20:57.564178+02:00 router01.bongen-auto.de sshd[1248479]: Connection closed by authenticating user root 106.225.218.135 port 44286 [preauth]
2026-04-10T17:21:00.965563+02:00 router01.bongen-auto.de sshd[1248482]: Invalid user albert from 106.225.218.135 port 50988
2026-04-10T17:21:01.170177+02:00 router01.bongen-auto.de sshd[1248482]: Connection closed by invalid user albert 106.225.218.135 port 50988 [preauth]
2026-04-10T17:21:03.476852+02:00 router01.bongen-auto.de sshd[1248486]: Connection closed by authenticating user root 106.225.218.135 port 35108 [preauth]
2026-04-10T17:21:06.060655+02:00 router01.bongen-auto.de sshd[1248560]: Connection closed by authenticating user root 106.225.218.135 port 43092 [preauth]
show less
2026-04-07T23:47:04.829943+08:00 VM-8-9-debian sshd[2393388]: Invalid user albert from 106.225.218.1 ...
show more2026-04-07T23:47:04.829943+08:00 VM-8-9-debian sshd[2393388]: Invalid user albert from 106.225.218.135 port 59592
2026-04-07T23:47:04.872873+08:00 VM-8-9-debian sshd[2393388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.218.135
2026-04-07T23:47:06.502716+08:00 VM-8-9-debian sshd[2393388]: Failed password for invalid user albert from 106.225.218.135 port 59592 ssh2
...
show less
Port Scan
Brute-Force
Showing 1 to
15
of 17 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩