JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.227.75.197

106.227.75.197 was found in our database!

This IP was reported 1,004 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET JIANGXI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS149837
Domain Name	bta.net.cn
Country	🇨🇳 China
City	Nanchang, Jiangxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.227.75.197

Whois 106.227.75.197

IP Abuse Reports for 106.227.75.197:

This IP address has been reported a total of 1,004 times from 436 distinct sources. 106.227.75.197 was first reported on April 9th 2026, and the most recent report was 36 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ipcop.net	2026-04-16 02:08:14 (1 month ago)	2026-04-16T03:59:11.474347+02:00 gw-de35-01.guestgw.net sshd[616797]: Invalid user ubuntu from 106.2 ... show more 2026-04-16T03:59:11.474347+02:00 gw-de35-01.guestgw.net sshd[616797]: Invalid user ubuntu from 106.227.75.197 port 58526 2026-04-16T03:59:11.838880+02:00 gw-de35-01.guestgw.net sshd[616797]: Disconnected from invalid user ubuntu 106.227.75.197 port 58526 [preauth] 2026-04-16T04:02:35.952158+02:00 gw-de35-01.guestgw.net sshd[617957]: Disconnected from authenticating user root 106.227.75.197 port 57164 [preauth] 2026-04-16T04:08:13.237053+02:00 gw-de35-01.guestgw.net sshd[619812]: Invalid user ftpuser from 106.227.75.197 port 44348 2026-04-16T04:08:13.579383+02:00 gw-de35-01.guestgw.net sshd[619812]: Disconnected from invalid user ftpuser 106.227.75.197 port 44348 [preauth] show less	Brute-Force
🇦🇹 kipfel★	2026-04-16 02:04:38 (1 month ago)	2026-04-16T03:58:25.140421+02:00 nc-vm-rs4kg95-vie sshd-session[2558472]: Invalid user ubuntu from 1 ... show more 2026-04-16T03:58:25.140421+02:00 nc-vm-rs4kg95-vie sshd-session[2558472]: Invalid user ubuntu from 106.227.75.197 port 33098 2026-04-16T04:01:47.220108+02:00 nc-vm-rs4kg95-vie sshd-session[2559209]: Invalid user frappe from 106.227.75.197 port 43206 2026-04-16T04:04:37.846846+02:00 nc-vm-rs4kg95-vie sshd-session[2559803]: Invalid user ubuntu from 106.227.75.197 port 54674 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-16 02:04:04 (1 month ago)	(sshd) Failed SSH login from 106.227.75.197 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 106.227.75.197 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 15 20:57:01 15442 sshd[25823]: Invalid user ubuntu from 106.227.75.197 port 35618 Apr 15 20:57:03 15442 sshd[25823]: Failed password for invalid user ubuntu from 106.227.75.197 port 35618 ssh2 Apr 15 21:01:39 15442 sshd[26238]: Invalid user frappe from 106.227.75.197 port 56992 Apr 15 21:01:41 15442 sshd[26238]: Failed password for invalid user frappe from 106.227.75.197 port 56992 ssh2 Apr 15 21:03:49 15442 sshd[26418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.227.75.197 user=root show less	Brute-Force SSH
🇺🇸 NeverBehave	2026-04-16 01:43:16 (1 month ago)	[fail2ban] service sshd jail	Brute-Force SSH
🇩🇪 h7ex	2026-04-16 00:42:03 (1 month ago)	SSH brute-force attack (Jail: ssh)	Brute-Force SSH
🇧🇷 helix	2026-04-16 00:32:47 (1 month ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇨🇿 lp	2026-04-16 00:18:41 (1 month ago)	SSH Brute force: 12 attempts were recorded from 106.227.75.197 2026-04-16T00:56:09+02:00 Invalid use ... show more SSH Brute force: 12 attempts were recorded from 106.227.75.197 2026-04-16T00:56:09+02:00 Invalid user user from 106.227.75.197 port 35498 2026-04-16T00:57:32+02:00 Disconnected from authenticating user root 106.227.75.197 port 56284 [preauth] 2026-04-16T01:01:23+02:00 Disconnected from authenticating user root 106.227.75.197 port 53118 [preauth] 2026-04-16T01:05:13+02:00 Disconnected from authenticating user root 106.227.75.197 port 46200 [preauth] 2026-04-16T01:06:28+02:00 Invalid user deamon_root from 106.227.75.197 port 59788 2026-04-16T01:09:04+02:00 Invalid user ftpuser from 106.227.75.197 port 45044 2026-04-16T01:10:21+02:00 Invalid user postgres from 106.227.75.197 port 49464 2026-04-16T01:16:44+02:00 Disconnected from authenticating user root 106.227.75.197 port 39324 [preauth] 2026-04-16T01:19:17+02:00 Disconnected from authenticating user root 106.227.75.197 port 42866 [preauth show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-15 23:00:53 (1 month ago)	106.227.75.197 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 106.227.75.197 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 15 17:53:31 15850 sshd[21451]: Failed password for root from 165.154.6.150 port 5418 ssh2 Apr 15 17:53:29 15850 sshd[21451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.6.150 user=root Apr 15 18:00:46 15850 sshd[22031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.227.75.197 user=root Apr 15 17:55:10 15850 sshd[21597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.6.150 user=root Apr 15 17:55:12 15850 sshd[21597]: Failed password for root from 165.154.6.150 port 9268 ssh2 IP Addresses Blocked: 165.154.6.150 (HK/Hong Kong/-) show less	Brute-Force SSH
🇹🇷 Threat.live	2026-04-15 23:00:06 (1 month ago)	Suspicious Connection Attempts	Brute-Force
🇵🇱 Chris314	2026-04-15 22:14:06 (1 month ago)	Successful SSH login observed on Cowrie honeypot VPS-POLOGNE-01. Username=steam.	Brute-Force SSH
🇷🇺 RuVeR	2026-04-15 20:34:56 (1 month ago)	2026-04-15T23:31:55.411736pantelemone.ru sshd[545869]: pam_unix(sshd:auth): authentication failure; ... show more 2026-04-15T23:31:55.411736pantelemone.ru sshd[545869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.227.75.197 user=root 2026-04-15T23:31:57.060205pantelemone.ru sshd[545869]: Failed password for root from 106.227.75.197 port 55544 ssh2 2026-04-15T23:34:54.172737pantelemone.ru sshd[546050]: Invalid user ubuntu4 from 106.227.75.197 port 36364 2026-04-15T23:34:54.175733pantelemone.ru sshd[546050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.227.75.197 2026-04-15T23:34:55.727824pantelemone.ru sshd[546050]: Failed password for invalid user ubuntu4 from 106.227.75.197 port 36364 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-11 00:16:04 (1 month ago)	ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/106.227.75.197 2026-04-10 05 ... show more ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/106.227.75.197 2026-04-10 05:38:41 ["uname -s -m"] show less	SSH
🇫🇮 misfit	2026-04-10 14:02:26 (1 month ago)	SSH brute-force (2 attempts). Org: AS149837 China Telecom, Nanchang, CN.	Brute-Force SSH
🇩🇪 NetWatch	2026-04-09 20:43:51 (1 month ago)	The IP 106.227.75.197 tried multiple SSH_BRUTE_FORCE logins	Brute-Force

Showing 991 to 1004 of 1004 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.75.16.140

🇨🇳 106.32.106.29

🇺🇸 68.220.171.40

🇰🇷 222.107.156.227

🇧🇷 205.210.31.239

🇬🇧 193.163.125.76

🇵🇭 136.158.29.11

🇸🇬 103.250.11.63

🇮🇩 103.157.63.19

🇷🇴 103.75.71.17

🇨🇳 101.126.14.37

🇺🇸 65.49.1.173

🇵🇭 49.146.37.163

🇦🇷 190.181.101.224

🇺🇸 188.215.125.52

🇮🇶 185.244.152.239

🇳🇱 160.119.76.43

🇺🇸 147.185.132.87

🇺🇸 138.0.240.206

🇰🇷 112.216.129.27