AbuseIPDB » 106.3.137.38

106.3.137.38 was found in our database!

This IP was reported 491 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing capitalonline data service co.,LTD
Usage Type	Commercial
ASN	AS4808
Domain Name	yun-idc.com
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 106.3.137.38

Whois 106.3.137.38

IP Abuse Reports for 106.3.137.38:

This IP address has been reported a total of 491 times from 170 distinct sources. 106.3.137.38 was first reported on September 22nd 2024, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Panter	2025-07-12 19:23:58 (21 minutes ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH
eurows.net	2025-07-12 13:11:57 (6 hours ago)	Jul 12 15:11:52 hydrogen sshd[1954683]: Invalid user user from 106.3.137.38 port 53106 Jul 12 ... show moreJul 12 15:11:52 hydrogen sshd[1954683]: Invalid user user from 106.3.137.38 port 53106 Jul 12 15:11:53 hydrogen sshd[1954685]: Invalid user user from 106.3.137.38 port 53116 Jul 12 15:11:54 hydrogen sshd[1954687]: Invalid user user from 106.3.137.38 port 53126 Jul 12 15:11:55 hydrogen sshd[1954690]: Invalid user user from 106.3.137.38 port 53130 Jul 12 15:11:56 hydrogen sshd[1954692]: Invalid user user from 106.3.137.38 port 53140 ... show less	Brute-Force SSH
bigwavedave	2025-07-12 12:48:31 (6 hours ago)	ssh	Brute-Force SSH
rtbh.com.tr	2025-07-12 12:07:38 (7 hours ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
Woodie	2025-07-12 08:34:22 (11 hours ago)	2025-07-12T04:34:03.713030-04:00 debian sshd[3831658]: Failed password for root from 106.3.137.38 po ... show more2025-07-12T04:34:03.713030-04:00 debian sshd[3831658]: Failed password for root from 106.3.137.38 port 53598 ssh2 2025-07-12T04:34:12.397591-04:00 debian sshd[3831777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.137.38 user=root 2025-07-12T04:34:14.636081-04:00 debian sshd[3831777]: Failed password for root from 106.3.137.38 port 34414 ssh2 2025-07-12T04:34:19.507440-04:00 debian sshd[3831869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.137.38 user=root 2025-07-12T04:34:21.705997-04:00 debian sshd[3831869]: Failed password for root from 106.3.137.38 port 34458 ssh2 ... show less	Brute-Force SSH
kranem	2025-07-12 05:11:10 (14 hours ago)	Jul 12 07:11:05 NODE-1 sshd[1129156]: Invalid user user from 106.3.137.38 port 42516 Jul 12 07 ... show moreJul 12 07:11:05 NODE-1 sshd[1129156]: Invalid user user from 106.3.137.38 port 42516 Jul 12 07:11:06 NODE-1 sshd[1130510]: Invalid user user from 106.3.137.38 port 42532 Jul 12 07:11:07 NODE-1 sshd[1132704]: Invalid user user from 106.3.137.38 port 42536 Jul 12 07:11:09 NODE-1 sshd[1134281]: Invalid user user from 106.3.137.38 port 32768 Jul 12 07:11:10 NODE-1 sshd[1134665]: Invalid user user from 106.3.137.38 port 32774 ... show less	Brute-Force SSH
Felipe Brunelli de Andrade	2025-07-12 03:10:08 (16 hours ago)	2025-07-12T00:09:56.226090-03:00 dns1 sshd[16790]: pam_unix(sshd:auth): authentication failure; logn ... show more2025-07-12T00:09:56.226090-03:00 dns1 sshd[16790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.137.38 user=root 2025-07-12T00:09:58.829406-03:00 dns1 sshd[16790]: Failed password for root from 106.3.137.38 port 52256 ssh2 2025-07-12T00:10:01.837964-03:00 dns1 sshd[16790]: Connection closed by authenticating user root 106.3.137.38 port 52256 [preauth] 2025-07-12T00:10:04.516231-03:00 dns1 sshd[16798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.137.38 user=root 2025-07-12T00:10:06.552070-03:00 dns1 sshd[16798]: Failed password for root from 106.3.137.38 port 41706 ssh2 show less	Brute-Force SSH
diego	2025-07-12 01:18:31 (18 hours ago)	[rede-44-49] (sshd) Failed SSH login from 106.3.137.38 (CN/China/-): 5 in the last 3600 secs; Ports: ... show more[rede-44-49] (sshd) Failed SSH login from 106.3.137.38 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 11 22:17:54 sshd[7606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.137.38 user=[USERNAME] Jul 11 22:17:55 sshd[7606]: Failed password for [USERNAME] from 106.3.137.38 port 41234 ssh2 Jul 11 22:18:12 sshd[7631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.137.38 user=[USERNAME] Jul 11 22:18:14 sshd[7631]: Failed password for [USERNAME] from 106.3.137.38 port 33192 ssh2 Jul 11 22:18:24 sshd[7 show less	Port Scan
linuxgemini	2025-07-12 00:48:37 (18 hours ago)	fail2banned (ssh brute)	Brute-Force SSH
Anonymous	2025-07-12 00:11:21 (19 hours ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
urnilxfgbez	2025-07-11 22:45:00 (21 hours ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
Anonymous	2025-07-11 14:27:56 (1 day ago)	2025-07-11T14:27:53.223690+00:00 de-fsn1-app1 sshd[1568031]: Invalid user user from 106.3.137.38 por ... show more2025-07-11T14:27:53.223690+00:00 de-fsn1-app1 sshd[1568031]: Invalid user user from 106.3.137.38 port 36656 2025-07-11T14:27:54.193727+00:00 de-fsn1-app1 sshd[1568033]: Invalid user user from 106.3.137.38 port 36658 2025-07-11T14:27:55.637583+00:00 de-fsn1-app1 sshd[1568035]: Invalid user user from 106.3.137.38 port 36674 ... show less	Brute-Force SSH
amit177	2025-07-11 05:08:36 (1 day ago)		Brute-Force SSH
sbajic	2025-07-11 04:00:46 (1 day ago)	2025-07-11T06:00:41.615068+02:00 mercurius sshd[1423895]: pam_unix(sshd:auth): authentication failur ... show more2025-07-11T06:00:41.615068+02:00 mercurius sshd[1423895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.137.38 user=root 2025-07-11T06:00:44.026775+02:00 mercurius sshd[1423895]: Failed password for invalid user root from 106.3.137.38 port 58180 ssh2 2025-07-11T06:00:45.614264+02:00 mercurius sshd[1423898]: User root from 106.3.137.38 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
urnilxfgbez	2025-07-10 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩