AbuseIPDB » 106.42.28.138

106.42.28.138 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 28%: ?

28%

ISP	ChinaNet Henan Province Network
Usage Type	Unknown
Hostname(s)	42.106.broad.ha.dynamic.163data.com.cn
Domain Name	chinatelecom.com.cn
Country	China
City	Hebi, Henan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 106.42.28.138

Whois 106.42.28.138

IP Abuse Reports for 106.42.28.138:

This IP address has been reported a total of 8 times from 7 distinct sources. 106.42.28.138 was first reported on September 14th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Savvii	2024-09-14 17:31:00 (1 month ago)	20 attempts against mh-ssh on plum	Brute-Force SSH
bigscoots.com	2024-09-14 17:13:55 (1 month ago)	(sshd) Failed SSH login from 106.42.28.138 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in t ... show more(sshd) Failed SSH login from 106.42.28.138 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 12:04:10 14165 sshd[15093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root Sep 14 12:04:12 14165 sshd[15093]: Failed password for root from 106.42.28.138 port 47534 ssh2 Sep 14 12:12:37 14165 sshd[16198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root Sep 14 12:12:39 14165 sshd[16198]: Failed password for root from 106.42.28.138 port 47572 ssh2 Sep 14 12:13:37 14165 sshd[16325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root show less	Brute-Force SSH
lp	2024-09-14 16:49:55 (1 month ago)	SSH Brute force: 15 attempts were recorded from 106.42.28.138 2024-09-14T18:16:05+02:00 Discon ... show moreSSH Brute force: 15 attempts were recorded from 106.42.28.138 2024-09-14T18:16:05+02:00 Disconnected from authenticating user root 106.42.28.138 port 45468 [preauth] 2024-09-14T18:22:33+02:00 Disconnected from authenticating user root 106.42.28.138 port 35418 [preauth] 2024-09-14T18:23:44+02:00 Disconnected from authenticating user root 106.42.28.138 port 50686 [preauth] 2024-09-14T18:24:59+02:00 Disconnected from authenticating user root 106.42.28.138 port 37726 [preauth] 2024-09-14T18:26:18+02:00 Disconnected from authenticating user root 106.42.28.138 port 53006 [preauth] 2024-09-14T18:27:39+02:00 Disconnected from authenticating user root 106.42.28.138 port 40048 [preauth] 2024-09-14T18:28:51+02:00 Disconnected from authenticating user root 106.42.28.138 port 55318 [preauth] 2024-09-14T18:30:02+02:00 Disconnected from authenticating user root 106.42.28.138 port 42354 [preauth] 2024-0 show less	Brute-Force SSH
BirdCo Telecom	2024-09-14 16:23:38 (1 month ago)		Brute-Force SSH
eminovic.ba	2024-09-14 15:35:24 (1 month ago)	Brute force login attack ...	Brute-Force SSH
SameTeem	2024-09-14 14:02:27 (1 month ago)	(sshd) Failed SSH login from 106.42.28.138 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in t ... show more(sshd) Failed SSH login from 106.42.28.138 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2024-09-14T13:56:06.509255+00:00 memes2 sshd[332207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root 2024-09-14T13:56:08.115400+00:00 memes2 sshd[332207]: Failed password for root from 106.42.28.138 port 50232 ssh2 2024-09-14T14:01:06.312309+00:00 memes2 sshd[332568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root 2024-09-14T14:01:08.772601+00:00 memes2 sshd[332568]: Failed password for root from 106.42.28.138 port 58640 ssh2 2024-09-14T14:02:12.735616+00:00 memes2 sshd[332664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root show less	Port Scan
mg	2024-09-14 13:23:51 (1 month ago)	2024-09-14T06:22:52.617949-07:00 goldcrest sshd[10460]: pam_unix(sshd:auth): authentication failure; ... show more2024-09-14T06:22:52.617949-07:00 goldcrest sshd[10460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root 2024-09-14T06:22:54.815716-07:00 goldcrest sshd[10460]: Failed password for root from 106.42.28.138 port 60118 ssh2 2024-09-14T06:23:50.853920-07:00 goldcrest sshd[10506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root 2024-09-14T06:23:53.015873-07:00 goldcrest sshd[10506]: Failed password for root from 106.42.28.138 port 44048 ssh2 ... show less	Brute-Force SSH
bigscoots.com	2024-09-14 12:34:54 (1 month ago)	(sshd) Failed SSH login from 106.42.28.138 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in t ... show more(sshd) Failed SSH login from 106.42.28.138 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 12:30:29 23920 sshd[32572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root Sep 14 12:30:31 23920 sshd[32572]: Failed password for root from 106.42.28.138 port 54152 ssh2 Sep 14 12:33:45 23920 sshd[32763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root Sep 14 12:33:46 23920 sshd[32763]: Failed password for root from 106.42.28.138 port 52534 ssh2 Sep 14 12:34:47 23920 sshd[363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.28.138 user=root show less	Brute-Force SSH