AbuseIPDB » 106.42.31.159

106.42.31.159 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 25%: ?

25%

ISP	ChinaNet Henan Province Network
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	42.106.broad.ha.dynamic.163data.com.cn
Domain Name	chinatelecom.com.cn
Country	China
City	Hebi, Henan

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 106.42.31.159

Whois 106.42.31.159

IP Abuse Reports for 106.42.31.159:

This IP address has been reported a total of 7 times from 5 distinct sources. 106.42.31.159 was first reported on September 14th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
anonymous user	2024-09-14 15:57:16 (3 weeks ago)	Sep 14 23:56:14 mocha sshd[1043641]: Failed password for root from 106.42.31.159 port 54600 ssh2<br ... show moreSep 14 23:56:14 mocha sshd[1043641]: Failed password for root from 106.42.31.159 port 54600 ssh2 Sep 14 23:57:14 mocha sshd[1044620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root Sep 14 23:57:15 mocha sshd[1044620]: Failed password for root from 106.42.31.159 port 35086 ssh2 ... show less	Brute-Force SSH
Savvii	2024-09-14 14:22:50 (3 weeks ago)	20 attempts against mh-ssh on eris	Brute-Force SSH
bigscoots.com	2024-09-14 13:59:52 (3 weeks ago)	(sshd) Failed SSH login from 106.42.31.159 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in t ... show more(sshd) Failed SSH login from 106.42.31.159 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 13:49:52 23048 sshd[24919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root Sep 14 13:49:53 23048 sshd[24919]: Failed password for root from 106.42.31.159 port 35598 ssh2 Sep 14 13:58:28 23048 sshd[25526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root Sep 14 13:58:30 23048 sshd[25526]: Failed password for root from 106.42.31.159 port 37562 ssh2 Sep 14 13:59:33 23048 sshd[25592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root show less	Brute-Force SSH
Anonymous	2024-09-14 13:52:28 (3 weeks ago)	sshd	Brute-Force SSH
bigscoots.com	2024-09-14 13:17:50 (3 weeks ago)	106.42.31.159 (CN/China/42.106.broad.ha.dynamic.163data.com.cn), 5 distributed sshd attacks on accou ... show more106.42.31.159 (CN/China/42.106.broad.ha.dynamic.163data.com.cn), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 14 08:17:45 10925 sshd[17498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.250.251.32 user=root Sep 14 08:15:17 10925 sshd[17349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.250.251.32 user=root Sep 14 08:15:19 10925 sshd[17349]: Failed password for root from 46.250.251.32 port 37070 ssh2 Sep 14 08:16:42 10925 sshd[17424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root Sep 14 08:16:43 10925 sshd[17424]: Failed password for root from 106.42.31.159 port 43240 ssh2 IP Addresses Blocked: 46.250.251.32 (JP/Japan/vmi2143043.contaboserver.net) show less	Brute-Force SSH
foobar.vip	2024-09-14 13:05:39 (3 weeks ago)	Failed password for invalid user root from 106.42.31.159 port 51946 ssh2 using password 'admin! ... show moreFailed password for invalid user root from 106.42.31.159 port 51946 ssh2 using password 'admin!qaz@wsx' \| Failed password for invalid user root from 106.42.31.159 port 60034 ssh2 using password '123123..' \| Failed password for invalid user root from 106.42.31.159 port 42138 ssh2 using password 'Admin1q2w3e4' \| Failed password for invalid user root from 106.42.31.159 port 52472 ssh2 using password '123456woaini' \| Failed password for invalid user root from 106.42.31.159 port 34578 ssh2 using password 'P@$$word01' \| Failed password for invalid user root from 106.42.31.159 port 44910 ssh2 using password '1q1q.' \| Failed password for invalid user root from 106.42.31.159 port 55246 ssh2 using password '123456781' \| Failed password for invalid user root from 106.42.31.159 port 37348 ssh2 using password 'P@$$word@' \| Failed password for invalid user root from 106.42.31.159 port 47684 ssh2 using password '123qwEAsdzxC' \| Failed password for invalid user root from 106.42.31.159 port 40120 ssh2 using password 'P@s5word show less	Brute-Force SSH
bigscoots.com	2024-09-14 12:48:10 (3 weeks ago)	(sshd) Failed SSH login from 106.42.31.159 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in t ... show more(sshd) Failed SSH login from 106.42.31.159 (CN/China/42.106.broad.ha.dynamic.163data.com.cn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Sep 14 07:35:01 9755 sshd[11133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root Sep 14 07:35:03 9755 sshd[11133]: Failed password for root from 106.42.31.159 port 43888 ssh2 Sep 14 07:47:18 9755 sshd[12105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root Sep 14 07:47:20 9755 sshd[12105]: Failed password for root from 106.42.31.159 port 52684 ssh2 Sep 14 07:48:08 9755 sshd[12172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.42.31.159 user=root show less	Brute-Force SSH