106.44.5.127

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
26 reports
22 reporters · latest 8 hours ago
ISP
CHINANET HUNAN PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Changsha, Hunan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
26 from 22 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇫🇮 Finland 4 🇵🇱 Poland 3
Most common categories SSH 21 Brute-Force 17 Port Scan 5 Hacking 2 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇮 teohumble1
TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["ssh-bruteforce". Unsolicited attack on a decoy host.
Port Scan
🇺🇸 sargetun
Honeypot: Auto-ban: 24 hour idle after honeypot interaction. Auto-reported from VPS honeypot.
Brute-Force SSH Hacking
🇫🇷 uthul
T-Pot honeypot: 15 hits on ports [22] (automated)
Port Scan Brute-Force SSH
🇵🇱 webadmin
Failed password for ubuntu from 106.44.5.127 port 10224 ssh2 Disconnected from ubuntu 106.44.5.127 port 10224 [preauth] Connection closed by 106.44.5.127 port 9800 [preauth] Failed password for root from 106.44.5.127 port 10057 ssh2
SSH
🇩🇪 NetWatch
NetWatch sensor network: The IP 106.44.5.127 executed unauthorized SSH login attempts.
Brute-Force SSH
🇨🇦 SSH-Admin
Probing for Exploits on ns200
Exploited Host Web App Attack
🇷🇺 EndCore Group
Brute-Force SSH
🇧🇾 lns.bz
SSH bruteforce [BY]
SSH
Anonymous
DDoS Attack Port Scan Brute-Force SSH
🇫🇮 Phish.gg
Brute-Force SSH
🇫🇮 teohumble1
TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["ssh-bruteforce". Unsolicited attack on a decoy host.
Port Scan
🇵🇱 webadmin
Disconnected from authenticating user root 106.44.5.127 port 9972 [preauth] Failed password for user0 from 106.44.5.127 port 10887 ssh2 Disconnected from user0 106.44.5.127 port 10887 [preauth]
SSH
🇪🇸 yvoictra
2026-11-10T00:09:50.231261+01:00 medusa sshd-session[1259127]: Invalid user user from 106.44.5.127 port 9526 ...
Brute-Force SSH
🇩🇪 LoNET
Report 2806597 with IP 3854166 for SSH brute-force attack by source 3848822 via ssh-honeypot/0.2.0+http
Brute-Force SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 200.52.196.233
🇷🇺 178.67.248.12
🇨🇳 122.227.103.254
🇨🇳 122.226.145.190
🇨🇳 111.61.175.118
🇯🇵 104.22.197.49
🇺🇸 45.66.211.205
🇸🇬 43.160.212.201
🇪🇨 177.53.215.134
🇺🇸 173.8.16.50
🇫🇷 149.33.1.164
🇮🇳 122.187.237.122
🇮🇳 122.187.229.220
🇳🇱 109.160.32.120
🇷🇺 89.109.45.122
🇺🇸 20.25.145.66
🇷🇺 5.140.153.134
🇫🇷 5.135.106.93
🇨🇳 222.213.116.93
🇳🇱 217.60.242.56
feedback