171.216.138.197

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
65 reports
58 reporters · latest 1 hour ago
ISP
CHINANET Sichuan province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
sctel.com.cn
Country
🇨🇳 China
City
Chengdu, Sichuan
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
65 from 58 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 12 🇺🇸 United States of America 7 🇳🇱 Netherlands 5
Most common categories SSH 56 Brute-Force 53 Port Scan 11 Hacking 3 Bad Web Bot 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇭 NetEye
SSH brute force login attempt
Brute-Force SSH
🇧🇾 lns.bz
SSH bruteforce [BY]
SSH
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇲🇩 cbz
Brute-Force SSH
🇦🇺 Ticketebo Pty. Ltd.
$f2bV_matches
Brute-Force
🇮🇳 Parth Maniar
This IP address carried out 12 port scanning attempts on 09-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇮🇳 Parth Maniar
This IP address carried out 2 SSH credential attack (attempts) on 09-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇩🇪 fynndows.de
Brute-Force SSH
🇩🇪 Filli Group
Brute-Force SSH
🇵🇱 Kotiacat_one
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇩🇪 GG UNLUCKI
SSH brute-force attempt detected by Fail2Ban. Invalid login attempt against sshd.
Brute-Force SSH
🇩🇪 NetWatch
NetWatch sensor network: The IP 171.216.138.197 executed unauthorized SSH login attempts.
Brute-Force SSH
🇩🇪 DasDuo
Attempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
Port Scan Brute-Force SSH
🇩🇪 focusnic.com
Multiple SSH login attempts from 171.216.138.197 targeting user(s): root | Server Managed by Focusnic
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.212
🇩🇪 193.108.118.247
🇺🇸 138.197.15.3
🇯🇵 104.64.142.104
🇺🇸 65.49.1.140
🇫🇮 45.147.10.185
🇬🇧 35.203.211.215
🇫🇷 217.182.253.249
🇺🇸 162.217.226.74
🇺🇸 140.235.169.40
🇨🇳 112.239.102.57
🇩🇪 109.160.32.39
🇹🇷 88.237.218.220
🇺🇸 65.49.1.56
🇮🇪 52.51.189.222
🇩🇪 31.70.103.170
🇧🇬 5.188.206.30
🇺🇸 4.148.17.174
🇺🇸 194.180.236.154
🇬🇹 190.104.116.189
feedback