JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

175.166.149.138

Neutral Activity

Abuse Confidence Score

0% Low Risk

102 reports

53 reporters · latest 1 year ago

ISP: CHINA UNICOM Liaoning province network
Usage Type: Fixed Line ISP
ASN: AS4837
Domain Name: chinaunicom.cn
Country: 🇨🇳 China
City: Shenyang, Liaoning

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

175.166.149.138 has been reported 102 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

102 from 53 distinct reporters

First reported

October 14th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-10-18 20:09:26 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-10-18 11:11:01 UTC · (1 year ago)	This IP address carried out 3 SSH credential attack (attempts) on 17-10-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-17 23:35:37 UTC · (1 year ago)	ThreatBook Intelligence: Scanner,Dynamic IP more details on https://threatbook.io/ip/175.166.149.138	SSH
🇹🇷 rtbh.com.tr	2025-10-17 20:09:24 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-10-17 16:20:56 UTC · (1 year ago)	This IP address carried out 8 port scanning attempts on 16-10-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.	Port Scan SSH
🇺🇸 bigscoots.com	2025-10-17 06:52:50 UTC · (1 year ago)	175.166.149.138 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 17 01:52:29 17505 sshd[27970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more 175.166.149.138 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 17 01:52:29 17505 sshd[27970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.166.149.138 user=root Oct 17 01:34:29 17505 sshd[26524]: Failed password for root from 175.166.149.138 port 36776 ssh2 Oct 17 01:34:27 17505 sshd[26524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.166.149.138 user=root Oct 17 01:35:41 17505 sshd[26610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.27.189.60 user=root Oct 17 01:35:43 17505 sshd[26610]: Failed password for root from 37.27.189.60 port 47348 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
Anonymous	2025-10-17 06:34:28 UTC · (1 year ago)	2025-10-17T06:34:25.894578+00:00 xmr sshd[35447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.166.149.138 user=root 2025-10-17T06:34:27.357632+00:00 xmr sshd[35447]: Failed password for root from 175.1 ... show more 2025-10-17T06:34:25.894578+00:00 xmr sshd[35447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.166.149.138 user=root 2025-10-17T06:34:27.357632+00:00 xmr sshd[35447]: Failed password for root from 175.166.149.138 port 46742 ssh2 ... show less	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-10-17 06:33:55 UTC · (1 year ago)	175.166.149.138 banned on rtr - Threshold reached: 5 failures	SSH
🇩🇪 www.fransveldman.world	2025-10-17 05:47:18 UTC · (1 year ago)	Oct 17 05:17:55 mail sshd[2596176]: Invalid user odoo from 175.166.149.138 port 49698 Oct 17 05:47:17 mail sshd[2600222]: Invalid user git from 175.166.149.138 port 54116 ...	Brute-Force SSH
🇹🇷 zumbo.net	2025-10-17 04:05:11 UTC · (1 year ago)	2025-10-17T07:05:07.563316+03:00 vpn.zumbo.net sshd[262672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.166.149.138 2025-10-17T07:05:10.247379+03:00 vpn.zumbo.net sshd[262672]: Failed password for inva ... show more 2025-10-17T07:05:07.563316+03:00 vpn.zumbo.net sshd[262672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.166.149.138 2025-10-17T07:05:10.247379+03:00 vpn.zumbo.net sshd[262672]: Failed password for invalid user lior from 175.166.149.138 port 59536 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-17 03:17:23 UTC · (1 year ago)	(sshd) Failed SSH login from 175.166.149.138 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Oct 16 21:50:30 14405 sshd[12535]: Invalid user sascha from 175.166.149.138 port 33802 Oct 16 21:50:32 14405 sshd[1253 ... show more (sshd) Failed SSH login from 175.166.149.138 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Oct 16 21:50:30 14405 sshd[12535]: Invalid user sascha from 175.166.149.138 port 33802 Oct 16 21:50:32 14405 sshd[12535]: Failed password for invalid user sascha from 175.166.149.138 port 33802 ssh2 Oct 16 22:07:27 14405 sshd[14021]: Invalid user trade from 175.166.149.138 port 41014 Oct 16 22:07:29 14405 sshd[14021]: Failed password for invalid user trade from 175.166.149.138 port 41014 ssh2 Oct 16 22:17:17 14405 sshd[14821]: Invalid user erpnext from 175.166.149.138 port 54616 show less	Brute-Force SSH
🇺🇸 bulkvm.com	2025-10-17 02:13:56 UTC · (1 year ago)	[bulkvm.com/honeypot] SSH port scan. Port: 47132, Time: 2025-10-17 02:13:44 UTC	Port Scan
🇨🇭 master.arknet.ch	2025-10-16 21:40:35 UTC · (1 year ago)	2025-10-16T23:35:29.677610+02:00 wels sshd[974630]: Invalid user www from 175.166.149.138 port 46110 2025-10-16T23:35:30.177687+02:00 wels sshd[974630]: Disconnected from invalid user www 175.166.149.138 port 46110 [preauth] 2025-10-16T23:40:34.66994 ... show more 2025-10-16T23:35:29.677610+02:00 wels sshd[974630]: Invalid user www from 175.166.149.138 port 46110 2025-10-16T23:35:30.177687+02:00 wels sshd[974630]: Disconnected from invalid user www 175.166.149.138 port 46110 [preauth] 2025-10-16T23:40:34.669947+02:00 wels sshd[974660]: Connection closed by 175.166.149.138 port 51538 [preauth] ... show less	Brute-Force SSH
🇧🇷 chronos	2025-10-16 21:03:21 UTC · (1 year ago)	Generic malicious activity detected: [HONEYPOT] Attempted SSH access... \| Proto: TCP \| Port: 2222 \| Location: China, Dalian	Port Scan Hacking
🇹🇷 rtbh.com.tr	2025-10-16 20:09:23 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇾 202.165.14.135

🇸🇬 145.223.151.100

🇵🇹 89.152.142.188

🇺🇸 74.249.130.208

🇺🇸 40.124.178.154

🇧🇪 34.22.159.76

🇨🇳 223.83.131.241

🇩🇪 195.182.16.23

🇨🇱 170.150.156.28

🇺🇸 157.22.102.171

🇺🇸 147.185.132.246

🇮🇳 139.5.39.252

🇰🇷 121.167.235.181

🇲🇾 121.121.56.118

🇷🇴 80.94.92.130

🇳🇱 77.239.124.42

🇺🇸 64.202.191.109

🇦🇿 37.114.151.251

🇷🇴 2.57.121.112

🇺🇸 152.39.185.123