JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.104.42.188

203.104.42.188 was found in our database!

This IP was reported 159 times. Confidence of Abuse is 0%: ?

ISP	CHINANET Guangdong province network
Usage Type	Commercial
ASN	AS133774
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Fuzhou, Fujian

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.104.42.188

Whois 203.104.42.188

IP Abuse Reports for 203.104.42.188:

This IP address has been reported a total of 159 times from 94 distinct sources. 203.104.42.188 was first reported on September 5th 2025, and the most recent report was 7 months ago.

Old Reports: The most recent abuse report for this IP address is from 7 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2025-10-29 23:25:54 (7 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.42.188	Brute-Force
🇰🇷 ericshim.me	2025-10-29 14:55:50 (7 months ago)	Reported from fail2ban historical logs. (Detected at 2025-10-29 17:57:38)	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-27 23:13:47 (7 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.42.188	Brute-Force
🇯🇵 zwh	2025-10-27 17:58:42 (7 months ago)	SSH Brute-Force	Brute-Force SSH
🇰🇷 Woodie	2025-10-26 12:50:57 (7 months ago)	2025-10-26T21:50:11.043129+09:00 debian sshd[2890702]: Failed password for root from 203.104.42.188 ... show more 2025-10-26T21:50:11.043129+09:00 debian sshd[2890702]: Failed password for root from 203.104.42.188 port 37080 ssh2 2025-10-26T21:50:55.280691+09:00 debian sshd[2890879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.42.188 user=root 2025-10-26T21:50:57.226014+09:00 debian sshd[2890879]: Failed password for root from 203.104.42.188 port 39852 ssh2 ... show less	Brute-Force SSH
🇰🇷 Woodie	2025-10-26 12:08:28 (7 months ago)	2025-10-26T21:08:22.467911+09:00 debian sshd[2872929]: Failed password for root from 203.104.42.188 ... show more 2025-10-26T21:08:22.467911+09:00 debian sshd[2872929]: Failed password for root from 203.104.42.188 port 44536 ssh2 2025-10-26T21:08:25.666317+09:00 debian sshd[2872975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.42.188 user=root 2025-10-26T21:08:28.210590+09:00 debian sshd[2872975]: Failed password for root from 203.104.42.188 port 44884 ssh2 ... show less	Brute-Force SSH
🇬🇧 [email protected]	2025-10-26 00:56:28 (7 months ago)	...	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-25 23:04:42 (7 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.42.188	SSH
🇮🇳 sh97	2025-10-23 16:32:09 (7 months ago)	IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 203.104.42.188 at 2025-10-23 12:32: ... show more IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 203.104.42.188 at 2025-10-23 12:32:08 EDT show less	Brute-Force SSH
🇯🇵 zwh	2025-10-22 17:57:38 (7 months ago)	SSH Brute-Force	Brute-Force SSH
🇭🇰 Indexyz	2025-10-18 01:29:11 (8 months ago)	2025-10-18T09:29:06.632478+08:00 hostname sshd-session[3433806]: pam_unix(sshd:auth): authenticati ... show more 2025-10-18T09:29:06.632478+08:00 hostname sshd-session[3433806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.42.188 user=root 2025-10-18T09:29:07.968835+08:00 hostname sshd-session[3433806]: Failed password for root from 203.104.42.188 port 37118 ssh2 2025-10-18T09:29:08.365748+08:00 hostname sshd-session[3433815]: Connection from 203.104.42.188 port 37550 on 211.99.116.196 port 22 rdomain "" 2025-10-18T09:29:08.468006+08:00 hostname sshd-session[3433815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.42.188 user=root 2025-10-18T09:29:10.720582+08:00 hostname sshd-session[3433815]: Failed password for root from 203.104.42.188 port 37550 ssh2 show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-10-17 23:53:24 (8 months ago)	ThreatBook Intelligence: Scanner,vpn_proxy more details on https://threatbook.io/ip/203.104.42.188	SSH
🇸🇬 itachi1706	2025-10-16 18:45:05 (8 months ago)	2025-10-17T02:44:57.322127+08:00 vmi996132.contaboserver.net sshd[1841801]: Connection closed by aut ... show more 2025-10-17T02:44:57.322127+08:00 vmi996132.contaboserver.net sshd[1841801]: Connection closed by authenticating user root 203.104.42.188 port 39720 [preauth] 2025-10-17T02:45:02.376143+08:00 vmi996132.contaboserver.net sshd[1841806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.42.188 user=root 2025-10-17T02:45:05.015688+08:00 vmi996132.contaboserver.net sshd[1841806]: Failed password for root from 203.104.42.188 port 42202 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-10-11 20:21:12 (8 months ago)	Oct 12 04:21:06 mail sshd[14964]: Failed password for root from 203.104.42.188 port 34930 ssh2	Brute-Force SSH
🇹🇼 FUYU	2025-10-11 16:23:50 (8 months ago)	2025-10-12T00:23:34.564031+08:00 bird sshd[284634]: Failed password for root from 203.104.42.188 por ... show more 2025-10-12T00:23:34.564031+08:00 bird sshd[284634]: Failed password for root from 203.104.42.188 port 53258 ssh2 2025-10-12T00:23:36.333522+08:00 bird sshd[284639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.42.188 user=root 2025-10-12T00:23:38.247494+08:00 bird sshd[284639]: Failed password for root from 203.104.42.188 port 54090 ssh2 2025-10-12T00:23:47.629975+08:00 bird sshd[284641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.104.42.188 user=root 2025-10-12T00:23:50.055754+08:00 bird sshd[284641]: Failed password for root from 203.104.42.188 port 55276 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.156

🇳🇱 172.94.9.178

🇺🇸 144.172.104.126

🇺🇸 95.182.89.109

🇳🇱 89.21.67.161

🇬🇧 80.193.173.108

🇮🇪 65.52.75.227

🇺🇸 35.188.112.111

🇷🇴 2.57.122.238

🇺🇸 165.154.172.151

🇺🇸 152.32.183.209

🇺🇸 129.222.135.202

🇻🇳 103.200.25.198

🇨🇳 101.126.17.72

🇵🇹 85.240.193.104

🇺🇸 72.66.113.52

🇩🇪 69.5.169.127

🇺🇸 65.24.120.218

🇺🇸 64.62.156.159

🇧🇪 34.62.253.125