JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

203.189.193.131

Neutral Activity

Abuse confidence score ?

0% Low Risk

566 reports

251 reporters · latest 5 months ago

ISP	CHINANET Guangdong province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58519
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Guiyang, Guizhou

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

203.189.193.131 has been reported 566 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 203.189.193.131

Export CSV

This IP address has been reported a total of 566 times from 251 distinct sources. 203.189.193.131 was first reported on February 19th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-25 00:04:31 (5 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 netup.at	2026-04-22 04:28:58 (5 months ago)	IP 203.189.193.131 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇨🇦 SSH-Admin	2026-04-13 14:19:21 (5 months ago)	Failed password for invalid user via ssh	Brute-Force SSH
🇩🇪 netup.at	2026-04-09 04:25:41 (5 months ago)	IP 203.189.193.131 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇩🇪 netup.at	2026-03-27 16:49:33 (6 months ago)	IP 203.189.193.131 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇩🇪 netup.at	2026-03-24 05:36:16 (6 months ago)	IP 203.189.193.131 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇩🇪 netup.at	2026-03-10 05:16:18 (6 months ago)	IP 203.189.193.131 banned by Fail2Ban for sshd on Pangolin-Server	Brute-Force SSH
🇫🇷 SpaceHost-Server	2026-03-05 23:40:27 (7 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-03-04 20:11:53 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇳 CGT Software Webmaster	2026-03-03 06:07:13 (7 months ago)	2026-03-03T14:06:18.932634+08:00 VM-8-9-debian sshd[4142322]: pam_unix(sshd:auth): authentication fa ... show more 2026-03-03T14:06:18.932634+08:00 VM-8-9-debian sshd[4142322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.189.193.131 user=root 2026-03-03T14:06:20.947130+08:00 VM-8-9-debian sshd[4142322]: Failed password for root from 203.189.193.131 port 53458 ssh2 2026-03-03T14:07:12.688723+08:00 VM-8-9-debian sshd[4142446]: Invalid user admin1 from 203.189.193.131 port 35238 ... show less	Port Scan Brute-Force
🇷🇸 Smel	2026-03-03 05:32:58 (7 months ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
🇺🇸 SecondBanana	2026-03-03 04:28:35 (7 months ago)	2026-03-03T04:28:34.440959+00:00 thecount sshd[1175855]: Disconnected from authenticating user root ... show more 2026-03-03T04:28:34.440959+00:00 thecount sshd[1175855]: Disconnected from authenticating user root 203.189.193.131 port 51878 [preauth] ... show less	Brute-Force SSH
🇮🇹 GV	2026-03-03 03:45:24 (7 months ago)	Tentativo Attacco Forza Bruta	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-03 03:12:02 (7 months ago)	203.189.193.131 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 203.189.193.131 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 2 21:05:31 14362 sshd[31533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.189.193.131 user=root Mar 2 21:05:33 14362 sshd[31533]: Failed password for root from 203.189.193.131 port 58632 ssh2 Mar 2 21:11:55 14362 sshd[32081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.191.116.218 user=root Mar 2 21:08:40 14362 sshd[31796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.118.117.54 user=root Mar 2 21:08:42 14362 sshd[31796]: Failed password for root from 186.118.117.54 port 50450 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-03 01:57:42 (7 months ago)	203.189.193.131 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 203.189.193.131 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 2 19:57:35 15237 sshd[10658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.189.193.131 user=root Mar 2 19:52:20 15237 sshd[10253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.160.18.46 user=root Mar 2 19:52:22 15237 sshd[10253]: Failed password for root from 69.160.18.46 port 50534 ssh2 Mar 2 19:54:57 15237 sshd[10408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.160.18.46 user=root Mar 2 19:44:44 15237 sshd[9667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.160.18.46 user=root Mar 2 19:44:46 15237 sshd[9667]: Failed password for root from 69.160.18.46 port 47490 ssh2 IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 566 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.141.23.127

🇳🇱 192.42.116.20

🇧🇷 177.85.254.151

🇺🇸 147.185.132.109

🇧🇬 79.124.56.178

🇳🇱 2400:cb00:996:1000:5122:b344:f524:de63

🇳🇱 195.178.110.217

🇵🇱 194.180.49.76

🇫🇮 147.185.133.254

🇺🇸 87.85.235.48

🇩🇪 85.216.81.75

🇬🇧 78.153.140.40

🇳🇱 77.239.124.32

🇨🇳 61.169.112.210

🇸🇦 51.36.114.231

🇭🇰 43.251.17.236

🇻🇪 38.171.31.180

🇧🇪 34.156.220.56

🇰🇷 14.40.80.59

🇷🇴 2.57.122.74