AbuseIPDB » 203.57.255.197

203.57.255.197 was found in our database!

This IP was reported 343 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET FUJIAN PROVINCE NETWORK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58519
Domain Name	chinatelecom.cn
Country	China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 203.57.255.197

Whois 203.57.255.197

IP Abuse Reports for 203.57.255.197:

This IP address has been reported a total of 343 times from 179 distinct sources. 203.57.255.197 was first reported on March 19th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-04-17 09:45:01 (1 week ago)	Knocking on port 22 (endlessh)	SSH
ThreatBook.io	2025-04-15 22:33:17 (1 week ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/203.57.255.197	SSH
sid3windr	2025-04-15 08:14:08 (1 week ago)	SSH port scan (Tarpitted for 16m10s, wasted 1.98kB)	Port Scan SSH
CGT Software Webmaster	2025-04-15 02:25:54 (1 week ago)	2025-04-15T02:25:39.531762+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3109498]: Failed password for root ... show more2025-04-15T02:25:39.531762+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3109498]: Failed password for root from 203.57.255.197 port 58354 ssh2 2025-04-15T02:25:51.645568+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3109501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.57.255.197 user=root 2025-04-15T02:25:53.530446+00:00 debian-s-2vcpu-2gb-sfo3-01 sshd[3109501]: Failed password for root from 203.57.255.197 port 36126 ssh2 ... show less	Port Scan Brute-Force
Anonymous	2025-04-15 00:56:37 (1 week ago)	203.57.255.197 (CN/China/-), 8 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more203.57.255.197 (CN/China/-), 8 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Apr 14 20:48:42 server2 sshd[31992]: Failed password for root from 81.4.120.253 port 56988 ssh2 Apr 14 20:35:38 server2 sshd[27680]: Failed password for root from 81.4.120.253 port 50774 ssh2 Apr 14 20:50:58 server2 sshd[32557]: Failed password for root from 121.204.251.195 port 42534 ssh2 Apr 14 20:53:30 server2 sshd[745]: Failed password for root from 81.4.120.253 port 50368 ssh2 Apr 14 20:43:52 server2 sshd[30047]: Failed password for root from 81.4.120.253 port 36966 ssh2 Apr 14 20:56:28 server2 sshd[1457]: Failed password for root from 203.57.255.197 port 39070 ssh2 Apr 14 20:54:22 server2 sshd[983]: Failed password for root from 59.84.11.168 port 43786 ssh2 Apr 14 20:44:59 server2 sshd[30304]: Failed password for root from 59.84.11.168 port 43082 ssh2 IP Addresses Blocked: 81.4.120.253 (NL/Netherlands/-) 121.204.251.195 (CN/China/-) show less	Brute-Force
Anonymous	2025-04-15 00:51:04 (1 week ago)	Honeypot hit.	Port Scan Hacking Exploited Host
ThreatBook.io	2025-04-14 22:29:46 (1 week ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/203.57.255.197	SSH
Yepngo	2025-04-14 21:41:22 (1 week ago)	2025-04-14T23:41:15.179772+02:00 ns3006402 sshd[3326767]: Failed password for root from 203.57.255.1 ... show more2025-04-14T23:41:15.179772+02:00 ns3006402 sshd[3326767]: Failed password for root from 203.57.255.197 port 51736 ssh2 2025-04-14T23:41:20.149252+02:00 ns3006402 sshd[3326779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.57.255.197 user=root 2025-04-14T23:41:21.818666+02:00 ns3006402 sshd[3326779]: Failed password for root from 203.57.255.197 port 54688 ssh2 ... show less	Brute-Force SSH
NXO WAN	2025-04-14 19:45:48 (1 week ago)		Brute-Force SSH
dwmp	2025-04-14 19:40:05 (1 week ago)	Apr 14 21:39:33 plesk sshd[3734758]: Failed password for root from 203.57.255.197 port 59934 ssh2<br ... show moreApr 14 21:39:33 plesk sshd[3734758]: Failed password for root from 203.57.255.197 port 59934 ssh2 Apr 14 21:39:47 plesk sshd[3734762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.57.255.197 user=root Apr 14 21:39:48 plesk sshd[3734762]: Failed password for root from 203.57.255.197 port 35262 ssh2 Apr 14 21:40:03 plesk sshd[3734777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.57.255.197 user=root Apr 14 21:40:05 plesk sshd[3734777]: Failed password for root from 203.57.255.197 port 40526 ssh2 ... show less	Brute-Force SSH
zwh	2025-04-14 17:46:19 (1 week ago)	SSH Brute-Force	Brute-Force SSH
sverre26	2025-04-14 14:22:34 (1 week ago)	Bruteforce detected by fail2ban	Brute-Force SSH
Wieger Bontekoe	2025-04-14 00:17:13 (2 weeks ago)	Blocked by UFW [22/tcp] Source port: 47556 TTL: 43 Packet length: 1140 TOS: ... show moreBlocked by UFW [22/tcp] Source port: 47556 TTL: 43 Packet length: 1140 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Brute-Force SSH
ThreatBook.io	2025-04-13 22:29:12 (2 weeks ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/203.57.255.197 2025-04-13 ... show moreThreatBook Intelligence: IDC more details on http://threatbook.io/ip/203.57.255.197 2025-04-13 01:20:01 ["uname -s -m"] 2025-04-13 20:26:56 ["uname -s -m"] 2025-04-13 19:22:36 ["uname -s -m"] show less	SSH
rtbh.network	2025-04-13 19:00:11 (2 weeks ago)	Brute Force, tcp/22	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩