Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 206.238.105.2
This IP address has been reported a total of
19
times from
18 distinct
sources.
206.238.105.2 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
Hong Kong
with 2
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
SSH
14
times;
Brute-Force
13
times;
Port Scan
8
times;
Hacking
1
time;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-19T05:13:01.307Z, an unauthorized SSH access attempt was detected from source IP address 206 ...
show more2026-09-19T05:13:01.307Z, an unauthorized SSH access attempt was detected from source IP address 206.238.105.2 by our NetFlow-based intrusion detection.
show less
2026-09-19T06:48:01.935423+08:00 lw-vm-v1-sgp sshd[2895669]: Failed password for root from 206.238.1 ...
show more2026-09-19T06:48:01.935423+08:00 lw-vm-v1-sgp sshd[2895669]: Failed password for root from 206.238.105.2 port 52596 ssh2
2026-09-19T06:48:02.256347+08:00 lw-vm-v1-sgp sshd[2895684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.238.105.2 user=root
2026-09-19T06:48:04.329282+08:00 lw-vm-v1-sgp sshd[2895684]: Failed password for root from 206.238.105.2 port 52608 ssh2
...
show less
2026-09-18T19:50:19.387829+08:00 dh sshd[1055]: Timeout before authentication for connection from 20 ...
show more2026-09-18T19:50:19.387829+08:00 dh sshd[1055]: Timeout before authentication for connection from 206.238.105.2 to 219.77.210.39, pid = 25553
Connection closed by authenticating user root 206.238.105.2 port 46952 [preauth]
Connection closed by authenticating user root 206.238.105.2 port 37964 [preauth]
Connection closed by authenticating user root 206.238.105.2 port 37972 [preauth]
show less
Connection closed by authenticating user root 206.238.105.2 port 50072 [preauth]
Connection closed b ...
show moreConnection closed by authenticating user root 206.238.105.2 port 50072 [preauth]
Connection closed by authenticating user root 206.238.105.2 port 50080 [preauth]
Connection closed by authenticating user root 206.238.105.2 port 50084 [preauth]
Connection closed by authenticating user root 206.238.105.2 port 50094 [preauth]
Connection closed by authenticating user root 206.238.105.2 port 50102 [preauth]
show less
