JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

219.145.8.97

Neutral Activity

Abuse Confidence Score

0% Low Risk

16 reports

15 reporters · latest 5 months ago

ISP: CHINANET shanxi(SN) province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: xa.sn.cn
Country: 🇨🇳 China
City: Xi'an, Shaanxi

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

219.145.8.97 has been reported 16 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

16 from 15 distinct reporters

First reported

June 3rd 2021

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-25 15:41:23 UTC · (5 months ago)	May 25 18:34:25 dev sshd[238510]: Invalid user pi from 219.145.8.97 port 39844 May 25 18:36:12 dev sshd[238908]: Invalid user ubuntu from 219.145.8.97 port 41194 May 25 18:37:53 dev sshd[238914]: Invalid user admin from 219.145.8.97 port 41764 May 25 ... show more May 25 18:34:25 dev sshd[238510]: Invalid user pi from 219.145.8.97 port 39844 May 25 18:36:12 dev sshd[238908]: Invalid user ubuntu from 219.145.8.97 port 41194 May 25 18:37:53 dev sshd[238914]: Invalid user admin from 219.145.8.97 port 41764 May 25 18:39:36 dev sshd[238991]: Invalid user demo from 219.145.8.97 port 52132 May 25 18:41:22 dev sshd[239385]: Invalid user user from 219.145.8.97 port 50788 ... show less	Brute-Force SSH
🇫🇮 6kilowatti	2026-05-25 12:53:30 UTC · (5 months ago)	2026-05-25T15:53:29.507395+03:00 6kw sshd[454525]: Failed password for root from 219.145.8.97 port 46938 ssh2 ...	Brute-Force SSH
🇸🇪 pappirauk	2026-05-25 08:11:10 UTC · (5 months ago)	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-05-25T08:11:01Z and 2026-05-25T08:11:10Z	Brute-Force SSH
🇨🇭 pingusurmars	2026-05-24 17:34:47 UTC · (5 months ago)	Blocked by UFW on amperetwo [5901/tcp] Source port: 42074 TTL: 45 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇨🇦 lrathier	2026-05-23 11:41:28 UTC · (5 months ago)	2026-05-23T11:41:28.094827+00:00 fsg-bi-plg01 sshd[1235558]: Failed password for root from 219.145.8.97 port 37212 ssh2 2026-05-23T11:41:26.439803+00:00 fsg-bi-plg01 sshd[1235567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt ... show more 2026-05-23T11:41:28.094827+00:00 fsg-bi-plg01 sshd[1235558]: Failed password for root from 219.145.8.97 port 37212 ssh2 2026-05-23T11:41:26.439803+00:00 fsg-bi-plg01 sshd[1235567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.145.8.97 user=root 2026-05-23T11:41:28.361583+00:00 fsg-bi-plg01 sshd[1235567]: Failed password for root from 219.145.8.97 port 37234 ssh2 2026-05-23T11:41:26.440170+00:00 fsg-bi-plg01 sshd[1235564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.145.8.97 user=root 2026-05-23T11:41:28.362553+00:00 fsg-bi-plg01 sshd[1235564]: Failed password for root from 219.145.8.97 port 37152 ssh2 ... show less	Brute-Force SSH
🇩🇪 Ariazonaa	2026-05-23 07:17:01 UTC · (5 months ago)	Fail2Ban host=mail jail=sshd failures=6. Login abuse observed. sample=2026-05-23T07:08:34.683273+00:00 mail sshd-session[216185]: Disconnected from authenticating user root 219.145.8.97 port 52364 [preauth] 2026-05-23T07:10:17.778257+00:00 mail sshd- ... show more Fail2Ban host=mail jail=sshd failures=6. Login abuse observed. sample=2026-05-23T07:08:34.683273+00:00 mail sshd-session[216185]: Disconnected from authenticating user root 219.145.8.97 port 52364 [preauth] 2026-05-23T07:10:17.778257+00:00 mail sshd-session[217190]: Disconnected from authenticating user root 219.145.8.97 port 33754 [preauth] 2026-05-23T07:11:52.516903+00:00 mail sshd-session[218012]: Disconnected from authenticating user root 219.145.8.97 port 39108 [preauth] 2026-05-23T07:13:33.382175+00:00 mail sshd-session[218921]: Disconnected from authenticat show less	Brute-Force SSH
🇩🇪 iNetWorker	2026-05-23 03:01:53 UTC · (5 months ago)	firewall-block, port(s): 5901/tcp	Port Scan
🇩🇪 TostHost	2026-05-22 00:28:17 UTC · (5 months ago)	Fail2Ban detected SSH brute-force attack	Brute-Force SSH
🇩🇪 XICTRON	2026-05-22 00:25:06 UTC · (5 months ago)	SSH brute-force attempt detected by Fail2Ban	SSH
🇩🇪 ghostwarriors	2026-05-22 00:20:49 UTC · (5 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-05-21 15:10:10 UTC · (5 months ago)	2026-05-21T17:08:35.096828+02:00 webtest sshd[12041]: Failed password for invalid user root from 219.145.8.97 port 35330 ssh2 2026-05-21T17:08:41.690329+02:00 webtest sshd[12064]: User root from 219.145.8.97 not allowed because not listed in AllowUse ... show more 2026-05-21T17:08:35.096828+02:00 webtest sshd[12041]: Failed password for invalid user root from 219.145.8.97 port 35330 ssh2 2026-05-21T17:08:41.690329+02:00 webtest sshd[12064]: User root from 219.145.8.97 not allowed because not listed in AllowUsers 2026-05-21T17:08:41.692323+02:00 webtest sshd[12064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.145.8.97 user=root 2026-05-21T17:08:44.296954+02:00 webtest sshd[12064]: Failed password for invalid user root from 219.145.8.97 port 37014 ssh2 2026-05-21T17:10:10.598196+02:00 webtest sshd[12089]: User root from 219.145.8.97 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 NetWatch	2026-05-20 21:26:12 UTC · (5 months ago)	The IP 219.145.8.97 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇫🇷 Rom74	2026-05-18 06:36:43 UTC · (5 months ago)	2026-05-18T08:36:40.048279+02:00 serveur1 sshd[939371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.145.8.97 user=root 2026-05-18T08:36:42.216481+02:00 serveur1 sshd[939371]: Failed password for root f ... show more 2026-05-18T08:36:40.048279+02:00 serveur1 sshd[939371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.145.8.97 user=root 2026-05-18T08:36:42.216481+02:00 serveur1 sshd[939371]: Failed password for root from 219.145.8.97 port 59902 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-05-17 12:59:23 UTC · (5 months ago)	2026-05-17T14:52:52.318695+02:00 telekom-de-01.api.my-carrier-services.com sshd[86796]: Connection closed by 219.145.8.97 port 38750 2026-05-17T14:55:12.833971+02:00 telekom-de-01.api.my-carrier-services.com sshd[86910]: Disconnected from 219.145.8.9 ... show more 2026-05-17T14:52:52.318695+02:00 telekom-de-01.api.my-carrier-services.com sshd[86796]: Connection closed by 219.145.8.97 port 38750 2026-05-17T14:55:12.833971+02:00 telekom-de-01.api.my-carrier-services.com sshd[86910]: Disconnected from 219.145.8.97 port 60780 [preauth] 2026-05-17T14:56:38.061132+02:00 telekom-de-01.api.my-carrier-services.com sshd[86958]: Disconnected from 219.145.8.97 port 49148 [preauth] 2026-05-17T14:57:56.311676+02:00 telekom-de-01.api.my-carrier-services.com sshd[87004]: Disconnected from authenticating user root 219.145.8.97 port 38086 [preauth] 2026-05-17T14:59:21.854420+02:00 telekom-de-01.api.my-carrier-services.com sshd[87042]: Disconnected from authenticating user root 219.145.8.97 port 36518 [preauth] show less	Brute-Force
🇩🇪 ipcop.net	2026-05-17 12:58:08 UTC · (5 months ago)	2026-05-17T14:52:52.040650+02:00 matrix-host01.talk.srvfarm.net sshd[1479043]: Connection closed by 219.145.8.97 port 48088 2026-05-17T14:53:51.683627+02:00 matrix-host01.talk.srvfarm.net sshd[1479084]: Disconnected from authenticating user root 219. ... show more 2026-05-17T14:52:52.040650+02:00 matrix-host01.talk.srvfarm.net sshd[1479043]: Connection closed by 219.145.8.97 port 48088 2026-05-17T14:53:51.683627+02:00 matrix-host01.talk.srvfarm.net sshd[1479084]: Disconnected from authenticating user root 219.145.8.97 port 60420 [preauth] 2026-05-17T14:55:14.227693+02:00 matrix-host01.talk.srvfarm.net sshd[1479157]: Disconnected from authenticating user root 219.145.8.97 port 48746 [preauth] 2026-05-17T14:56:49.851897+02:00 matrix-host01.talk.srvfarm.net sshd[1479222]: Disconnected from authenticating user root 219.145.8.97 port 46158 [preauth] 2026-05-17T14:58:06.903215+02:00 matrix-host01.talk.srvfarm.net sshd[1479276]: Disconnected from authenticating user root 219.145.8.97 port 42142 [preauth] show less	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.141.60.79

🇬🇧 185.216.145.173

🇵🇱 172.69.155.46

🇷🇴 92.118.39.71

🇺🇸 91.230.168.93

🇳🇱 45.148.10.141

🇿🇦 196.11.179.15

🇳🇱 185.223.235.35

🇫🇷 185.177.72.75

🇰🇷 183.104.220.195

🇺🇸 74.7.175.135

🇺🇸 72.214.50.14

🇺🇸 43.153.96.233

🇳🇱 204.76.203.4

🇻🇳 203.205.37.233

🇫🇮 194.99.27.88

🇵🇸 188.0.120.158

🇸🇬 159.223.38.40

🇨🇳 118.122.147.49

🇰🇷 118.40.56.162