JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

220.154.3.142

Recent Activity

Abuse Confidence Score

100% Critical

1,997 reports

800 reporters · latest 19 minutes ago

ISP: China Telecom Group Corporation Qingdao Branch
Usage Type: Data Center/Web Hosting/Transit
ASN: AS141679
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Tianjin, Tianjin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

1,997 from 800 distinct reporters

First reported

September 18th 2026

Most recent report

19 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 533 🇺🇸 United States of America 310 🇫🇷 France 181

Most common categories Brute-Force 1,851 SSH 1,824 Port Scan 105 Hacking 63 Web App Attack 33

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 weke	2026-11-07 10:12:18 UTC · (4 hours ago)	Low-interaction honeypot observation; observed_at=2026-11-07T10:12:18.817Z; window_ms=10000; connections=1; traffic=998B-in/42B-out; destinations=22/ssh:1c,998B-in,42B-out; protocols=ssh; categories=14,22; indicators=ssh-client-banner,ssh-kexinit; ss ... show more Low-interaction honeypot observation; observed_at=2026-11-07T10:12:18.817Z; window_ms=10000; connections=1; traffic=998B-in/42B-out; destinations=22/ssh:1c,998B-in,42B-out; protocols=ssh; categories=14,22; indicators=ssh-client-banner,ssh-kexinit; ssh=client=SSH-2.0-libssh_0.9.6,stage=kexinit,message=20,packet=972B show less	Port Scan SSH
🇸🇬 demonsword	2026-11-07 09:50:22 UTC · (5 hours ago)	SSH brute-force detected: 6 failed login attempts in the last 1 hour.	Brute-Force SSH
🇧🇬 MazenHost	2026-11-07 08:28:30 UTC · (6 hours ago)	Nov 7 10:23:47 Invictus sshd[1693267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 Nov 7 10:23:49 Invictus sshd[1693267]: Failed password for invalid user ali from 220.154.3.142 port 38078 ... show more Nov 7 10:23:47 Invictus sshd[1693267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 Nov 7 10:23:49 Invictus sshd[1693267]: Failed password for invalid user ali from 220.154.3.142 port 38078 ssh2 Nov 7 10:26:05 Invictus sshd[1693946]: Invalid user coba from 220.154.3.142 port 33238 Nov 7 10:26:05 Invictus sshd[1693946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 Nov 7 10:26:07 Invictus sshd[1693946]: Failed password for invalid user coba from 220.154.3.142 port 33238 ssh2 Nov 7 10:28:27 Invictus sshd[1694621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 user=root Nov 7 10:28:29 Invictus sshd[1694621]: Failed password for root from 220.154.3.142 port 56634 ssh2 ... show less	Brute-Force SSH
🇫🇷 ZO3N	2026-11-07 07:57:41 UTC · (7 hours ago)	SSH brute force — 3 tentatives, user: geonode 2026-11-07T09:50:27.971795+02:00 vps-de5e3fcc sshd-session[860998]: Failed password for invalid user geonode from 220.154.3.142 port 47130 ssh2 2026-11-07T09:57:22.872836+02:00 vps-de5e3fcc sshd-session[8 ... show more SSH brute force — 3 tentatives, user: geonode 2026-11-07T09:50:27.971795+02:00 vps-de5e3fcc sshd-session[860998]: Failed password for invalid user geonode from 220.154.3.142 port 47130 ssh2 2026-11-07T09:57:22.872836+02:00 vps-de5e3fcc sshd-session[861052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 user=root 2026-11-07T09:57:24.647431+02:00 vps-de5e3fcc sshd-session[861052]: Failed password for root from 220.154.3.142 port 59368 ssh2 show less	Brute-Force SSH
🇧🇪 Onur K.	2026-11-07 07:49:33 UTC · (7 hours ago)	fail2ban/sshd: 3 failures in 600s	SSH
Anonymous	2026-11-07 07:44:19 UTC · (7 hours ago)	37_X43_F2B_ACTION	Brute-Force SSH
🇩🇪 EndCore Group	2026-11-07 07:42:33 UTC · (7 hours ago)	2026-11-07T10:35:15.5805071721589.xorek.cloud sshd[151903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T10:35:17.1896681721589.xorek.cloud sshd[151903]: Failed password for invalid ... show more 2026-11-07T10:35:15.5805071721589.xorek.cloud sshd[151903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T10:35:17.1896681721589.xorek.cloud sshd[151903]: Failed password for invalid user user from 220.154.3.142 port 46536 ssh2 2026-11-07T10:42:32.3188411721589.xorek.cloud sshd[151925]: Invalid user ubuntu from 220.154.3.142 port 53422 ... show less	Brute-Force SSH
🇬🇧 NarcTix	2026-11-07 07:37:10 UTC · (7 hours ago)	2026-11-07T07:37:10.493942+00:00 sshd[48066]: Invalid user user from 220.154.3.142 port 58050 ...	Brute-Force SSH
🇧🇬 MazenHost	2026-11-07 07:04:36 UTC · (8 hours ago)	2026-11-07T10:04:33.577373+03:00 betelgeuse.mazen.host sshd[3608795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T10:04:35.313456+03:00 betelgeuse.mazen.host sshd[3608795]: Failed p ... show more 2026-11-07T10:04:33.577373+03:00 betelgeuse.mazen.host sshd[3608795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T10:04:35.313456+03:00 betelgeuse.mazen.host sshd[3608795]: Failed password for invalid user info from 220.154.3.142 port 43584 ssh2 ... show less	Brute-Force SSH
🇸🇪 ljo	2026-11-07 06:45:26 UTC · (8 hours ago)	2026-11-07T07:40:55.416210+01:00 serengeti sshd-session[840183]: Invalid user ftpuser from 220.154.3.142 port 40744 2026-11-07T07:40:55.417673+01:00 serengeti sshd-session[840183]: Failed password for invalid user ftpuser from 220.154.3.142 port 4074 ... show more 2026-11-07T07:40:55.416210+01:00 serengeti sshd-session[840183]: Invalid user ftpuser from 220.154.3.142 port 40744 2026-11-07T07:40:55.417673+01:00 serengeti sshd-session[840183]: Failed password for invalid user ftpuser from 220.154.3.142 port 40744 ssh2 2026-11-07T07:43:07.185879+01:00 serengeti sshd-session[840456]: Invalid user admin from 220.154.3.142 port 35232 2026-11-07T07:43:07.187303+01:00 serengeti sshd-session[840456]: Failed password for invalid user admin from 220.154.3.142 port 35232 ssh2 2026-11-07T07:45:19.510233+01:00 serengeti sshd-session[840920]: Failed password for root from 220.154.3.142 port 57960 ssh2 ... show less	Brute-Force SSH
🇳🇴 Ske doosh	2026-11-07 06:37:12 UTC · (8 hours ago)	Nov 7 07:21:14 Servo sshd[1753188]: Invalid user localadmin from 220.154.3.142 port 45666 Nov 7 07:28:14 Servo sshd[1761914]: Invalid user game from 220.154.3.142 port 49670 Nov 7 07:37:12 Servo sshd[1772864]: Invalid user yx from 220.154.3.142 po ... show more Nov 7 07:21:14 Servo sshd[1753188]: Invalid user localadmin from 220.154.3.142 port 45666 Nov 7 07:28:14 Servo sshd[1761914]: Invalid user game from 220.154.3.142 port 49670 Nov 7 07:37:12 Servo sshd[1772864]: Invalid user yx from 220.154.3.142 port 55866 ... show less	Brute-Force SSH
🇸🇪 ljo	2026-11-07 06:29:45 UTC · (8 hours ago)	2026-11-07T07:17:59.015119+01:00 serengeti sshd-session[836886]: Failed password for invalid user localadmin from 220.154.3.142 port 53626 ssh2 2026-11-07T07:27:23.554840+01:00 serengeti sshd-session[838155]: Invalid user game from 220.154.3.142 port ... show more 2026-11-07T07:17:59.015119+01:00 serengeti sshd-session[836886]: Failed password for invalid user localadmin from 220.154.3.142 port 53626 ssh2 2026-11-07T07:27:23.554840+01:00 serengeti sshd-session[838155]: Invalid user game from 220.154.3.142 port 45570 2026-11-07T07:27:23.556245+01:00 serengeti sshd-session[838155]: Failed password for invalid user game from 220.154.3.142 port 45570 ssh2 2026-11-07T07:29:38.846121+01:00 serengeti sshd-session[838363]: Invalid user brain from 220.154.3.142 port 40056 2026-11-07T07:29:38.847556+01:00 serengeti sshd-session[838363]: Failed password for invalid user brain from 220.154.3.142 port 40056 ssh2 ... show less	Brute-Force SSH
🇧🇷 gabzin	2026-11-07 06:26:53 UTC · (8 hours ago)	2026-11-07T03:24:23.950261-03:00 server-1 sshd-session[202040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T03:24:25.668241-03:00 server-1 sshd-session[202040]: Failed password for ... show more 2026-11-07T03:24:23.950261-03:00 server-1 sshd-session[202040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T03:24:25.668241-03:00 server-1 sshd-session[202040]: Failed password for invalid user ubuntu from 220.154.3.142 port 46708 ssh2 2026-11-07T03:26:50.992338-03:00 server-1 sshd-session[202283]: Invalid user game from 220.154.3.142 port 41018 2026-11-07T03:26:50.996873-03:00 server-1 sshd-session[202283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T03:26:52.669511-03:00 server-1 sshd-session[202283]: Failed password for invalid user game from 220.154.3.142 port 41018 ssh2 ... show less	Brute-Force SSH
🇺🇸 vanlueckn	2026-11-07 06:19:49 UTC · (8 hours ago)	2026-11-07T07:19:44.413318+01:00 node1.clt sshd-session[435739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T07:19:46.484480+01:00 node1.clt sshd-session[435739]: Failed password fo ... show more 2026-11-07T07:19:44.413318+01:00 node1.clt sshd-session[435739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.154.3.142 2026-11-07T07:19:46.484480+01:00 node1.clt sshd-session[435739]: Failed password for invalid user localadmin from 220.154.3.142 port 38326 ssh2 2026-11-07T07:19:47.861183+01:00 node1.clt sshd-session[435739]: Disconnected from invalid user localadmin 220.154.3.142 port 38326 [preauth] ... show less	Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-11-07 06:11:03 UTC · (8 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH

Showing 16 to 30 of 1997 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.235

🇧🇷 187.45.72.43

🇨🇳 183.92.151.73

🇺🇸 162.216.149.70

🇺🇸 20.150.211.185

🇺🇸 2a03:2880:f818:69::

🇺🇸 206.189.233.36

🇨🇱 190.151.5.26

🇺🇸 162.144.52.5

🇧🇩 138.252.121.61

🇨🇳 115.191.40.50

🇵🇰 103.203.45.81

🇷🇴 92.118.39.71

🇳🇱 91.92.47.13

🇸🇬 47.84.141.50

🇨🇦 45.194.92.54

🇭🇰 43.159.195.91

🇻🇪 190.142.193.88

🇮🇩 163.52.135.193

🇨🇦 159.203.46.22