JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

221.1.195.6

Recent Activity

Abuse Confidence Score

100% Critical

97 reports

75 reporters · latest 1 hour ago

ISP: China Unicom Shandong province network
Usage Type: Fixed Line ISP
ASN: AS4837
Domain Name: chinaunicom.cn
Country: 🇨🇳 China
City: Jinan, Shandong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

97 from 75 distinct reporters

First reported

December 26th 2025

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇩🇪 Germany 16 🇺🇸 United States of America 9 🇳🇱 Netherlands 7

Most common categories SSH 63 Brute-Force 63 Port Scan 5 Hacking 3 Web App Attack 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 MazenHost	2026-11-11 05:33:07 UTC · (1 hour ago)	Nov 11 07:28:46 irc sshd[1640361]: Failed password for root from 221.1.195.6 port 57538 ssh2 Nov 11 07:28:51 irc sshd[1640363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root Nov 11 07:2 ... show more Nov 11 07:28:46 irc sshd[1640361]: Failed password for root from 221.1.195.6 port 57538 ssh2 Nov 11 07:28:51 irc sshd[1640363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root Nov 11 07:28:53 irc sshd[1640363]: Failed password for root from 221.1.195.6 port 38896 ssh2 Nov 11 07:28:56 irc sshd[1640365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root Nov 11 07:28:59 irc sshd[1640365]: Failed password for root from 221.1.195.6 port 45304 ssh2 Nov 11 07:33:05 irc sshd[1640376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root Nov 11 07:33:06 irc sshd[1640376]: Failed password for root from 221.1.195.6 port 60148 ssh2 ... show less	Brute-Force SSH
🇸🇪 ljo	2026-11-11 02:46:17 UTC · (3 hours ago)	2026-11-11T03:45:57.106480+01:00 serengeti sshd-session[1551580]: Failed password for root from 221.1.195.6 port 36690 ssh2 2026-11-11T03:45:59.471828+01:00 serengeti sshd-session[1551586]: Failed password for root from 221.1.195.6 port 38360 ssh2 20 ... show more 2026-11-11T03:45:57.106480+01:00 serengeti sshd-session[1551580]: Failed password for root from 221.1.195.6 port 36690 ssh2 2026-11-11T03:45:59.471828+01:00 serengeti sshd-session[1551586]: Failed password for root from 221.1.195.6 port 38360 ssh2 2026-11-11T03:46:01.230381+01:00 serengeti sshd-session[1551588]: Failed password for root from 221.1.195.6 port 40228 ssh2 2026-11-11T03:46:03.125670+01:00 serengeti sshd-session[1551590]: Failed password for root from 221.1.195.6 port 41838 ssh2 2026-11-11T03:46:04.759966+01:00 serengeti sshd-session[1551598]: Failed password for root from 221.1.195.6 port 43400 ssh2 ... show less	Brute-Force SSH
🇬🇧 andypiper	2026-11-11 02:03:23 UTC · (4 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-11-11 01:06:00 UTC · (5 hours ago)	2026-11-11T02:05:51+01:00 lb-1 sshd[332615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root 2026-11-11T02:05:53+01:00 lb-1 sshd[332615]: Failed password for root from 221.1.195.6 port 58 ... show more 2026-11-11T02:05:51+01:00 lb-1 sshd[332615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root 2026-11-11T02:05:53+01:00 lb-1 sshd[332615]: Failed password for root from 221.1.195.6 port 58282 ssh2 2026-11-11T02:05:57+01:00 lb-1 sshd[332617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root 2026-11-11T02:05:59+01:00 lb-1 sshd[332617]: Failed password for root from 221.1.195.6 port 33740 ssh2 ... show less	Brute-Force SSH
🇳🇬 SiteHUB Agency	2026-11-10 22:47:03 UTC · (7 hours ago)	Brute force activities detected and blocked	Brute-Force
🇫🇷 BGX	2026-11-10 20:21:42 UTC · (10 hours ago)	Honeypot: 1 SSH login attempt(s), usernames: root	Brute-Force SSH
🇩🇪 formality	2026-11-10 19:28:13 UTC · (11 hours ago)	Invalid user user from 221.1.195.6 port 33260	Brute-Force SSH
🇳🇱 oblivion394	2026-11-10 18:58:59 UTC · (11 hours ago)	Multiple failed SSH logins	Brute-Force SSH
🇺🇸 Alex Za	2026-11-10 11:39:14 UTC · (19 hours ago)	2026-11-10T11:39:02.295132+00:00 reliablesite sshd[1832032]: Failed password for root from 221.1.195.6 port 50844 ssh2 2026-11-10T11:39:05.636293+00:00 reliablesite sshd[1833897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty ... show more 2026-11-10T11:39:02.295132+00:00 reliablesite sshd[1832032]: Failed password for root from 221.1.195.6 port 50844 ssh2 2026-11-10T11:39:05.636293+00:00 reliablesite sshd[1833897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root 2026-11-10T11:39:07.669896+00:00 reliablesite sshd[1833897]: Failed password for root from 221.1.195.6 port 55980 ssh2 2026-11-10T11:39:11.947071+00:00 reliablesite sshd[1834846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root 2026-11-10T11:39:13.804760+00:00 reliablesite sshd[1834846]: Failed password for root from 221.1.195.6 port 60472 ssh2 ... show less	Brute-Force
🇩🇪 ZeroAttackVector	2026-11-10 10:07:23 UTC · (20 hours ago)	Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 6, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (eu1) over 2026-11-10..2026-11-10. Reported by an SSH honeypot network; no production service ... show more Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 6, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (eu1) over 2026-11-10..2026-11-10. Reported by an SSH honeypot network; no production service involved. show less	Brute-Force SSH
🇳🇱 paradoxnetworks	2026-11-10 07:59:01 UTC · (22 hours ago)	2026-11-10T08:58:59.176617+01:00 pbs-ams-01 sshd-session[2330292]: Invalid user user from 221.1.195.6 port 47310 2026-11-10T08:59:00.211705+01:00 pbs-ams-01 sshd-session[2330294]: Invalid user user from 221.1.195.6 port 48036 2026-11-10T08:59:01.2407 ... show more 2026-11-10T08:58:59.176617+01:00 pbs-ams-01 sshd-session[2330292]: Invalid user user from 221.1.195.6 port 47310 2026-11-10T08:59:00.211705+01:00 pbs-ams-01 sshd-session[2330294]: Invalid user user from 221.1.195.6 port 48036 2026-11-10T08:59:01.240705+01:00 pbs-ams-01 sshd-session[2330301]: Invalid user user from 221.1.195.6 port 48752 ... show less	Brute-Force SSH
🇺🇸 WestonReed	2026-11-10 06:52:13 UTC · (23 hours ago)	2026-11-09T23:52:08.758943-07:00 leela sshd-session[86990]: Invalid user user from 221.1.195.6 port 37860 2026-11-09T23:52:09.773218-07:00 leela sshd-session[86992]: Invalid user user from 221.1.195.6 port 38880 2026-11-09T23:52:10.724416-07:00 leela ... show more 2026-11-09T23:52:08.758943-07:00 leela sshd-session[86990]: Invalid user user from 221.1.195.6 port 37860 2026-11-09T23:52:09.773218-07:00 leela sshd-session[86992]: Invalid user user from 221.1.195.6 port 38880 2026-11-09T23:52:10.724416-07:00 leela sshd-session[86994]: Invalid user user from 221.1.195.6 port 39576 2026-11-09T23:52:11.690348-07:00 leela sshd-session[86996]: Invalid user user from 221.1.195.6 port 40208 2026-11-09T23:52:12.644693-07:00 leela sshd-session[86998]: Invalid user user from 221.1.195.6 port 40910 ... show less	Brute-Force SSH
🇫🇮 Phish.gg	2026-11-10 04:06:06 UTC · (1 day ago)	Nov 10 04:06:00 obsidian sshd[1884579]: Failed password for root from 221.1.195.6 port 56326 ssh2 Nov 10 04:06:03 obsidian sshd[1884702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root N ... show more Nov 10 04:06:00 obsidian sshd[1884579]: Failed password for root from 221.1.195.6 port 56326 ssh2 Nov 10 04:06:03 obsidian sshd[1884702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.1.195.6 user=root Nov 10 04:06:05 obsidian sshd[1884702]: Failed password for root from 221.1.195.6 port 59512 ssh2 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-11-09 23:45:00 UTC · (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇳🇱 tmiland	2026-11-09 22:49:34 UTC · (1 day ago)	(sshd_preauth) SSH pre-auth abort from 221.1.195.6 (CN/China/-): 5 in the last 3600 secs; IP: 221.1.195.6; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-11-09T23:49:25.410078+01:00 vps1 sshd-session[646982]: Connection closed by a ... show more (sshd_preauth) SSH pre-auth abort from 221.1.195.6 (CN/China/-): 5 in the last 3600 secs; IP: 221.1.195.6; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026-11-09T23:49:25.410078+01:00 vps1 sshd-session[646982]: Connection closed by authenticating user root 221.1.195.6 port 46064 [preauth] 2026-11-09T23:49:26.560021+01:00 vps1 sshd-session[646988]: Connection closed by authenticating user root 221.1.195.6 port 46922 [preauth] 2026-11-09T23:49:27.999729+01:00 vps1 sshd-session[646993]: Connection closed by authenticating user root 221.1.195.6 port 47796 [preauth] 2026-11-09T23:49:29.170647+01:00 vps1 sshd-session[647000]: Connection closed by authenticating user root 221.1.195.6 port 48748 [preauth] 2026-11-09T23:49:30.430022+01:00 vps1 sshd-session[647008]: Connection closed by authenticating user root 221.1.195.6 port 49540 [preauth] show less	Brute-Force

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 199.165.159.161

🇳🇱 195.178.110.26

🇺🇸 162.216.149.215

🇧🇩 103.209.199.98

🇫🇷 91.231.89.230

🇺🇸 73.205.149.219

🇺🇸 40.80.203.142

🇧🇪 35.210.58.125

🇬🇧 35.203.210.55

🇩🇪 23.132.164.170

🇺🇸 20.169.85.58

🇨🇳 8.141.125.122

🇨🇳 218.60.174.84

🇸🇬 212.73.148.6

🇳🇱 195.178.110.232

🇲🇽 187.189.246.202

🇺🇸 176.20.202.86

🇺🇸 148.135.0.242

🇨🇦 135.0.3.34

🇧🇩 103.103.33.34