JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

223.166.61.206

Neutral Activity

Abuse Confidence Score

0% Low Risk

62 reports

43 reporters · latest 10 months ago

ISP: CHINA UNICOM Shanghai city network
Usage Type: Fixed Line ISP
ASN: AS17621
Domain Name: chinaunicom.cn
Country: 🇨🇳 China
City: Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

223.166.61.206 has been reported 62 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

62 from 43 distinct reporters

First reported

December 10th 2025

Most recent report

10 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2025-12-31 23:38:35 UTC · (10 months ago)		Brute-Force Web App Attack
🇫🇷 tecnicorioja	2025-12-31 11:00:33 UTC · (10 months ago)	Failed password for root Dec 31 08:16:58 port 8609	Brute-Force SSH
🇺🇸 Kim_KA1WCC_OZ1ARQ	2025-12-31 09:56:53 UTC · (10 months ago)	Dec 31 09:53:14 stn7875 sshd[22599]: Invalid user nextcloud from 223.166.61.206 port 6369 Dec 31 09:56:52 stn7875 sshd[23076]: Invalid user ionadmin from 223.166.61.206 port 32993 ...	Brute-Force SSH
🇸🇪 ChattedRooms	2025-12-31 09:54:42 UTC · (10 months ago)	2025-12-31T10:53:06.981889+01:00 1.api.chattedrooms.com sshd[1363968]: Invalid user nextcloud from 223.166.61.206 port 39233 2025-12-31T10:53:57.658093+01:00 1.api.chattedrooms.com sshd[1363982]: User root not allowed because account is locked 2025-1 ... show more 2025-12-31T10:53:06.981889+01:00 1.api.chattedrooms.com sshd[1363968]: Invalid user nextcloud from 223.166.61.206 port 39233 2025-12-31T10:53:57.658093+01:00 1.api.chattedrooms.com sshd[1363982]: User root not allowed because account is locked 2025-12-31T10:53:57.930694+01:00 1.api.chattedrooms.com sshd[1363982]: Received disconnect from 223.166.61.206 port 32641:11: Bye Bye [preauth] 2025-12-31T10:54:41.591099+01:00 1.api.chattedrooms.com sshd[1364006]: User root not allowed because account is locked 2025-12-31T10:54:41.873250+01:00 1.api.chattedrooms.com sshd[1364006]: Received disconnect from 223.166.61.206 port 25217:11: Bye Bye [preauth] ... show less	Brute-Force SSH
🇩🇪 David Ferneding	2025-12-31 08:02:19 UTC · (10 months ago)	Blocked by UFW (TCP on 22) Source port: 35809 TTL: 50 Packet length: 988 TOS: 0x00 This report (for 223.166.61.206) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-31 07:22:48 UTC · (10 months ago)	(sshd) Failed SSH login from 223.166.61.206 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 31 01:17:37 14499 sshd[2684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho ... show more (sshd) Failed SSH login from 223.166.61.206 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 31 01:17:37 14499 sshd[2684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.166.61.206 user=root Dec 31 01:17:39 14499 sshd[2684]: Failed password for root from 223.166.61.206 port 61377 ssh2 Dec 31 01:21:52 14499 sshd[3053]: Invalid user nokia from 223.166.61.206 port 23649 Dec 31 01:21:55 14499 sshd[3053]: Failed password for invalid user nokia from 223.166.61.206 port 23649 ssh2 Dec 31 01:22:39 14499 sshd[3163]: Invalid user administrador from 223.166.61.206 port 51649 show less	Brute-Force SSH
🇺🇸 Tect.host	2025-12-31 07:22:41 UTC · (10 months ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
🇳🇱 WebTejo	2025-12-31 07:22:36 UTC · (10 months ago)	Detected multiple authentication failures and invalid user attempts from IP address 223.166.61.206 on [NL] Lobo Node.	Brute-Force SSH
🇨🇭 liloscambio.ch	2025-12-31 07:22:19 UTC · (10 months ago)	2025-12-31T08:22:16.935034+01:00 liloscambio sshd[636503]: Invalid user nokia from 223.166.61.206 port 32257 2025-12-31T08:22:16.948970+01:00 liloscambio sshd[636503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ... show more 2025-12-31T08:22:16.935034+01:00 liloscambio sshd[636503]: Invalid user nokia from 223.166.61.206 port 32257 2025-12-31T08:22:16.948970+01:00 liloscambio sshd[636503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.166.61.206 2025-12-31T08:22:19.024434+01:00 liloscambio sshd[636503]: Failed password for invalid user nokia from 223.166.61.206 port 32257 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-12-31 05:56:30 UTC · (10 months ago)	Dec 31 07:50:19 dev sshd[1886157]: Invalid user ubuntu from 223.166.61.206 port 10465 Dec 31 07:51:51 dev sshd[1886465]: Invalid user docker from 223.166.61.206 port 24577 Dec 31 07:53:25 dev sshd[1886717]: Invalid user testuser1 from 223.166.61.206 ... show more Dec 31 07:50:19 dev sshd[1886157]: Invalid user ubuntu from 223.166.61.206 port 10465 Dec 31 07:51:51 dev sshd[1886465]: Invalid user docker from 223.166.61.206 port 24577 Dec 31 07:53:25 dev sshd[1886717]: Invalid user testuser1 from 223.166.61.206 port 37890 Dec 31 07:54:55 dev sshd[1886975]: Invalid user centos from 223.166.61.206 port 51329 Dec 31 07:56:30 dev sshd[1887741]: Invalid user ubuntu from 223.166.61.206 port 64706 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-31 05:41:32 UTC · (10 months ago)	223.166.61.206 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 23:38:47 15084 sshd[11980]: Failed password for root from 188.245.56.16 port 34870 ssh2 Dec ... show more 223.166.61.206 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 23:38:47 15084 sshd[11980]: Failed password for root from 188.245.56.16 port 34870 ssh2 Dec 30 23:36:40 15084 sshd[11710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.240.117.50 user=root Dec 30 23:36:42 15084 sshd[11710]: Failed password for root from 93.240.117.50 port 40538 ssh2 Dec 30 23:38:45 15084 sshd[11980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.245.56.16 user=root Dec 30 23:41:06 15084 sshd[12326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.166.61.206 user=root IP Addresses Blocked: 188.245.56.16 (DE/Germany/static.16.56.245.188.clients.your-server.de) 93.240.117.50 (DE/Germany/p5df07532.dip0.t-ipconnect.de) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-31 03:29:09 UTC · (10 months ago)	223.166.61.206 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 21:28:55 16685 sshd[10017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more 223.166.61.206 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 30 21:28:55 16685 sshd[10017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.207.186.22 user=root Dec 30 21:28:57 16685 sshd[10017]: Failed password for root from 183.207.186.22 port 55638 ssh2 Dec 30 21:09:03 16685 sshd[8300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.166.61.206 user=root Dec 30 21:09:04 16685 sshd[8300]: Failed password for root from 223.166.61.206 port 35617 ssh2 Dec 30 21:12:22 16685 sshd[8587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.243.35 user=root IP Addresses Blocked: 183.207.186.22 (CN/China/-) show less	Brute-Force SSH
🇩🇪 pigro	2025-12-31 02:32:01 UTC · (10 months ago)	Dec 31 03:31:11 vps-07b0f6cf sshd[1294424]: User root from 223.166.61.206 not allowed because not listed in AllowUsers Dec 31 03:32:01 vps-07b0f6cf sshd[1294448]: Invalid user deploy from 223.166.61.206 port 38466 ...	Brute-Force SSH
🇩🇪 nicosqc	2025-12-31 00:49:57 UTC · (10 months ago)	Invalid user hadoop from 223.166.61.206 port 40545	Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-12-30 23:38:06 UTC · (10 months ago)		Brute-Force Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇸 198.143.179.106

🇯🇴 176.28.133.241

🇰🇷 125.139.124.120

🇺🇸 68.183.136.127

🇮🇶 37.238.4.144

🇺🇸 34.85.149.162

🇷🇴 2.57.121.25

🇧🇷 200.102.200.43

🇻🇪 186.14.169.153

🇦🇷 179.62.62.127

🇺🇸 172.56.166.98

🇨🇳 101.126.70.177

🇳🇱 91.148.244.131

🇺🇸 84.37.38.210

🇸🇬 47.82.55.100

🇸🇬 47.82.53.190

🇧🇷 45.172.69.198

🇵🇱 45.138.12.142

🇺🇸 44.233.21.113

🇨🇳 117.27.135.84