JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

61.231.196.209

Neutral Activity

Abuse Confidence Score

0% Low Risk

97 reports

59 reporters · latest 1 year ago

ISP: Chunghwa Telecom Data Communication Business Group
Usage Type: Fixed Line ISP
ASN: AS3462
Domain Name: cht.com.tw
Country: 🇹🇼 Taiwan
City: Hualien City, Taiwan

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

61.231.196.209 has been reported 97 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

97 from 59 distinct reporters

First reported

September 8th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-09-11 20:08:45 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-10 20:08:43 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-10 00:08:42 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-09 21:29:37 UTC · (1 year ago)	2025-09-10T00:26:00.222543+03:00 main sshd-session[2459071]: Disconnected from authenticating user root 61.231.196.209 port 58756 [preauth] 2025-09-10T00:29:33.469549+03:00 main sshd-session[2459186]: Invalid user dev from 61.231.196.209 port 53836 2 ... show more 2025-09-10T00:26:00.222543+03:00 main sshd-session[2459071]: Disconnected from authenticating user root 61.231.196.209 port 58756 [preauth] 2025-09-10T00:29:33.469549+03:00 main sshd-session[2459186]: Invalid user dev from 61.231.196.209 port 53836 2025-09-10T00:29:33.483083+03:00 main sshd-session[2459186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 2025-09-10T00:29:35.073511+03:00 main sshd-session[2459186]: Failed password for invalid user dev from 61.231.196.209 port 53836 ssh2 2025-09-10T00:29:35.959942+03:00 main sshd-session[2459186]: Disconnected from invalid user dev 61.231.196.209 port 53836 [preauth] ... show less	Brute-Force SSH
🇩🇪 ITSNF	2025-09-09 21:27:23 UTC · (1 year ago)	FFM Sep 9 23:09:21 websrv01 sshd[4105083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 Sep 9 23:09:22 websrv01 sshd[4105083]: Failed password for invalid user deploy from 61.231.196.209 po ... show more FFM Sep 9 23:09:21 websrv01 sshd[4105083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 Sep 9 23:09:22 websrv01 sshd[4105083]: Failed password for invalid user deploy from 61.231.196.209 port 45430 ssh2 Sep 9 23:24:34 websrv01 sshd[4107035]: Invalid user dev from 61.231.196.209 port 57494 Sep 9 23:24:34 websrv01 sshd[4107035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 Sep 9 23:24:35 websrv01 sshd[4107035]: Failed password for invalid user dev from 61.231.196.209 port 57494 ssh2 show less	Brute-Force SSH
🇩🇪 mtnmedia.group	2025-09-09 21:15:48 UTC · (1 year ago)	2025-09-09T23:08:10.292663+02:00 hera sshd[3968127]: Failed password for root from 61.231.196.209 port 38960 ssh2 2025-09-09T23:12:00.717645+02:00 hera sshd[3968207]: Invalid user deploy from 61.231.196.209 port 35552 2025-09-09T23:12:00.725975+02:00 ... show more 2025-09-09T23:08:10.292663+02:00 hera sshd[3968127]: Failed password for root from 61.231.196.209 port 38960 ssh2 2025-09-09T23:12:00.717645+02:00 hera sshd[3968207]: Invalid user deploy from 61.231.196.209 port 35552 2025-09-09T23:12:00.725975+02:00 hera sshd[3968207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 2025-09-09T23:12:02.624263+02:00 hera sshd[3968207]: Failed password for invalid user deploy from 61.231.196.209 port 35552 ssh2 2025-09-09T23:15:47.349472+02:00 hera sshd[3968314]: Invalid user userb from 61.231.196.209 port 60172 ... show less	Brute-Force SSH
Anonymous	2025-09-09 21:14:32 UTC · (1 year ago)	2025-09-10T00:05:45.973635+03:00 main sshd-session[2458267]: Disconnected from authenticating user root 61.231.196.209 port 57758 [preauth] 2025-09-10T00:10:43.888322+03:00 main sshd-session[2458495]: pam_unix(sshd:auth): authentication failure; logn ... show more 2025-09-10T00:05:45.973635+03:00 main sshd-session[2458267]: Disconnected from authenticating user root 61.231.196.209 port 57758 [preauth] 2025-09-10T00:10:43.888322+03:00 main sshd-session[2458495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root 2025-09-10T00:10:45.369998+03:00 main sshd-session[2458495]: Failed password for root from 61.231.196.209 port 46186 ssh2 2025-09-10T00:10:46.438119+03:00 main sshd-session[2458495]: Disconnected from authenticating user root 61.231.196.209 port 46186 [preauth] 2025-09-10T00:14:32.021147+03:00 main sshd-session[2458658]: Invalid user deploy from 61.231.196.209 port 42806 ... show less	Brute-Force SSH
🇩🇪 ITSNF	2025-09-09 21:12:09 UTC · (1 year ago)	FFM Sep 9 22:57:00 websrv01 sshd[4102743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root Sep 9 22:57:02 websrv01 sshd[4102743]: Failed password for root from 61.231.196.209 port 53 ... show more FFM Sep 9 22:57:00 websrv01 sshd[4102743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root Sep 9 22:57:02 websrv01 sshd[4102743]: Failed password for root from 61.231.196.209 port 53570 ssh2 Sep 9 23:05:35 websrv01 sshd[4104511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root Sep 9 23:05:37 websrv01 sshd[4104511]: Failed password for root from 61.231.196.209 port 48928 ssh2 Sep 9 23:09:21 websrv01 sshd[4105083]: Invalid user deploy from 61.231.196.209 port 45430 show less	Brute-Force SSH
🇩🇪 LoNET	2025-09-09 20:35:50 UTC · (1 year ago)	Report 1853369 with IP 2900915 for SSH brute-force attack by source 2895586 via ssh-honeypot/0.2.1+http	Brute-Force SSH
🇩🇪 KeksGauner	2025-09-09 20:35:40 UTC · (1 year ago)	Sep 9 22:31:52 NBG-VS02-WebServer sshd[16552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root Sep 9 22:31:54 NBG-VS02-WebServer sshd[16552]: Failed password for root from 61.231.196 ... show more Sep 9 22:31:52 NBG-VS02-WebServer sshd[16552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root Sep 9 22:31:54 NBG-VS02-WebServer sshd[16552]: Failed password for root from 61.231.196.209 port 53770 ssh2 Sep 9 22:35:37 NBG-VS02-WebServer sshd[16617]: Invalid user steve from 61.231.196.209 port 48354 Sep 9 22:35:37 NBG-VS02-WebServer sshd[16617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 Sep 9 22:35:39 NBG-VS02-WebServer sshd[16617]: Failed password for invalid user steve from 61.231.196.209 port 48354 ssh2 ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-09 20:08:43 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-09-09 20:04:18 UTC · (1 year ago)	Sep 9 19:57:16 nosvoid sshd[1774806]: Failed password for root from 61.231.196.209 port 42984 ssh2 Sep 9 20:00:44 nosvoid sshd[1777956]: Invalid user proradis from 61.231.196.209 port 37352 Sep 9 20:00:44 nosvoid sshd[1777956]: pam_unix(sshd:auth) ... show more Sep 9 19:57:16 nosvoid sshd[1774806]: Failed password for root from 61.231.196.209 port 42984 ssh2 Sep 9 20:00:44 nosvoid sshd[1777956]: Invalid user proradis from 61.231.196.209 port 37352 Sep 9 20:00:44 nosvoid sshd[1777956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 Sep 9 20:00:46 nosvoid sshd[1777956]: Failed password for invalid user proradis from 61.231.196.209 port 37352 ssh2 Sep 9 20:04:17 nosvoid sshd[1781057]: Invalid user vagrant from 61.231.196.209 port 60708 ... show less	Brute-Force SSH
Anonymous	2025-09-09 19:42:58 UTC · (1 year ago)	Sep 9 19:39:16 nosvoid sshd[1758955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root Sep 9 19:39:18 nosvoid sshd[1758955]: Failed password for root from 61.231.196.209 port 41238 ss ... show more Sep 9 19:39:16 nosvoid sshd[1758955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root Sep 9 19:39:18 nosvoid sshd[1758955]: Failed password for root from 61.231.196.209 port 41238 ssh2 Sep 9 19:42:54 nosvoid sshd[1762168]: Invalid user tomcat from 61.231.196.209 port 35150 Sep 9 19:42:54 nosvoid sshd[1762168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 Sep 9 19:42:57 nosvoid sshd[1762168]: Failed password for invalid user tomcat from 61.231.196.209 port 35150 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-09-09 19:02:53 UTC · (1 year ago)	Fail2Ban	Brute-Force SSH
🇨🇳 CGT Software Webmaster	2025-09-09 16:53:06 UTC · (1 year ago)	2025-09-10T00:46:47.632405+08:00 VM-8-9-debian sshd[695579]: Failed password for invalid user hadoop from 61.231.196.209 port 48260 ssh2 2025-09-10T00:53:03.820751+08:00 VM-8-9-debian sshd[696383]: pam_unix(sshd:auth): authentication failure; logname ... show more 2025-09-10T00:46:47.632405+08:00 VM-8-9-debian sshd[695579]: Failed password for invalid user hadoop from 61.231.196.209 port 48260 ssh2 2025-09-10T00:53:03.820751+08:00 VM-8-9-debian sshd[696383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.231.196.209 user=root 2025-09-10T00:53:05.761783+08:00 VM-8-9-debian sshd[696383]: Failed password for root from 61.231.196.209 port 54926 ssh2 ... show less	Port Scan Brute-Force

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 172.64.200.17

🇻🇳 171.235.42.109

🇺🇸 162.216.150.200

🇺🇸 155.138.208.164

🇺🇸 104.22.204.64

🇸🇮 102.220.161.85

🇱🇹 95.81.82.32

🇮🇳 49.43.248.239

🇨🇳 120.238.199.133

🇫🇷 89.93.176.208

🇩🇪 64.89.163.78

🇺🇸 47.200.147.59

🇩🇪 2a01:4f8:172:3bcb::2

🇳🇱 193.47.62.69

🇩🇪 167.94.145.20

🇧🇴 166.114.169.64

🇺🇸 162.216.149.47

🇳🇱 109.160.32.115

🇺🇸 72.240.125.133

🇦🇺 3.25.67.46