IP intelligence

106.6.144.185

Yushuiqu, China · Chinanet · Residential

Own this IP? Request a review

90/100

Fraud score

critical risk

What we know about 106.6.144.185.

VPN

Clean

Proxy

Clean

Tor

Clean

Relay

Clean

Datacenter

Clean

Mobile

Clean

Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation

Network

Organization
Chinanet
ISP
Chinanet
Connection type
Residential
Cloud provider
–
Residential proxy
No
Shared connection
No

Location

Country
China (CN)
Region
Jiangxi
City
Yushuiqu
Coordinates
27.7947, 114.9344
Timezone
Asia/Shanghai
rDNS
no_ptr
Company
CHINANET JIANGXI PROVINCE NETWORK
Company type
isp
Network
106.4.0.0 - 106.7.255.255

History

First seen
Sep 24, 2026
Last seen
Nov 2, 2026
Times seen
431

Registry and abuse

Netname
CHINANET-JX
Status
ALLOCATED PORTABLE
Allocated
2011-03-21

Threat signatures · 8

c2_serverbotnet_nodessh_brute_forceftp_attackserver_abusemulti_source_abusemulti_source_blacklistport_scan

Subnet (/24)

IPs observed
5
Abusive
5
Abuse ratio
100%

No reports on 106.6.144.185 yet.

Nobody has reported 106.6.144.185 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.

106.6.144.185, answered.

No. 106.6.144.185 does not match any VPN, proxy, or Tor signature in our data. It looks like a residential or business connection.

FFraud scores 106.6.144.185 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.

106.6.144.185 is operated by Chinanet (AS4134), located in Yushuiqu, China.

The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.

Check another IP. One at a time, instantly.

106.6.144.185: fraud score 90 of 100, Critical

106.6.144.185

Chinanet · China

Critical

90/100

Fraud score

  • VPN: no
  • Proxy: no
  • Tor: no
  • Datacenter: no
Live from the FFraud APIFull report