90/100
Fraud score
critical risk
What we know about 106.6.144.185.
VPN
Clean
Proxy
Clean
Tor
Clean
Relay
Clean
Datacenter
Clean
Mobile
Clean
Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation
Network
- ASN
- AS4134
- Organization
- Chinanet
- ISP
- Chinanet
- Connection type
- Residential
- Cloud provider
- –
- Residential proxy
- No
- Shared connection
- No
Location
- Country
- China (CN)
- Region
- Jiangxi
- City
- Yushuiqu
- Coordinates
- 27.7947, 114.9344
- Timezone
- Asia/Shanghai
- rDNS
- no_ptr
- Company
- CHINANET JIANGXI PROVINCE NETWORK
- Company type
- isp
- Network
- 106.4.0.0 - 106.7.255.255
History
- First seen
- Sep 24, 2026
- Last seen
- Nov 2, 2026
- Times seen
- 431
Registry and abuse
- Netname
- CHINANET-JX
- Status
- ALLOCATED PORTABLE
- Allocated
- 2011-03-21
Threat signatures · 8
Subnet (/24)
- IPs observed
- 5
- Abusive
- 5
- Abuse ratio
- 100%
No reports on 106.6.144.185 yet.
Nobody has reported 106.6.144.185 yet. If it attacked you, be the first: every report feeds the free, open database that everyone can use.
106.6.144.185, answered.
No. 106.6.144.185 does not match any VPN, proxy, or Tor signature in our data. It looks like a residential or business connection.
FFraud scores 106.6.144.185 at 90/100 (critical risk) because Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation We recommend blocking or challenging it.
106.6.144.185 is operated by Chinanet (AS4134), located in Yushuiqu, China.
The score reflects high-confidence signals: Active command & control (C2) server used to coordinate malware operations. Identified as part of a botnet network. Performing SSH brute force attacks against servers. FTP brute force attacks and unauthorized access attempts. Persistent high-severity threat, confirmed repeatedly by our honeypot sensors and community reports. Located in a high-risk network neighborhood where 100% of the /24 subnet is flagged for abuse - this level of concentration typically indicates compromised infrastructure or a malicious hosting operation FFraud only lists an IP once it is independently confirmed at least twice, by our honeypot sensors and community reports.
Check another IP. One at a time, instantly.
106.6.144.185: fraud score 90 of 100, Critical
106.6.144.185
Chinanet · China
90/100
Fraud score
- VPN: no
- Proxy: no
- Tor: no
- Datacenter: no