JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.12.154.140

106.12.154.140 was found in our database!

This IP was reported 597 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.12.154.140

Whois 106.12.154.140

IP Abuse Reports for 106.12.154.140:

This IP address has been reported a total of 597 times from 316 distinct sources. 106.12.154.140 was first reported on April 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 strefapi_com	2026-05-31 02:40:22 (4 days ago)	2026-05-31T04:34:57.569220+02:00 mail sshd-session[1547726]: Failed password for root from 106.12.15 ... show more 2026-05-31T04:34:57.569220+02:00 mail sshd-session[1547726]: Failed password for root from 106.12.154.140 port 38818 ssh2 2026-05-31T04:38:48.762303+02:00 mail sshd-session[1547829]: Invalid user bitnami from 106.12.154.140 port 60376 2026-05-31T04:38:50.768484+02:00 mail sshd-session[1547829]: Failed password for invalid user bitnami from 106.12.154.140 port 60376 ssh2 2026-05-31T04:40:23.884526+02:00 mail sshd-session[1548261]: Invalid user albert from 106.12.154.140 port 51446 2026-05-31T04:40:25.930525+02:00 mail sshd-session[1548261]: Failed password for invalid user albert from 106.12.154.140 port 51446 ssh2 ... show less	Brute-Force SSH
🇸🇪 donarev419	2026-05-31 00:43:04 (4 days ago)	Connection to port 7038 with data transfer. Data preview: SSH-2.0-libssh_0.12.0	Port Scan Hacking
🇦🇹 Pingger Shikkoken	2026-05-31 00:14:10 (4 days ago)	2026-05-31T00:14:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2026-05-31T00:14:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=106.12.154.140 DST=10.1.1.5 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=61061 DF PROTO=TCP SPT=42076 DPT=2222 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-31T00:14:13+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=106.12.154.140 DST=10.1.1.5 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=61063 DF PROTO=TCP SPT=42076 DPT=2222 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-31T00:14:20+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=106.12.154.140 DST=10.1.1.5 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=61064 DF PROTO=TCP SPT=42076 DPT=2222 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Hacking Brute-Force SSH
🇫🇮 Kotiacat_one	2026-05-31 00:05:58 (4 days ago)	2026-05-31T02:05:58.456345+02:00 game2 sshd-session[712808]: Invalid user abdullah from 106.12.154.1 ... show more 2026-05-31T02:05:58.456345+02:00 game2 sshd-session[712808]: Invalid user abdullah from 106.12.154.140 port 54490 ... show less	Brute-Force SSH
🇺🇸 Nazgul	2026-05-30 20:16:57 (4 days ago)	SSH brute force attempt (f4)	Brute-Force SSH
🇩🇪 Bigbear3	2026-05-30 18:35:45 (4 days ago)	Report-by-bigbear3	Brute-Force SSH
Anonymous	2026-05-30 17:47:13 (4 days ago)	$f2bV_matches	Brute-Force SSH
🇭🇺 sRichy	2026-05-30 14:02:00 (4 days ago)	Apr 5 09:19:09 teamcity sshd[834607]: Invalid user jose from 106.12.154.140 port 50656 Apr 5 10:04 ... show more Apr 5 09:19:09 teamcity sshd[834607]: Invalid user jose from 106.12.154.140 port 50656 Apr 5 10:04:59 teamcity sshd[852907]: Invalid user bot from 106.12.154.140 port 36418 May 30 16:01:59 teamcity sshd[1176839]: Invalid user oracle from 106.12.154.140 port 52774 ... show less	Brute-Force SSH
🇳🇱 big-cloud.nl	2026-05-30 10:14:51 (4 days ago)	Unauthorized SSH connection attempt	SSH
🇺🇸 jennij	2026-05-30 08:39:18 (4 days ago)	Fail2Ban sshd ban on debian ...	Brute-Force SSH
🇺🇸 r	2026-05-30 07:00:28 (4 days ago)	May 30 07:00:28 panel sshd[6379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more May 30 07:00:28 panel sshd[6379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.154.140 show less	Brute-Force SSH
🇫🇮 GamesGames	2026-05-30 06:02:32 (4 days ago)	SSH login attempts	Brute-Force SSH
🇺🇸 blackburied	2026-05-29 23:55:01 (5 days ago)	SSH brute force on kuhioshores	Brute-Force SSH
🇩🇪 ipcop.net	2026-05-29 22:50:35 (5 days ago)	2026-05-30T00:45:33.070104+02:00 dns-admin-host01.dns-admin.srvfarm.net sshd-session[2267073]: Disco ... show more 2026-05-30T00:45:33.070104+02:00 dns-admin-host01.dns-admin.srvfarm.net sshd-session[2267073]: Disconnected from authenticating user admin 106.12.154.140 port 44372 [preauth] 2026-05-30T00:46:34.414398+02:00 dns-admin-host01.dns-admin.srvfarm.net sshd-session[2267110]: Connection closed by 106.12.154.140 port 39526 [preauth] 2026-05-30T00:49:16.441007+02:00 dns-admin-host01.dns-admin.srvfarm.net sshd-session[2267340]: Connection closed by 106.12.154.140 port 34870 [preauth] 2026-05-30T00:49:55.636772+02:00 dns-admin-host01.dns-admin.srvfarm.net sshd-session[2267404]: Connection closed by 106.12.154.140 port 47710 [preauth] 2026-05-30T00:50:35.281521+02:00 dns-admin-host01.dns-admin.srvfarm.net sshd-session[2267453]: Connection closed by 106.12.154.140 port 39326 [preauth] show less	Brute-Force
🇮🇳 Parth Maniar	2026-05-29 22:17:01 (5 days ago)	This IP address carried out 4 port scanning attempts on 29-05-2026. For more information or to repor ... show more This IP address carried out 4 port scanning attempts on 29-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH

Showing 46 to 60 of 597 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 217.216.59.228

🇧🇪 198.235.24.171

🇷🇴 93.114.194.159

🇰🇷 58.224.62.29

🇺🇦 31.42.184.158

🇺🇸 216.133.145.160

🇰🇷 211.106.54.198

🇺🇸 174.35.25.177

🇩🇪 167.94.146.45

🇩🇪 162.158.110.64

🇺🇸 147.185.132.231

🇺🇸 136.109.198.118

🇱🇹 45.227.254.170

🇳🇱 45.148.10.151

🇮🇩 36.78.97.156

🇺🇸 216.25.89.122

🇹🇼 198.235.24.116

🇨🇳 180.105.9.136

🇺🇸 172.96.182.111

🇩🇪 167.94.146.50