JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.12.4.165

106.12.4.165 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.12.4.165

Whois 106.12.4.165

IP Abuse Reports for 106.12.4.165:

This IP address has been reported a total of 60 times from 54 distinct sources. 106.12.4.165 was first reported on June 26th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 LockBlock	2026-07-04 17:00:03 (3 hours ago)	2026-07-04 17:00:02: Port scan detected from 106.12.4.165 on port 22 of racknerd-e7e1a9	Port Scan SSH
🇺🇸 mijavapolicy.com	2026-07-04 16:26:17 (3 hours ago)	Jul 4 16:25:59 v3 sshd[3666822]: Failed password for invalid user root from 106.12.4.165 port 58150 ... show more Jul 4 16:25:59 v3 sshd[3666822]: Failed password for invalid user root from 106.12.4.165 port 58150 ssh2 Jul 4 16:26:06 v3 sshd[3666834]: User root from 106.12.4.165 not allowed because not listed in AllowUsers Jul 4 16:26:07 v3 sshd[3666834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root Jul 4 16:26:09 v3 sshd[3666834]: Failed password for invalid user root from 106.12.4.165 port 36514 ssh2 Jul 4 16:26:16 v3 sshd[3666838]: User root from 106.12.4.165 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇳🇱 THYRAKLES_EINZELUNTERNEHMEN_NOAH_FINLEY WOLF	2026-07-04 16:04:54 (4 hours ago)	systemd timer sync; source=sshd host=ns2 ip=106.12.4.165; evidence=fail2ban log NOTICE Ban event	Brute-Force SSH
🇳🇱 VMHeaven.io	2026-07-04 08:30:21 (11 hours ago)	2026-07-04T08:30:00.098968+00:00 baloo sshd[544377]: Failed password for root from 106.12.4.165 port ... show more 2026-07-04T08:30:00.098968+00:00 baloo sshd[544377]: Failed password for root from 106.12.4.165 port 33448 ssh2 2026-07-04T08:30:09.520288+00:00 baloo sshd[544892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root 2026-07-04T08:30:11.554864+00:00 baloo sshd[544892]: Failed password for root from 106.12.4.165 port 59064 ssh2 2026-07-04T08:30:18.969286+00:00 baloo sshd[545270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root 2026-07-04T08:30:21.241470+00:00 baloo sshd[545270]: Failed password for root from 106.12.4.165 port 57842 ssh2 ... show less	Brute-Force SSH
🇸🇪 sa0azs	2026-07-03 21:25:24 (22 hours ago)	Jul 3 23:25:11 OakCottage sshd[22370]: Failed password for root from 106.12.4.165 port 35104 ssh2 J ... show more Jul 3 23:25:11 OakCottage sshd[22370]: Failed password for root from 106.12.4.165 port 35104 ssh2 Jul 3 23:25:18 OakCottage sshd[22375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root Jul 3 23:25:21 OakCottage sshd[22375]: Failed password for root from 106.12.4.165 port 58062 ssh2 ... show less	Brute-Force SSH
🇪🇸 el-brujo	2026-07-03 06:51:00 (1 day ago)	2026-07-03T08:50:52.692024 ns2.elhacker.net proftpd[1721078]: session[1721078] 0.0.0.0 (106.12.4.165 ... show more 2026-07-03T08:50:52.692024 ns2.elhacker.net proftpd[1721078]: session[1721078] 0.0.0.0 (106.12.4.165[106.12.4.165]): USER root (Login failed): Incorrect password 2026-07-03T08:50:59.738011 ns2.elhacker.net proftpd[1721096]: session[1721096] 0.0.0.0 (106.12.4.165[106.12.4.165]): USER root (Login failed): Incorrect password ... show less	FTP Brute-Force
Anonymous	2026-07-03 05:23:17 (1 day ago)	2026-07-03T07:23:04.106330+02:00 outpost sshd[3856138]: pam_unix(sshd:auth): authentication failure; ... show more 2026-07-03T07:23:04.106330+02:00 outpost sshd[3856138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root 2026-07-03T07:23:06.264209+02:00 outpost sshd[3856138]: Failed password for root from 106.12.4.165 port 40682 ssh2 2026-07-03T07:23:13.543450+02:00 outpost sshd[3856222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root 2026-07-03T07:23:15.937095+02:00 outpost sshd[3856222]: Failed password for root from 106.12.4.165 port 33504 ssh2 ... show less	Brute-Force SSH
🇩🇪 JamDon2	2026-07-03 01:39:23 (1 day ago)	2026-07-03T01:38:56.238093+00:00 server sshd[17297]: Invalid user user from 106.12.4.165 port 60786 ... show more 2026-07-03T01:38:56.238093+00:00 server sshd[17297]: Invalid user user from 106.12.4.165 port 60786 2026-07-03T01:38:59.190006+00:00 server sshd[17411]: Invalid user user from 106.12.4.165 port 37716 2026-07-03T01:39:02.289023+00:00 server sshd[17522]: Invalid user user from 106.12.4.165 port 37728 2026-07-03T01:39:19.749331+00:00 server sshd[17706]: Invalid user user from 106.12.4.165 port 41288 2026-07-03T01:39:22.387034+00:00 server sshd[17784]: Invalid user user from 106.12.4.165 port 41296 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-07-02 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 rscott.us	2026-07-02 22:00:14 (1 day ago)	Brute force SSH login attempts.	Brute-Force SSH
🇧🇪 sid3windr	2026-07-02 21:29:37 (1 day ago)	SSH port scan (Tarpitted for 20s, wasted 3B)	Port Scan SSH
🇪🇸 whatda	2026-07-02 21:26:57 (1 day ago)	SSH brute-force login detected. Automated IDS report.	SSH Brute-Force
🇩🇪 dispaisyenterprises	2026-07-02 17:09:51 (2 days ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 nasset	2026-07-02 09:17:44 (2 days ago)	2026-07-02T02:17:31.158303-07:00 ftp-green sshd[3293562]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-02T02:17:31.158303-07:00 ftp-green sshd[3293562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root 2026-07-02T02:17:32.588772-07:00 ftp-green sshd[3293562]: Failed password for root from 106.12.4.165 port 34712 ssh2 2026-07-02T02:17:34.614837-07:00 ftp-green sshd[3293562]: Connection closed by authenticating user root 106.12.4.165 port 34712 [preauth] 2026-07-02T02:17:42.223674-07:00 ftp-green sshd[3293565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.4.165 user=root 2026-07-02T02:17:43.828486-07:00 ftp-green sshd[3293565]: Failed password for root from 106.12.4.165 port 58182 ssh2 ... show less	Brute-Force SSH
🇹🇷 oalver	2026-07-02 08:22:31 (2 days ago)	Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ... show more Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-06-28. Risk score: 100/100. show less	Brute-Force SSH

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 87.106.239.83

🇮🇳 20.204.136.58

🇬🇧 193.32.209.237

🇷🇴 193.32.162.84

🇧🇷 187.120.73.135

🇳🇱 147.45.50.171

🇳🇱 147.45.50.147

🇧🇷 45.205.1.222

🇨🇦 20.48.255.163

🇬🇧 2a05:d01c:68f:ef01:2a0c:8f82:6c2c:62b0

🇩🇪 167.94.145.28

🇺🇾 167.61.249.75

🇺🇸 162.216.149.60

🇺🇸 147.185.132.78

🇳🇱 147.45.50.108

🇺🇸 136.66.137.244

🇨🇳 117.139.225.254

🇳🇱 91.92.42.61

🇱🇹 45.227.254.170

🇺🇸 20.65.193.152