JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.120.57.90

106.120.57.90 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 15%: ?

15%

ISP	CHINANET Beijing province network
Usage Type	Fixed Line ISP
ASN	AS4847
Domain Name	bjtelecom.net
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.120.57.90

Whois 106.120.57.90

IP Abuse Reports for 106.120.57.90:

This IP address has been reported a total of 41 times from 13 distinct sources. 106.120.57.90 was first reported on May 24th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 DRI	2026-08-19 06:53:36 (2 weeks ago)	Web attack/Malicious activity detected	Web App Attack
🇨🇦 Liborio	2026-08-15 11:15:00 (2 weeks ago)	wp_login	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-07-25 22:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-25 21:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.3/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-25 20:00:09 (1 month ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 5.7/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 EGP Abuse Dept	2026-06-30 01:54:12 (2 months ago)	Scanning for port/service exploits on tpc-051.mach3builders.nl	Port Scan Hacking
Anonymous	2026-06-25 16:20:28 (2 months ago)	Web App Attack, Hacking	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 23:00:39 (3 months ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6/10 (MEDIUM). Confidence: 40 ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 22:00:45 (3 months ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.1/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 21:00:38 (3 months ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 20:00:18 (3 months ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 4.8/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 4.8/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-18 19:00:11 (3 months ago)	Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 4.9/10 (MEDIUM). Reported by ... show more Zimbra: Login failures from malicious IP: 106.120.57.90. Threat Score: 4.9/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇬🇧 cg-design.co.uk	2026-03-15 11:56:40 (5 months ago)	106.120.57.90 (CN/China/-), 10 distributed imapd attacks on account [redacted]	Brute-Force
Anonymous	2026-02-01 03:30:12 (7 months ago)		Hacking
Anonymous	2026-02-01 03:10:08 (7 months ago)	VPN Abuse brute force	Hacking

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 184.151.85.100

🇨🇳 106.13.107.71

🇺🇸 2604:a880:800:14:0:3:7364:7000

🇦🇺 223.27.18.80

🇰🇷 222.108.100.117

🇲🇽 204.157.106.57

🇩🇪 194.88.98.123

🇨🇭 156.246.154.132

🇺🇸 129.213.81.80

🇰🇷 222.99.237.249

🇹🇼 198.235.24.64

🇺🇸 195.184.76.39

🇧🇴 186.121.233.2

🇵🇭 124.83.53.232

🇬🇧 178.128.169.48

🇮🇳 117.247.82.240

🇹🇷 88.224.135.129

🇺🇸 40.119.36.100

🇨🇦 147.182.147.156

🇦🇺 118.208.154.224