JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 106.13.172.38

106.13.172.38 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 106.13.172.38

Whois 106.13.172.38

IP Abuse Reports for 106.13.172.38:

This IP address has been reported a total of 43 times from 33 distinct sources. 106.13.172.38 was first reported on July 2nd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-07-16 01:02:22 (1 hour ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇨🇦 maik	2026-07-16 00:12:38 (2 hours ago)	SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including ... show more SSH brute-force attack detected via Cowrie SSH honeypot. Tried 1 credential combination(s) including username="root". Automated report from Olympus SOC. show less	SSH
🇩🇪 localhost-admin	2026-07-15 12:44:37 (13 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force SSH
🇷🇺 GoXLd	2026-07-15 12:22:39 (13 hours ago)	2026-07-15T14:22:37.498971+02:00 gXdNODE2 sshd-session[497350]: pam_unix(sshd:auth): authentication ... show more 2026-07-15T14:22:37.498971+02:00 gXdNODE2 sshd-session[497350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.172.38 user=root 2026-07-15T14:22:39.002158+02:00 gXdNODE2 sshd-session[497350]: Failed password for root from 106.13.172.38 port 60978 ssh2 ... show less	Brute-Force SSH
🇩🇪 Phenix Info	2026-07-15 10:34:35 (15 hours ago)	SmallGuard.fr/Prestashop SSH Login failded	Brute-Force
🇩🇪 laotuo	2026-07-15 09:19:45 (16 hours ago)	Jul 15 11:19:41 h2930838 sshd[19641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Jul 15 11:19:41 h2930838 sshd[19641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.172.38 user=root Jul 15 11:19:44 h2930838 sshd[19641]: Failed password for invalid user root from 106.13.172.38 port 64454 ssh2 show less	Brute-Force SSH
🇫🇷 tecnicorioja	2026-07-15 06:45:41 (19 hours ago)	Failed password for root Jul 15 06:16:30 port 56313	Brute-Force SSH
🇮🇳 evicky2002	2026-07-15 06:00:00 (20 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 COMAITE	2026-07-15 04:27:18 (21 hours ago)	Honeypot login success	Brute-Force
🇭🇰 989990.xyz	2026-07-15 03:26:54 (22 hours ago)	2026-07-15T06:56:52.399155+03:30 vm940970 sshd[299544]: pam_unix(sshd:auth): authentication failure; ... show more 2026-07-15T06:56:52.399155+03:30 vm940970 sshd[299544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.172.38 user=root 2026-07-15T06:56:54.005242+03:30 vm940970 sshd[299544]: Failed password for root from 106.13.172.38 port 58028 ssh2 ... show less	Port Scan Hacking Brute-Force Bad Web Bot SSH
🇰🇷 Woodie	2026-07-15 01:32:11 (1 day ago)	2026-07-14T21:27:23.027688-04:00 debian sshd[1786827]: Failed password for root from 106.13.172.38 p ... show more 2026-07-14T21:27:23.027688-04:00 debian sshd[1786827]: Failed password for root from 106.13.172.38 port 63989 ssh2 2026-07-14T21:32:07.841897-04:00 debian sshd[1790671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.172.38 user=root 2026-07-14T21:32:09.925283-04:00 debian sshd[1790671]: Failed password for root from 106.13.172.38 port 50895 ssh2 2026-07-14T21:32:08.697550-04:00 debian sshd[1790672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.172.38 user=root 2026-07-14T21:32:11.250834-04:00 debian sshd[1790672]: Failed password for root from 106.13.172.38 port 50898 ssh2 ... show less	Brute-Force SSH
🇺🇸 989990.xyz	2026-07-14 20:57:23 (1 day ago)	2026-07-15T00:27:20.435176+03:30 da-cat sshd[602431]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-07-15T00:27:20.435176+03:30 da-cat sshd[602431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.172.38 user=root 2026-07-15T00:27:22.475351+03:30 da-cat sshd[602431]: Failed password for root from 106.13.172.38 port 60775 ssh2 ... show less	Port Scan Hacking Brute-Force Bad Web Bot SSH
🇺🇸 anon333	2026-07-14 19:33:12 (1 day ago)	Hacker syslog review 1784057592	Hacking
🇨🇭 m_vlasov	2026-07-14 18:25:34 (1 day ago)	SSH/Telnet honeypot: 2 login attempts, 2 sessions, 0 shell commands.	Port Scan Brute-Force SSH
🇵🇱 ntxg	2026-07-14 17:29:13 (1 day ago)	2026-07-14T19:29:10.600384+02:00 serverftp sshd[3008074]: pam_unix(sshd:auth): authentication failur ... show more 2026-07-14T19:29:10.600384+02:00 serverftp sshd[3008074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.172.38 user=root 2026-07-14T19:29:12.648277+02:00 serverftp sshd[3008074]: Failed password for root from 106.13.172.38 port 51967 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 103.187.146.90

🇳🇱 35.204.171.42

🇺🇸 23.129.64.150

🇰🇷 211.228.218.47

🇺🇸 195.184.76.184

🇨🇳 183.66.166.30

🇨🇳 117.50.51.119

🇬🇧 92.23.207.187

🇳🇱 45.156.87.254

🇸🇬 45.78.204.254

🇺🇸 45.33.84.124

🇧🇪 34.156.231.20

🇹🇼 198.235.24.116

🇬🇧 195.96.139.68

🇷🇴 193.46.255.86

🇲🇾 180.75.234.14

🇮🇳 106.205.47.99

🇭🇰 101.36.110.201

🇳🇱 93.123.109.101

🇫🇷 91.231.89.161