JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.246.78.201

140.246.78.201 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 2%: ?

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58519
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Guiyang, Guizhou

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.246.78.201

Whois 140.246.78.201

IP Abuse Reports for 140.246.78.201:

This IP address has been reported a total of 138 times from 96 distinct sources. 140.246.78.201 was first reported on December 18th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 BanHammer99	2026-07-21 03:14:50 (1 day ago)	Reported by VPN-flk	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-17 09:51:54 (2 months ago)	140.246.78.201 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ... show more 140.246.78.201 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 17 04:51:33 15645 sshd[21550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.153.54.120 user=root May 17 04:47:33 15645 sshd[20993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.153.54.120 user=root May 17 04:47:35 15645 sshd[20993]: Failed password for root from 43.153.54.120 port 41936 ssh2 May 17 04:46:38 15645 sshd[20901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.78.201 user=root May 17 04:46:40 15645 sshd[20901]: Failed password for root from 140.246.78.201 port 37336 ssh2 IP Addresses Blocked: 43.153.54.120 (US/-/-) show less	Brute-Force SSH
🇩🇪 LoNET	2026-05-14 07:44:53 (2 months ago)	Report 2367593 with IP 3415156 for SSH brute-force attack by source 3409818 via ssh-honeypot/0.2.0+h ... show more Report 2367593 with IP 3415156 for SSH brute-force attack by source 3409818 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
Anonymous	2026-05-14 07:39:22 (2 months ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-22 23:58:35 (2 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/140.246.78.201	SSH
🇺🇸 bigscoots.com	2026-03-04 16:08:33 (4 months ago)	140.246.78.201 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 140.246.78.201 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 4 10:08:27 13473 sshd[10577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.78.201 user=root Mar 4 09:08:46 13473 sshd[6624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.93.125.18 user=root Mar 4 09:08:48 13473 sshd[6624]: Failed password for root from 98.93.125.18 port 42750 ssh2 Mar 4 09:22:23 13473 sshd[7529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.93.125.18 user=root Mar 4 09:18:41 13473 sshd[7266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.93.125.18 user=root Mar 4 09:18:43 13473 sshd[7266]: Failed password for root from 98.93.125.18 port 40418 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-01-14 00:29:38 (6 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/140.246.78.201	SSH
🇦🇹 Filli Group	2026-01-13 02:36:58 (6 months ago)	2026-01-13T03:35:53.689230+01:00 mx01.crazycraftland.net sshd-session[3676406]: Invalid user teamspe ... show more 2026-01-13T03:35:53.689230+01:00 mx01.crazycraftland.net sshd-session[3676406]: Invalid user teamspeak from 140.246.78.201 port 58112 2026-01-13T03:36:14.916552+01:00 mx01.crazycraftland.net sshd-session[3676734]: Invalid user botuser1 from 140.246.78.201 port 34352 2026-01-13T03:36:57.857501+01:00 mx01.crazycraftland.net sshd-session[3677067]: Invalid user github from 140.246.78.201 port 43304 ... show less	Brute-Force SSH
🇺🇸 Szymekk	2026-01-13 02:35:41 (6 months ago)	Fail2Ban: SSH brute force attempt [srv05]	Brute-Force SSH
🇺🇸 bigscoots.com	2025-10-08 09:05:51 (9 months ago)	140.246.78.201 (CN/China/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; P ... show more 140.246.78.201 (CN/China/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 8 04:02:18 13586 sshd[15510]: Invalid user ubuntu from 154.91.85.223 port 50550 Oct 8 04:02:21 13586 sshd[15510]: Failed password for invalid user ubuntu from 154.91.85.223 port 50550 ssh2 Oct 8 04:02:31 13586 sshd[15513]: Invalid user ubuntu from 140.246.78.201 port 38396 Oct 8 04:02:32 13586 sshd[15513]: Failed password for invalid user ubuntu from 140.246.78.201 port 38396 ssh2 Oct 8 04:05:31 13586 sshd[15764]: Invalid user ubuntu from 154.91.85.223 port 55054 IP Addresses Blocked: 154.91.85.223 (SG/Singapore/-) show less	Brute-Force SSH
🇺🇸 General_Failure	2025-10-08 08:59:21 (9 months ago)	2025-10-08T03:59:20.592390-05:00 nio.local.lan sshd-session[238102]: Invalid user it from 140.246.78 ... show more 2025-10-08T03:59:20.592390-05:00 nio.local.lan sshd-session[238102]: Invalid user it from 140.246.78.201 port 42112 2025-10-08T03:59:20.824752-05:00 nio.local.lan sshd-session[238102]: Disconnected from invalid user it 140.246.78.201 port 42112 [preauth] ... show less	Brute-Force SSH
🇨🇦 Ssmidge	2025-09-08 23:56:34 (10 months ago)	type=USER_ERR msg=audit(1757375707.174:602884): pid=1302174 uid=0 auid=4294967295 ses=4294967295 sub ... show more type=USER_ERR msg=audit(1757375707.174:602884): pid=1302174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=140.246.78.201 addr=140.246.78.201 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ERR msg=audit(1757375793.756:603250): pid=1305579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=140.246.78.201 addr=140.246.78.201 terminal=ssh res=failed'UID="root" AUID="unset" ... show less	Brute-Force
🇨🇦 Ssmidge	2025-09-08 23:30:01 (10 months ago)	type=USER_ERR msg=audit(1757373983.284:598536): pid=1263195 uid=0 auid=4294967295 ses=4294967295 sub ... show more type=USER_ERR msg=audit(1757373983.284:598536): pid=1263195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=140.246.78.201 addr=140.246.78.201 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ERR msg=audit(1757374118.563:599106): pid=1268399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=140.246.78.201 addr=140.246.78.201 terminal=ssh res=failed'UID="root" AUID="unset" type=USER_ERR msg=audit(1757374201.539:599473): pid=1271681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=140.246.78.201 addr=140.246.78.201 terminal=ssh res=failed'UID="root" AUID="unset" ... show less	Brute-Force
🇩🇪 grassau.com	2025-09-08 23:29:26 (10 months ago)	(sshd) Failed SSH login from 140.246.78.201 (CN/China/-)	Brute-Force SSH
🇳🇱 chilibi.ch	2025-09-08 22:18:01 (10 months ago)	2025-09-08 22:18:01 alb SSH	Brute-Force SSH

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.43

🇧🇪 198.235.24.244

🇲🇴 182.93.7.194

🇺🇸 172.232.15.250

🇨🇦 172.96.179.9

🇩🇪 167.94.146.68

🇩🇪 80.64.27.85

🇸🇬 51.79.146.118

🇨🇳 39.79.121.178

🇧🇷 200.175.61.207

🇧🇷 179.68.236.227

🇺🇸 157.55.39.49

🇫🇷 85.217.140.42

🇺🇸 44.220.188.29

🇸🇬 43.134.49.202

🇨🇱 186.189.73.201

🇨🇳 120.48.150.20

🇧🇷 108.174.147.120

🇮🇷 85.133.145.253

🇮🇳 20.193.141.133