JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 205.254.166.140

205.254.166.140 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Cogent Communications, LLC
Usage Type	Fixed Line ISP
ASN	AS133982
Domain Name	cogentco.com
Country	🇮🇳 India
City	Bengaluru, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 205.254.166.140

Whois 205.254.166.140

IP Abuse Reports for 205.254.166.140:

This IP address has been reported a total of 30 times from 24 distinct sources. 205.254.166.140 was first reported on October 27th 2021, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 barateza	2026-06-19 03:00:03 (7 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇵🇱 sledzik1984	2026-06-18 20:54:10 (13 hours ago)	2026-06-18T22:49:03.427069+02:00 cma sshd-session[3667675]: pam_unix(sshd:auth): authentication fail ... show more 2026-06-18T22:49:03.427069+02:00 cma sshd-session[3667675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.254.166.140 user=root 2026-06-18T22:49:05.504829+02:00 cma sshd-session[3667675]: Failed password for root from 205.254.166.140 port 44437 ssh2 2026-06-18T22:54:08.084177+02:00 cma sshd-session[3670583]: Invalid user ubuntu from 205.254.166.140 port 22540 2026-06-18T22:54:08.091312+02:00 cma sshd-session[3670583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.254.166.140 2026-06-18T22:54:10.248567+02:00 cma sshd-session[3670583]: Failed password for invalid user ubuntu from 205.254.166.140 port 22540 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-18 20:35:21 (13 hours ago)	SSH brute force attempt. User: msf, Pass: [REDACTED]	Brute-Force SSH
Anonymous	2026-06-18 20:14:42 (14 hours ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇩🇪 febrian.de	2026-06-18 19:32:59 (14 hours ago)	SSH abuse or brute-force attack detected by Fail2Ban	Brute-Force SSH
🇩🇪 DEV-DNS	2026-06-18 19:31:53 (14 hours ago)	205.254.166.140 (IN/India/Karnataka/Bengaluru/-/[redacted]	Brute-Force
🇳🇱 shiroyashik	2026-06-18 18:04:54 (16 hours ago)	2026-06-18T20:55:41.966871+03:00 [HOSTNAME] sshd-session[1400407]: Invalid user ozzy from 205.254.16 ... show more 2026-06-18T20:55:41.966871+03:00 [HOSTNAME] sshd-session[1400407]: Invalid user ozzy from 205.254.166.140 port 22465 2026-06-18T20:59:08.903819+03:00 [HOSTNAME] sshd-session[1400695]: Invalid user blogger from 205.254.166.140 port 33620 2026-06-18T21:04:52.753709+03:00 [HOSTNAME] sshd-session[1401200]: Invalid user cjy from 205.254.166.140 port 58186 ... show less	SSH
🇷🇺 GoXLd	2026-06-18 16:12:53 (18 hours ago)	2026-06-18T18:12:52.876553+02:00 gXdNODE2 sshd-session[317117]: Invalid user whmcs from 205.254.166. ... show more 2026-06-18T18:12:52.876553+02:00 gXdNODE2 sshd-session[317117]: Invalid user whmcs from 205.254.166.140 port 31764 ... show less	Brute-Force SSH
🇷🇺 GoXLd	2026-06-18 15:45:16 (18 hours ago)	2026-06-18T17:45:15.074185+02:00 gXdNODE2 sshd-session[317029]: Invalid user postgres from 205.254.1 ... show more 2026-06-18T17:45:15.074185+02:00 gXdNODE2 sshd-session[317029]: Invalid user postgres from 205.254.166.140 port 47002 ... show less	Brute-Force SSH
Anonymous	2026-06-18 14:57:05 (19 hours ago)	Automatic Reporting - Brute Force Attempts	Brute-Force SSH Web App Attack
🇬🇧 adnscom.net	2026-06-18 14:29:40 (19 hours ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
🇩🇪 BennetLe	2026-06-18 13:28:23 (20 hours ago)	Jun 18 15:02:08 ubuntu sshd[2944603]: Invalid user op from 205.254.166.140 port 7871 Jun 18 15:22:47 ... show more Jun 18 15:02:08 ubuntu sshd[2944603]: Invalid user op from 205.254.166.140 port 7871 Jun 18 15:22:47 ubuntu sshd[2967858]: Invalid user bitrix from 205.254.166.140 port 41873 Jun 18 15:22:47 ubuntu sshd[2967858]: Invalid user bitrix from 205.254.166.140 port 41873 Jun 18 15:28:22 ubuntu sshd[2973907]: Invalid user admin from 205.254.166.140 port 50172 Jun 18 15:28:22 ubuntu sshd[2973907]: Invalid user admin from 205.254.166.140 port 50172 ... show less	Brute-Force SSH
🇨🇿 lp	2026-06-18 13:22:16 (21 hours ago)	SSH Brute force: 11 attempts were recorded from 205.254.166.140 2026-06-18T12:35:06+02:00 Disconnect ... show more SSH Brute force: 11 attempts were recorded from 205.254.166.140 2026-06-18T12:35:06+02:00 Disconnected from invalid user bot 205.254.166.140 port 1871 [preauth] 2026-06-18T12:37:40+02:00 Disconnected from authenticating user root 205.254.166.140 port 16673 [preauth] 2026-06-18T12:40:14+02:00 Connection from 205.254.166.140 port 46359 on <redacted> port 22 rdomain "" 2026-06-18T12:40:15+02:00 Invalid user op from 205.254.166.140 port 46359 2026-06-18T12:40:15+02:00 Disconnected from invalid user op 205.254.166.140 port 46359 [preauth] 2026-06-18T12:45:23+02:00 Connection from 205.254.166.140 port 43716 on <redacted> port 22 rdomain "" 2026-06-18T12:45:24+02:00 Invalid user frappe from 205.254.166.140 port 43716 2026-06-18T12:45:24+02:00 Disconnected from invalid user frappe 205.254.166.140 port 43716 [preauth] 2026-06-18T15:13:30+02:00 Connection from 205.254.166.140 port 24344 on <redact show less	Brute-Force SSH
🇮🇹 alph44	2026-06-18 11:42:46 (22 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇬🇧 aug42	2026-06-18 09:47:51 (1 day ago)	2026-06-18T12:47:50.552566+03:00 nexus6 sshd[1507143]: Invalid user novinhost from 205.254.166.140 p ... show more 2026-06-18T12:47:50.552566+03:00 nexus6 sshd[1507143]: Invalid user novinhost from 205.254.166.140 port 33984 ... show less	Brute-Force SSH

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 209.38.165.186

🇮🇩 125.160.151.49

🇨🇳 123.116.41.238

🇨🇳 115.190.125.207

🇹🇷 88.247.63.254

🇺🇸 74.125.80.83

🇺🇸 3.87.27.156

🇺🇸 185.149.26.71

🇷🇺 147.45.48.17

🇻🇳 125.212.158.126

🇨🇳 106.12.157.104

🇮🇳 68.183.89.210

🇺🇸 47.251.32.100

🇸🇬 47.128.61.16

🇵🇦 2620:171:c6:f002:9999::241

🇨🇳 221.181.210.98

🇺🇸 170.39.225.162

🇮🇳 168.144.64.8

🇬🇧 167.99.80.4

🇺🇸 135.237.127.188