Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
Nov  2 00:14:20 server sshd\[29988\]: Failed password for root from 106.12.141.142 port 32841 ssh2
Nov  2 06:29:22 server sshd\[22760\]: Invalid user QWERT_!@\#$% from 106.12.141.142
Nov  2 06:29:22 server sshd\[22760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.142 
Nov  2 06:29:25 server sshd\[22760\]: Failed password for invalid user QWERT_!@\#$% from 106.12.141.142 port 44433 ssh2
Nov  2 06:44:18 server sshd\[26215\]: Invalid user dolemite from 106.12.141.142
Nov  2 06:44:18 server sshd\[26215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.142 
...
2019-11-02 18:31:26
attackbots
2019-09-19T15:13:40.7735351495-001 sshd\[53266\]: Invalid user ted from 106.12.141.142 port 46871
2019-09-19T15:13:40.7791751495-001 sshd\[53266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.142
2019-09-19T15:13:43.0772361495-001 sshd\[53266\]: Failed password for invalid user ted from 106.12.141.142 port 46871 ssh2
2019-09-19T15:27:09.1666701495-001 sshd\[54117\]: Invalid user nada from 106.12.141.142 port 35524
2019-09-19T15:27:09.1774681495-001 sshd\[54117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.142
2019-09-19T15:27:11.1999231495-001 sshd\[54117\]: Failed password for invalid user nada from 106.12.141.142 port 35524 ssh2
...
2019-09-20 03:44:08
attackspambots
Sep  2 17:03:50 vps647732 sshd[16446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.142
Sep  2 17:03:53 vps647732 sshd[16446]: Failed password for invalid user aline from 106.12.141.142 port 35683 ssh2
...
2019-09-02 23:04:39
attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2019-08-18 09:57:33
Comments on same subnet:
IP Type Details Datetime
106.12.141.206 attackspam
Oct  6 20:10:35 staging sshd[235069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.206  user=root
Oct  6 20:10:37 staging sshd[235069]: Failed password for root from 106.12.141.206 port 38044 ssh2
Oct  6 20:13:36 staging sshd[235124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.206  user=root
Oct  6 20:13:38 staging sshd[235124]: Failed password for root from 106.12.141.206 port 60304 ssh2
...
2020-10-07 04:45:56
106.12.141.206 attack
Invalid user sandeep from 106.12.141.206 port 52128
2020-10-06 20:51:14
106.12.141.206 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-10-06 12:31:56
106.12.141.206 attackspam
$f2bV_matches
2020-09-18 23:20:53
106.12.141.206 attackbots
$f2bV_matches
2020-09-18 15:30:46
106.12.141.206 attack
$f2bV_matches
2020-09-18 05:46:50
106.12.141.10 attack
Invalid user trl from 106.12.141.10 port 51754
2020-05-24 01:59:10
106.12.141.10 attack
Invalid user xcs from 106.12.141.10 port 35532
2020-05-22 18:15:42
106.12.141.71 attackbots
Invalid user grahm from 106.12.141.71 port 51574
2020-05-15 13:10:53
106.12.141.212 attackbots
SSH invalid-user multiple login attempts
2020-05-11 04:54:57
106.12.141.71 attackspambots
May 10 16:14:25 dev0-dcde-rnet sshd[13609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.71
May 10 16:14:27 dev0-dcde-rnet sshd[13609]: Failed password for invalid user test from 106.12.141.71 port 57064 ssh2
May 10 16:17:52 dev0-dcde-rnet sshd[13620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.71
2020-05-10 23:21:24
106.12.141.71 attackbotsspam
May  7 08:30:44 ns382633 sshd\[31400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.71  user=root
May  7 08:30:46 ns382633 sshd\[31400\]: Failed password for root from 106.12.141.71 port 43454 ssh2
May  7 08:36:53 ns382633 sshd\[32400\]: Invalid user bds from 106.12.141.71 port 44942
May  7 08:36:53 ns382633 sshd\[32400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.71
May  7 08:36:55 ns382633 sshd\[32400\]: Failed password for invalid user bds from 106.12.141.71 port 44942 ssh2
2020-05-07 15:14:33
106.12.141.10 attackspambots
May  6 12:01:42 powerpi2 sshd[14835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.10
May  6 12:01:41 powerpi2 sshd[14835]: Invalid user mariajose from 106.12.141.10 port 48570
May  6 12:01:44 powerpi2 sshd[14835]: Failed password for invalid user mariajose from 106.12.141.10 port 48570 ssh2
...
2020-05-06 21:21:14
106.12.141.71 attackspam
Lines containing failures of 106.12.141.71 (max 1000)
May  5 10:12:54 localhost sshd[31051]: Invalid user ubuntu from 106.12.141.71 port 42344
May  5 10:12:54 localhost sshd[31051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.71 
May  5 10:12:55 localhost sshd[31051]: Failed password for invalid user ubuntu from 106.12.141.71 port 42344 ssh2
May  5 10:12:58 localhost sshd[31051]: Received disconnect from 106.12.141.71 port 42344:11: Bye Bye [preauth]
May  5 10:12:58 localhost sshd[31051]: Disconnected from invalid user ubuntu 106.12.141.71 port 42344 [preauth]
May  5 10:17:45 localhost sshd[2732]: Invalid user xen from 106.12.141.71 port 42260
May  5 10:17:45 localhost sshd[2732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.71 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.12.141.71
2020-05-05 17:51:58
106.12.141.212 attackspambots
May  4 21:28:02 webhost01 sshd[26106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.141.212
May  4 21:28:04 webhost01 sshd[26106]: Failed password for invalid user apps from 106.12.141.212 port 59134 ssh2
...
2020-05-04 22:40:04
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.141.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22012
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.141.142.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081701 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 09:57:26 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 142.141.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 142.141.12.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
157.55.39.61 attackbotsspam
Automatic report - Banned IP Access
2019-11-17 22:03:13
117.86.214.238 attackbotsspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/117.86.214.238/ 
 
 CN - 1H : (684)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 117.86.214.238 
 
 CIDR : 117.86.0.0/15 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 ATTACKS DETECTED ASN4134 :  
  1H - 20 
  3H - 47 
  6H - 89 
 12H - 153 
 24H - 291 
 
 DateTime : 2019-11-17 07:20:16 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-17 22:15:37
165.22.61.82 attackspam
Nov 17 13:34:29 vpn01 sshd[1785]: Failed password for root from 165.22.61.82 port 34672 ssh2
...
2019-11-17 21:55:42
213.138.73.82 attack
spam FO
2019-11-17 21:40:18
13.74.17.237 attack
2019-11-17T06:20:35.932399+00:00 suse sshd[11005]: Invalid user bbs from 13.74.17.237 port 53330
2019-11-17T06:20:37.850862+00:00 suse sshd[11005]: error: PAM: User not known to the underlying authentication module for illegal user bbs from 13.74.17.237
2019-11-17T06:20:35.932399+00:00 suse sshd[11005]: Invalid user bbs from 13.74.17.237 port 53330
2019-11-17T06:20:37.850862+00:00 suse sshd[11005]: error: PAM: User not known to the underlying authentication module for illegal user bbs from 13.74.17.237
2019-11-17T06:20:35.932399+00:00 suse sshd[11005]: Invalid user bbs from 13.74.17.237 port 53330
2019-11-17T06:20:37.850862+00:00 suse sshd[11005]: error: PAM: User not known to the underlying authentication module for illegal user bbs from 13.74.17.237
2019-11-17T06:20:37.852225+00:00 suse sshd[11005]: Failed keyboard-interactive/pam for invalid user bbs from 13.74.17.237 port 53330 ssh2
...
2019-11-17 21:58:07
35.194.140.24 attackbotsspam
SSH Bruteforce
2019-11-17 21:47:11
83.168.104.70 attack
Automatic report - XMLRPC Attack
2019-11-17 22:12:06
23.102.238.226 attackbotsspam
Nov 17 11:15:12 localhost sshd\[123159\]: Invalid user kloro from 23.102.238.226 port 1325
Nov 17 11:15:12 localhost sshd\[123159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.102.238.226
Nov 17 11:15:15 localhost sshd\[123159\]: Failed password for invalid user kloro from 23.102.238.226 port 1325 ssh2
Nov 17 11:18:47 localhost sshd\[123260\]: Invalid user stalin from 23.102.238.226 port 39011
Nov 17 11:18:47 localhost sshd\[123260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.102.238.226
...
2019-11-17 22:00:40
180.183.5.100 attackspambots
Chat Spam
2019-11-17 21:53:49
122.104.45.126 attackspambots
firewall-block, port(s): 60001/tcp
2019-11-17 22:10:51
221.132.17.74 attackbotsspam
Nov 17 10:32:12 dedicated sshd[11405]: Invalid user chens from 221.132.17.74 port 32988
2019-11-17 22:18:18
118.25.111.153 attack
2019-11-17T04:57:45.823805ns547587 sshd\[3902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.111.153  user=root
2019-11-17T04:57:47.420972ns547587 sshd\[3902\]: Failed password for root from 118.25.111.153 port 49373 ssh2
2019-11-17T05:04:31.524322ns547587 sshd\[17632\]: Invalid user drew from 118.25.111.153 port 38085
2019-11-17T05:04:31.526316ns547587 sshd\[17632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.111.153
...
2019-11-17 22:03:57
32.114.249.30 attackspam
SSH Bruteforce
2019-11-17 21:52:15
222.71.134.229 attackspam
Nov 17 10:33:34 marvibiene sshd[2588]: Invalid user ubuntu from 222.71.134.229 port 41792
Nov 17 10:33:34 marvibiene sshd[2588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.71.134.229
Nov 17 10:33:34 marvibiene sshd[2588]: Invalid user ubuntu from 222.71.134.229 port 41792
Nov 17 10:33:36 marvibiene sshd[2588]: Failed password for invalid user ubuntu from 222.71.134.229 port 41792 ssh2
...
2019-11-17 22:04:56
193.70.43.220 attack
Nov 17 18:59:22 vibhu-HP-Z238-Microtower-Workstation sshd\[18451\]: Invalid user webmaster from 193.70.43.220
Nov 17 18:59:22 vibhu-HP-Z238-Microtower-Workstation sshd\[18451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.43.220
Nov 17 18:59:24 vibhu-HP-Z238-Microtower-Workstation sshd\[18451\]: Failed password for invalid user webmaster from 193.70.43.220 port 59626 ssh2
Nov 17 19:03:55 vibhu-HP-Z238-Microtower-Workstation sshd\[18673\]: Invalid user ingvill from 193.70.43.220
Nov 17 19:03:55 vibhu-HP-Z238-Microtower-Workstation sshd\[18673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.43.220
...
2019-11-17 21:51:42

Recently Reported IPs

148.72.209.113 73.52.11.67 103.225.143.118 27.5.75.19
24.224.228.29 129.211.63.79 128.199.235.131 117.50.21.156
77.168.167.96 58.209.212.128 129.211.97.55 45.115.174.77
50.232.209.190 2001:41d0:2:d5b7:: 155.133.138.66 94.130.50.184
106.12.61.76 146.229.161.211 88.255.102.60 43.226.38.166