Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspam
Invalid user zxx from 106.12.142.137 port 48588
2020-09-06 03:43:48
attackspam
Invalid user zxx from 106.12.142.137 port 48588
2020-09-05 19:23:14
Comments on same subnet:
IP Type Details Datetime
106.12.142.52 attackspambots
May 23 20:45:19 sip sshd[377861]: Invalid user pxw from 106.12.142.52 port 42214
May 23 20:45:21 sip sshd[377861]: Failed password for invalid user pxw from 106.12.142.52 port 42214 ssh2
May 23 20:47:00 sip sshd[377881]: Invalid user uqw from 106.12.142.52 port 35308
...
2020-05-24 03:25:07
106.12.142.52 attack
May 15 07:00:48 jane sshd[7047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52 
May 15 07:00:49 jane sshd[7047]: Failed password for invalid user anjana from 106.12.142.52 port 41018 ssh2
...
2020-05-15 15:16:24
106.12.142.52 attack
SSH Bruteforce attack
2020-04-15 21:28:48
106.12.142.52 attackspam
SSH auth scanning - multiple failed logins
2020-04-12 05:36:46
106.12.142.52 attack
Mar 23 06:37:08 ks10 sshd[156555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52 
Mar 23 06:37:10 ks10 sshd[156555]: Failed password for invalid user ts5 from 106.12.142.52 port 52144 ssh2
...
2020-03-23 14:37:40
106.12.142.52 attackbots
2020-03-22T00:20:34.902210upcloud.m0sh1x2.com sshd[22424]: Invalid user rz from 106.12.142.52 port 59008
2020-03-22 09:49:56
106.12.142.52 attackbots
Brute force attempt
2020-03-12 03:33:07
106.12.142.52 attack
Feb 25 06:42:46 askasleikir sshd[46468]: Failed password for invalid user work from 106.12.142.52 port 36132 ssh2
Feb 25 06:15:14 askasleikir sshd[45360]: Failed password for invalid user sirius from 106.12.142.52 port 58196 ssh2
Feb 25 06:39:56 askasleikir sshd[46343]: Failed password for invalid user gzx from 106.12.142.52 port 57414 ssh2
2020-02-25 21:44:26
106.12.142.52 attackspam
Feb  9 05:54:35 srv206 sshd[30165]: Invalid user zuy from 106.12.142.52
Feb  9 05:54:35 srv206 sshd[30165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52
Feb  9 05:54:35 srv206 sshd[30165]: Invalid user zuy from 106.12.142.52
Feb  9 05:54:37 srv206 sshd[30165]: Failed password for invalid user zuy from 106.12.142.52 port 53390 ssh2
...
2020-02-09 16:10:22
106.12.142.52 attack
Jan 23 00:40:59 hcbbdb sshd\[6129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52  user=root
Jan 23 00:41:01 hcbbdb sshd\[6129\]: Failed password for root from 106.12.142.52 port 52710 ssh2
Jan 23 00:45:01 hcbbdb sshd\[6660\]: Invalid user vnc from 106.12.142.52
Jan 23 00:45:01 hcbbdb sshd\[6660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52
Jan 23 00:45:03 hcbbdb sshd\[6660\]: Failed password for invalid user vnc from 106.12.142.52 port 40304 ssh2
2020-01-23 09:57:29
106.12.142.52 attack
Unauthorized connection attempt detected from IP address 106.12.142.52 to port 2220 [J]
2020-01-15 03:34:42
106.12.142.52 attack
Jan  7 14:27:52 plex sshd[28518]: Invalid user smboracle from 106.12.142.52 port 34364
2020-01-07 21:43:22
106.12.142.52 attackbots
Jan  1 06:46:30 silence02 sshd[32508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52
Jan  1 06:46:32 silence02 sshd[32508]: Failed password for invalid user zulkarnaen from 106.12.142.52 port 36272 ssh2
Jan  1 06:48:27 silence02 sshd[32576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52
2020-01-01 14:24:36
106.12.142.52 attackspambots
Dec  5 07:32:03 fr01 sshd[8410]: Invalid user redindy from 106.12.142.52
Dec  5 07:32:03 fr01 sshd[8410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52
Dec  5 07:32:03 fr01 sshd[8410]: Invalid user redindy from 106.12.142.52
Dec  5 07:32:05 fr01 sshd[8410]: Failed password for invalid user redindy from 106.12.142.52 port 37786 ssh2
Dec  5 07:51:27 fr01 sshd[11959]: Invalid user radio from 106.12.142.52
...
2019-12-05 15:07:13
106.12.142.52 attackbotsspam
Nov 29 05:58:30 MK-Soft-VM7 sshd[6531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.142.52 
Nov 29 05:58:32 MK-Soft-VM7 sshd[6531]: Failed password for invalid user mukherjee from 106.12.142.52 port 59432 ssh2
...
2019-11-29 13:23:39
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.142.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61634
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.142.137.			IN	A

;; AUTHORITY SECTION:
.			428	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090500 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 05 19:23:11 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 137.142.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 137.142.12.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
118.48.211.197 attackspambots
Sep 27 07:02:37 taivassalofi sshd[191797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.48.211.197
Sep 27 07:02:40 taivassalofi sshd[191797]: Failed password for invalid user ravi from 118.48.211.197 port 31380 ssh2
...
2019-09-27 19:28:47
106.13.48.201 attackbots
Sep 27 07:01:41 tuotantolaitos sshd[27165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.201
Sep 27 07:01:43 tuotantolaitos sshd[27165]: Failed password for invalid user piano from 106.13.48.201 port 47874 ssh2
...
2019-09-27 19:50:59
106.12.42.110 attackbots
Sep 27 06:58:05 site3 sshd\[90381\]: Invalid user kou from 106.12.42.110
Sep 27 06:58:05 site3 sshd\[90381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.42.110
Sep 27 06:58:07 site3 sshd\[90381\]: Failed password for invalid user kou from 106.12.42.110 port 51482 ssh2
Sep 27 07:01:10 site3 sshd\[90496\]: Invalid user vic from 106.12.42.110
Sep 27 07:01:10 site3 sshd\[90496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.42.110
...
2019-09-27 19:39:53
104.200.110.184 attack
2019-09-27T10:15:02.534603tmaserv sshd\[4091\]: Failed password for invalid user laurelei from 104.200.110.184 port 44112 ssh2
2019-09-27T10:27:39.058334tmaserv sshd\[4921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184  user=root
2019-09-27T10:27:41.645852tmaserv sshd\[4921\]: Failed password for root from 104.200.110.184 port 53102 ssh2
2019-09-27T10:31:58.920118tmaserv sshd\[5192\]: Invalid user trendimsa1.0 from 104.200.110.184 port 37284
2019-09-27T10:31:58.924595tmaserv sshd\[5192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184
2019-09-27T10:32:01.403585tmaserv sshd\[5192\]: Failed password for invalid user trendimsa1.0 from 104.200.110.184 port 37284 ssh2
...
2019-09-27 19:27:06
222.186.175.6 attack
2019-09-27T11:58:06.679586+01:00 suse sshd[25902]: User root from 222.186.175.6 not allowed because not listed in AllowUsers
2019-09-27T11:58:11.067583+01:00 suse sshd[25902]: error: PAM: Authentication failure for illegal user root from 222.186.175.6
2019-09-27T11:58:06.679586+01:00 suse sshd[25902]: User root from 222.186.175.6 not allowed because not listed in AllowUsers
2019-09-27T11:58:11.067583+01:00 suse sshd[25902]: error: PAM: Authentication failure for illegal user root from 222.186.175.6
2019-09-27T11:58:06.679586+01:00 suse sshd[25902]: User root from 222.186.175.6 not allowed because not listed in AllowUsers
2019-09-27T11:58:11.067583+01:00 suse sshd[25902]: error: PAM: Authentication failure for illegal user root from 222.186.175.6
2019-09-27T11:58:11.069823+01:00 suse sshd[25902]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.6 port 2710 ssh2
...
2019-09-27 19:17:31
36.68.5.199 attackspambots
Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 04:45:20.
2019-09-27 20:00:00
51.75.25.164 attackbotsspam
Sep 27 14:45:33 gw1 sshd[22461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.25.164
Sep 27 14:45:36 gw1 sshd[22461]: Failed password for invalid user mustang from 51.75.25.164 port 45862 ssh2
...
2019-09-27 19:52:39
49.235.242.173 attackbotsspam
Sep 27 13:01:31 s64-1 sshd[5451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.242.173
Sep 27 13:01:33 s64-1 sshd[5451]: Failed password for invalid user systemd-journal from 49.235.242.173 port 42968 ssh2
Sep 27 13:06:56 s64-1 sshd[5597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.242.173
...
2019-09-27 19:14:54
184.105.139.77 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-09-27 19:28:24
60.17.70.153 attackbots
Unauthorised access (Sep 27) SRC=60.17.70.153 LEN=40 TTL=48 ID=53246 TCP DPT=8080 WINDOW=8602 SYN 
Unauthorised access (Sep 27) SRC=60.17.70.153 LEN=40 TTL=48 ID=52868 TCP DPT=8080 WINDOW=8602 SYN 
Unauthorised access (Sep 27) SRC=60.17.70.153 LEN=40 TTL=48 ID=56181 TCP DPT=8080 WINDOW=8602 SYN 
Unauthorised access (Sep 25) SRC=60.17.70.153 LEN=40 TTL=48 ID=45692 TCP DPT=8080 WINDOW=8602 SYN 
Unauthorised access (Sep 25) SRC=60.17.70.153 LEN=40 TTL=48 ID=40877 TCP DPT=8080 WINDOW=8602 SYN
2019-09-27 19:42:54
177.73.140.66 attackspam
Sep 27 06:17:52 aat-srv002 sshd[12753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.140.66
Sep 27 06:17:54 aat-srv002 sshd[12753]: Failed password for invalid user test8 from 177.73.140.66 port 45269 ssh2
Sep 27 06:23:08 aat-srv002 sshd[12955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.140.66
Sep 27 06:23:10 aat-srv002 sshd[12955]: Failed password for invalid user user from 177.73.140.66 port 37004 ssh2
...
2019-09-27 19:23:39
40.114.53.171 attackspambots
Sep 27 01:13:43 web1 sshd\[20589\]: Failed password for invalid user zhuai from 40.114.53.171 port 46074 ssh2
Sep 27 01:18:21 web1 sshd\[21042\]: Invalid user paul from 40.114.53.171
Sep 27 01:18:21 web1 sshd\[21042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.114.53.171
Sep 27 01:18:22 web1 sshd\[21042\]: Failed password for invalid user paul from 40.114.53.171 port 59486 ssh2
Sep 27 01:23:07 web1 sshd\[21442\]: Invalid user dasusr1 from 40.114.53.171
Sep 27 01:23:07 web1 sshd\[21442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.114.53.171
2019-09-27 19:27:35
162.158.155.70 attackspambots
09/27/2019-05:46:35.529691 162.158.155.70 Protocol: 6 ET WEB_SERVER PHP Possible https Local File Inclusion Attempt
2019-09-27 19:12:11
128.14.134.134 attackbotsspam
" "
2019-09-27 19:32:37
115.238.249.100 attackbots
Sep 27 11:54:38 vps01 sshd[31743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.100
Sep 27 11:54:40 vps01 sshd[31743]: Failed password for invalid user saurabh from 115.238.249.100 port 34324 ssh2
2019-09-27 19:50:38

Recently Reported IPs

102.158.100.23 47.56.151.78 222.65.250.250 141.147.236.117
203.55.21.198 46.61.160.151 85.242.94.53 190.200.24.162
73.45.206.151 197.188.203.65 120.85.61.232 116.96.123.9
178.175.235.37 45.236.119.234 5.55.3.68 202.191.124.203
107.175.27.233 90.59.116.91 27.255.58.26 153.20.185.86