106.12.159.254

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.12.159.252	attackbots	k+ssh-bruteforce	2020-08-07 05:43:15
106.12.159.252	attackspam	Jul 25 06:34:58 NPSTNNYC01T sshd[4099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.159.252 Jul 25 06:35:01 NPSTNNYC01T sshd[4099]: Failed password for invalid user quc from 106.12.159.252 port 34050 ssh2 Jul 25 06:40:18 NPSTNNYC01T sshd[4650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.159.252 ...	2020-07-25 18:44:34
106.12.159.174	attack	Spam detected 2020.07.17 05:55:47 blocked until 2020.09.04 22:57:47	2020-07-17 15:09:22
106.12.159.148	attack	SSH Invalid Login	2020-06-28 07:19:12
106.12.159.148	attackbots	$f2bV_matches	2020-06-26 17:21:01
106.12.159.7	attackbotsspam	2020-06-04T17:19:38.238886+02:00 sshd[11801]: Failed password for root from 106.12.159.7 port 60202 ssh2	2020-06-05 04:17:33
106.12.159.7	attackspam	2020-06-03T11:42:39.896451abusebot-4.cloudsearch.cf sshd[1070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.159.7 user=root 2020-06-03T11:42:42.376492abusebot-4.cloudsearch.cf sshd[1070]: Failed password for root from 106.12.159.7 port 53140 ssh2 2020-06-03T11:45:21.337685abusebot-4.cloudsearch.cf sshd[1227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.159.7 user=root 2020-06-03T11:45:23.391151abusebot-4.cloudsearch.cf sshd[1227]: Failed password for root from 106.12.159.7 port 60190 ssh2 2020-06-03T11:47:45.818943abusebot-4.cloudsearch.cf sshd[1402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.159.7 user=root 2020-06-03T11:47:47.972974abusebot-4.cloudsearch.cf sshd[1402]: Failed password for root from 106.12.159.7 port 38986 ssh2 2020-06-03T11:50:10.906540abusebot-4.cloudsearch.cf sshd[1541]: pam_unix(sshd:auth): authentication fai ...	2020-06-04 01:45:38
106.12.159.7	attack	sshd	2020-05-13 08:08:13
106.12.159.5	attackbots	Mar 19 18:29:33 sshd\[3858\]: User root from 106.12.159.5 not allowed because not listed in AllowUsersMar 19 18:29:35 sshd\[3858\]: Failed password for invalid user root from 106.12.159.5 port 40732 ssh2 ...	2020-03-20 04:02:52
106.12.159.235	attackbotsspam	Feb 27 10:29:36 php1 sshd\[20501\]: Invalid user user from 106.12.159.235 Feb 27 10:29:36 php1 sshd\[20501\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.159.235 Feb 27 10:29:38 php1 sshd\[20501\]: Failed password for invalid user user from 106.12.159.235 port 33084 ssh2 Feb 27 10:36:24 php1 sshd\[21186\]: Invalid user admin from 106.12.159.235 Feb 27 10:36:24 php1 sshd\[21186\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.159.235	2020-02-28 06:36:24
106.12.159.235	attackspambots	SSH invalid-user multiple login attempts	2020-02-24 19:04:48
106.12.159.207	attackbotsspam	Unauthorized connection attempt detected from IP address 106.12.159.207 to port 2220 [J]	2020-02-03 10:07:27
106.12.159.207	attack	Unauthorized connection attempt detected from IP address 106.12.159.207 to port 2220 [J]	2020-01-24 05:03:08
106.12.159.235	attack	T: f2b ssh aggressive 3x	2020-01-16 22:56:49
106.12.159.235	attack	SSH Brute-Force reported by Fail2Ban	2020-01-11 15:53:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.159.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1898
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.12.159.254.			IN	A

;; AUTHORITY SECTION:
.			316	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 22:28:29 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 254.159.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 254.159.12.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.228.19.79	attack	firewall-block, port(s): 1026/tcp, 1443/tcp, 3001/tcp, 5357/tcp, 7777/tcp, 20476/tcp, 37215/tcp	2019-12-18 02:18:33
46.36.132.68	attackbots	2019-12-17 08:38:55 H=(timallencpa.com) [46.36.132.68]:55904 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-17 08:38:57 H=(tomdunncpa.com) [46.36.132.68]:56416 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-12-17 08:38:58 H=(timallencpa.com) [46.36.132.68]:55904 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.11) (https://www.spamhaus.org/query/ip/46.36.132.68) 2019-12-17 08:38:58 H=(tomdunncpa.com) [46.36.132.68]:56416 I=[192.147.25.65]:25 F= rejected RCPT	2019-12-18 01:43:21
180.76.38.74	attack	Lines containing failures of 180.76.38.74 Dec 17 09:05:11 nextcloud sshd[14148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.38.74 user=r.r Dec 17 09:05:13 nextcloud sshd[14148]: Failed password for r.r from 180.76.38.74 port 33004 ssh2 Dec 17 09:05:13 nextcloud sshd[14148]: Received disconnect from 180.76.38.74 port 33004:11: Bye Bye [preauth] Dec 17 09:05:13 nextcloud sshd[14148]: Disconnected from authenticating user r.r 180.76.38.74 port 33004 [preauth] Dec 17 09:18:42 nextcloud sshd[18649]: Invalid user deni from 180.76.38.74 port 41706 Dec 17 09:18:42 nextcloud sshd[18649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.38.74 Dec 17 09:18:45 nextcloud sshd[18649]: Failed password for invalid user deni from 180.76.38.74 port 41706 ssh2 Dec 17 09:18:45 nextcloud sshd[18649]: Received disconnect from 180.76.38.74 port 41706:11: Bye Bye [preauth] Dec 17 09:18:45 nextclou........ ------------------------------	2019-12-18 01:49:40
187.216.127.147	attack	Dec 17 07:12:25 wbs sshd\[3890\]: Invalid user edy from 187.216.127.147 Dec 17 07:12:25 wbs sshd\[3890\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.216.127.147 Dec 17 07:12:26 wbs sshd\[3890\]: Failed password for invalid user edy from 187.216.127.147 port 41154 ssh2 Dec 17 07:21:58 wbs sshd\[4862\]: Invalid user baeverstad from 187.216.127.147 Dec 17 07:21:58 wbs sshd\[4862\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.216.127.147	2019-12-18 02:08:46
125.128.122.221	attack	" "	2019-12-18 01:58:15
123.207.47.114	attack	Dec 17 18:53:42 MK-Soft-VM3 sshd[9820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.47.114 Dec 17 18:53:44 MK-Soft-VM3 sshd[9820]: Failed password for invalid user launt from 123.207.47.114 port 52231 ssh2 ...	2019-12-18 02:02:02
220.132.223.239	attack	Port scan on 1 port(s): 21	2019-12-18 02:23:19
120.92.102.213	attackspambots	Dec 17 18:07:37 eventyay sshd[24778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.102.213 Dec 17 18:07:39 eventyay sshd[24778]: Failed password for invalid user manolios from 120.92.102.213 port 40986 ssh2 Dec 17 18:15:19 eventyay sshd[24989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.102.213 ...	2019-12-18 01:58:45
114.67.70.94	attackbots	Dec 17 07:24:07 web1 sshd\[7422\]: Invalid user eratea from 114.67.70.94 Dec 17 07:24:07 web1 sshd\[7422\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.94 Dec 17 07:24:09 web1 sshd\[7422\]: Failed password for invalid user eratea from 114.67.70.94 port 39918 ssh2 Dec 17 07:30:00 web1 sshd\[7977\]: Invalid user guest from 114.67.70.94 Dec 17 07:30:00 web1 sshd\[7977\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.70.94	2019-12-18 02:00:03
196.188.42.130	attackbots	Dec 17 07:54:48 sachi sshd\[12729\]: Invalid user sellwood from 196.188.42.130 Dec 17 07:54:48 sachi sshd\[12729\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.188.42.130 Dec 17 07:54:50 sachi sshd\[12729\]: Failed password for invalid user sellwood from 196.188.42.130 port 40130 ssh2 Dec 17 08:02:14 sachi sshd\[13404\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.188.42.130 user=root Dec 17 08:02:16 sachi sshd\[13404\]: Failed password for root from 196.188.42.130 port 44519 ssh2	2019-12-18 02:02:50
58.56.187.83	attackbots	2019-12-17 00:17:14 server sshd[22926]: Failed password for invalid user wiltberger from 58.56.187.83 port 45244 ssh2	2019-12-18 02:01:44
159.89.188.167	attack	Dec 17 14:01:58 firewall sshd[26055]: Invalid user admin from 159.89.188.167 Dec 17 14:02:01 firewall sshd[26055]: Failed password for invalid user admin from 159.89.188.167 port 60504 ssh2 Dec 17 14:07:45 firewall sshd[26135]: Invalid user djbdns from 159.89.188.167 ...	2019-12-18 01:43:35
139.199.48.216	attack	Repeated brute force against a port	2019-12-18 01:44:32
77.40.2.71	attackbotsspam	2019-12-17 15:22:09 auth_login authenticator failed for (localhost.localdomain) [77.40.2.71]: 535 Incorrect authentication data (set_id=noreply@agro-life.com.ua) 2019-12-17 15:23:21 auth_login authenticator failed for (localhost.localdomain) [77.40.2.71]: 535 Incorrect authentication data (set_id=noreply@travelplanet.com.ua) ...	2019-12-18 02:12:07
39.105.208.39	attack	Dec 17 12:47:04 host sshd\[8950\]: Invalid user andrew from 39.105.208.39Dec 17 12:53:46 host sshd\[12316\]: Invalid user user from 39.105.208.39Dec 17 13:00:24 host sshd\[15833\]: Invalid user user1 from 39.105.208.39 ...	2019-12-18 02:20:52

Recently Reported IPs

106.12.158.15	106.12.29.83	106.12.33.46	106.12.45.51
106.120.183.5	106.121.186.115	106.121.68.8	106.121.7.232
106.121.70.90	106.124.136.85	106.124.156.66	106.124.236.225
106.124.36.32	106.13.112.154	106.13.126.250	106.13.138.105
106.13.140.8	106.13.141.105	106.13.161.128	106.13.189.164