106.12.19.25 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.12.197.37	attackbotsspam	Invalid user support1 from 106.12.197.37 port 34940	2020-10-14 03:36:36
106.12.197.37	attack	Invalid user deginal from 106.12.197.37 port 56416	2020-10-13 18:55:47
106.12.196.118	attackbotsspam	Oct 12 14:10:41 host sshd[17786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 user=root Oct 12 14:10:43 host sshd[17786]: Failed password for root from 106.12.196.118 port 38322 ssh2 ...	2020-10-13 00:29:44
106.12.196.118	attack	Invalid user informix from 106.12.196.118 port 41438	2020-10-12 15:51:32
106.12.196.118	attack	2020-10-11T15:47:05.520064kitsunetech sshd[17599]: Invalid user admin from 106.12.196.118 port 37394	2020-10-12 07:43:20
106.12.196.118	attackbotsspam	(sshd) Failed SSH login from 106.12.196.118 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 01:35:39 server5 sshd[21225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 user=root Oct 11 01:35:41 server5 sshd[21225]: Failed password for root from 106.12.196.118 port 56116 ssh2 Oct 11 01:36:12 server5 sshd[21554]: Invalid user openvpn from 106.12.196.118 Oct 11 01:36:12 server5 sshd[21554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 Oct 11 01:36:14 server5 sshd[21554]: Failed password for invalid user openvpn from 106.12.196.118 port 59952 ssh2	2020-10-12 00:00:17
106.12.196.118	attackbotsspam	(sshd) Failed SSH login from 106.12.196.118 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 11 01:35:39 server5 sshd[21225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 user=root Oct 11 01:35:41 server5 sshd[21225]: Failed password for root from 106.12.196.118 port 56116 ssh2 Oct 11 01:36:12 server5 sshd[21554]: Invalid user openvpn from 106.12.196.118 Oct 11 01:36:12 server5 sshd[21554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.118 Oct 11 01:36:14 server5 sshd[21554]: Failed password for invalid user openvpn from 106.12.196.118 port 59952 ssh2	2020-10-11 15:59:14
106.12.196.118	attack	Oct 11 02:23:19 h2829583 sshd[29641]: Failed password for root from 106.12.196.118 port 49538 ssh2	2020-10-11 09:16:37
106.12.193.6	attackspam	Oct 10 19:01:01 prod4 sshd\[11205\]: Invalid user azureuser from 106.12.193.6 Oct 10 19:01:03 prod4 sshd\[11205\]: Failed password for invalid user azureuser from 106.12.193.6 port 37762 ssh2 Oct 10 19:09:14 prod4 sshd\[14196\]: Failed password for root from 106.12.193.6 port 52658 ssh2 ...	2020-10-11 03:35:50
106.12.193.6	attackbotsspam	repeated SSH login attempts	2020-10-10 19:28:46
106.12.199.117	attackbots	sshguard	2020-10-09 01:32:39
106.12.199.117	attack	sshguard	2020-10-08 17:28:52
106.12.196.118	attack	Bruteforce detected by fail2ban	2020-10-06 06:35:13
106.12.196.118	attack	Bruteforce detected by fail2ban	2020-10-05 22:42:14
106.12.196.118	attackspambots	SSH / Telnet Brute Force Attempts on Honeypot	2020-10-05 14:37:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.19.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50472
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.12.19.25.			IN	A

;; AUTHORITY SECTION:
.			522	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052100 1800 900 604800 86400

;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 21 19:03:31 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 25.19.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 25.19.12.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
203.130.242.68	attackbots	Aug 12 06:09:01 prox sshd[9491]: Failed password for root from 203.130.242.68 port 44141 ssh2	2020-08-12 18:06:55
198.23.236.153	attackbotsspam	TCP (SYN) 198.23.236.153:58165 -> port 22, len 44	2020-08-12 18:35:37
142.93.215.22	attackbotsspam	Bruteforce detected by fail2ban	2020-08-12 18:11:47
185.176.27.18	attackspambots	[Fri Jun 26 11:53:29 2020] - DDoS Attack From IP: 185.176.27.18 Port: 45639	2020-08-12 18:07:32
198.251.84.168	normal	a0907	2020-08-12 17:27:43
201.251.147.91	attack	Attempted Brute Force (dovecot)	2020-08-12 18:43:08
95.182.122.131	attack	Aug 12 10:25:59 localhost sshd[54234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.122.131 user=root Aug 12 10:26:01 localhost sshd[54234]: Failed password for root from 95.182.122.131 port 33912 ssh2 Aug 12 10:29:49 localhost sshd[54653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.122.131 user=root Aug 12 10:29:51 localhost sshd[54653]: Failed password for root from 95.182.122.131 port 36395 ssh2 Aug 12 10:33:38 localhost sshd[55018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.182.122.131 user=root Aug 12 10:33:40 localhost sshd[55018]: Failed password for root from 95.182.122.131 port 38875 ssh2 ...	2020-08-12 18:42:40
51.255.28.53	attackspambots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-08-12 17:12:23
190.104.149.194	attackbots	Aug 12 11:10:51 h2779839 sshd[1914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194 user=root Aug 12 11:10:53 h2779839 sshd[1914]: Failed password for root from 190.104.149.194 port 56510 ssh2 Aug 12 11:12:39 h2779839 sshd[1922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194 user=root Aug 12 11:12:41 h2779839 sshd[1922]: Failed password for root from 190.104.149.194 port 47864 ssh2 Aug 12 11:14:30 h2779839 sshd[1953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194 user=root Aug 12 11:14:32 h2779839 sshd[1953]: Failed password for root from 190.104.149.194 port 39212 ssh2 Aug 12 11:16:23 h2779839 sshd[1973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194 user=root Aug 12 11:16:25 h2779839 sshd[1973]: Failed password for root from 190.104.149.194 port 58794 s ...	2020-08-12 18:11:17
129.152.141.71	attackbotsspam	2020-08-12T10:51:18.986451ks3355764 sshd[21470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.152.141.71 user=root 2020-08-12T10:51:21.128096ks3355764 sshd[21470]: Failed password for root from 129.152.141.71 port 42934 ssh2 ...	2020-08-12 18:44:55
93.177.101.75	attackbots	SpamScore above: 10.0	2020-08-12 17:08:17
61.177.172.54	attackbotsspam	Aug 12 20:05:25 localhost sshd[1325535]: Unable to negotiate with 61.177.172.54 port 48118: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ...	2020-08-12 18:39:56
45.183.193.1	attackbotsspam	Aug 12 08:04:06 vps639187 sshd\[27548\]: Invalid user Number1 from 45.183.193.1 port 49748 Aug 12 08:04:06 vps639187 sshd\[27548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.183.193.1 Aug 12 08:04:08 vps639187 sshd\[27548\]: Failed password for invalid user Number1 from 45.183.193.1 port 49748 ssh2 ...	2020-08-12 17:08:48
167.71.175.107	attackspam	TCP port : 29993	2020-08-12 18:45:53
103.246.240.26	attack	prod6 ...	2020-08-12 18:05:24

Recently Reported IPs

106.12.167.59	106.126.12.46	106.13.221.39	106.13.234.203
106.14.147.11	106.14.158.164	106.14.18.237	106.14.19.235
106.14.22.167	106.14.246.97	106.14.26.221	106.14.29.183
106.14.32.92	106.14.34.197	106.14.37.166	106.14.44.160
106.14.47.154	106.14.5.2	106.14.53.116	106.14.6.238