Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
Nov  2 09:27:37 gw1 sshd[18683]: Failed password for root from 106.12.214.21 port 43654 ssh2
...
2019-11-02 12:43:36
attackspambots
Oct 25 05:51:26 srv206 sshd[29575]: Invalid user samba from 106.12.214.21
Oct 25 05:51:26 srv206 sshd[29575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
Oct 25 05:51:26 srv206 sshd[29575]: Invalid user samba from 106.12.214.21
Oct 25 05:51:28 srv206 sshd[29575]: Failed password for invalid user samba from 106.12.214.21 port 37260 ssh2
...
2019-10-25 16:32:22
attack
Oct 19 07:51:46 meumeu sshd[358]: Failed password for root from 106.12.214.21 port 51158 ssh2
Oct 19 07:57:06 meumeu sshd[1093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21 
Oct 19 07:57:07 meumeu sshd[1093]: Failed password for invalid user uf from 106.12.214.21 port 59692 ssh2
...
2019-10-19 16:02:51
attack
Oct 13 06:40:30 www1 sshd\[60109\]: Invalid user Debian2017 from 106.12.214.21Oct 13 06:40:32 www1 sshd\[60109\]: Failed password for invalid user Debian2017 from 106.12.214.21 port 51690 ssh2Oct 13 06:45:14 www1 sshd\[60687\]: Invalid user Debian2017 from 106.12.214.21Oct 13 06:45:16 www1 sshd\[60687\]: Failed password for invalid user Debian2017 from 106.12.214.21 port 60300 ssh2Oct 13 06:49:55 www1 sshd\[61076\]: Invalid user Passwort_123 from 106.12.214.21Oct 13 06:49:57 www1 sshd\[61076\]: Failed password for invalid user Passwort_123 from 106.12.214.21 port 40662 ssh2
...
2019-10-13 16:42:47
attack
Sep 26 05:09:14 php1 sshd\[28515\]: Invalid user administrator from 106.12.214.21
Sep 26 05:09:14 php1 sshd\[28515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
Sep 26 05:09:16 php1 sshd\[28515\]: Failed password for invalid user administrator from 106.12.214.21 port 48190 ssh2
Sep 26 05:16:22 php1 sshd\[29141\]: Invalid user xiong from 106.12.214.21
Sep 26 05:16:22 php1 sshd\[29141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
2019-09-26 23:32:35
attack
Automatic report - Banned IP Access
2019-09-25 15:06:12
attack
$f2bV_matches
2019-09-20 14:18:14
attack
2019-09-07T22:50:51.567049abusebot-8.cloudsearch.cf sshd\[5874\]: Invalid user minecraft from 106.12.214.21 port 35606
2019-09-08 15:25:18
attackspambots
Aug 10 07:57:30 hosting sshd[21361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21  user=admin
Aug 10 07:57:32 hosting sshd[21361]: Failed password for admin from 106.12.214.21 port 33818 ssh2
...
2019-08-10 14:38:26
attack
Aug  9 03:09:37 debian sshd\[5692\]: Invalid user dareen from 106.12.214.21 port 34874
Aug  9 03:09:37 debian sshd\[5692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
...
2019-08-09 14:39:56
attackspam
Aug  8 12:02:36 vps200512 sshd\[7682\]: Invalid user bank from 106.12.214.21
Aug  8 12:02:36 vps200512 sshd\[7682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
Aug  8 12:02:38 vps200512 sshd\[7682\]: Failed password for invalid user bank from 106.12.214.21 port 41142 ssh2
Aug  8 12:08:49 vps200512 sshd\[7740\]: Invalid user ts3 from 106.12.214.21
Aug  8 12:08:49 vps200512 sshd\[7740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
2019-08-09 00:09:54
attackbots
Jul 28 05:06:38 dedicated sshd[6464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21  user=root
Jul 28 05:06:41 dedicated sshd[6464]: Failed password for root from 106.12.214.21 port 58902 ssh2
2019-07-28 11:21:39
attack
Jul 22 22:59:21 vayu sshd[562985]: Invalid user test from 106.12.214.21
Jul 22 22:59:21 vayu sshd[562985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21 
Jul 22 22:59:24 vayu sshd[562985]: Failed password for invalid user test from 106.12.214.21 port 40984 ssh2
Jul 22 22:59:24 vayu sshd[562985]: Received disconnect from 106.12.214.21: 11: Bye Bye [preauth]
Jul 22 23:10:09 vayu sshd[571691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21  user=r.r
Jul 22 23:10:11 vayu sshd[571691]: Failed password for r.r from 106.12.214.21 port 37380 ssh2
Jul 22 23:10:11 vayu sshd[571691]: Received disconnect from 106.12.214.21: 11: Bye Bye [preauth]
Jul 22 23:10:59 vayu sshd[572197]: Invalid user sinus from 106.12.214.21
Jul 22 23:10:59 vayu sshd[572197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21 
Jul 22 23:11:00 vayu........
-------------------------------
2019-07-23 09:15:45
attackbots
Invalid user al from 106.12.214.21 port 45936
2019-07-20 15:42:32
attack
Jul 13 02:34:09 lnxmail61 sshd[25525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
2019-07-13 09:35:20
attack
Jul 12 11:51:37 mail sshd\[15866\]: Invalid user dora from 106.12.214.21 port 50512
Jul 12 11:51:37 mail sshd\[15866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
Jul 12 11:51:39 mail sshd\[15866\]: Failed password for invalid user dora from 106.12.214.21 port 50512 ssh2
Jul 12 11:56:52 mail sshd\[16829\]: Invalid user lv from 106.12.214.21 port 42572
Jul 12 11:56:52 mail sshd\[16829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
2019-07-12 18:04:27
attack
Jul 12 10:46:52 mail sshd\[3075\]: Invalid user db2inst2 from 106.12.214.21 port 60128
Jul 12 10:46:52 mail sshd\[3075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
Jul 12 10:46:54 mail sshd\[3075\]: Failed password for invalid user db2inst2 from 106.12.214.21 port 60128 ssh2
Jul 12 10:52:18 mail sshd\[4125\]: Invalid user mis from 106.12.214.21 port 52206
Jul 12 10:52:18 mail sshd\[4125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.21
2019-07-12 17:07:12
Comments on same subnet:
IP Type Details Datetime
106.12.214.128 attackbotsspam
 TCP (SYN) 106.12.214.128:54575 -> port 21503, len 44
2020-10-08 01:15:29
106.12.214.128 attackspam
Found on   CINS badguys     / proto=6  .  srcport=54139  .  dstport=13186  .     (866)
2020-10-07 17:23:53
106.12.214.128 attackspam
Found on   CINS badguys     / proto=6  .  srcport=52002  .  dstport=10679  .     (1272)
2020-10-05 07:10:39
106.12.214.128 attackspambots
Found on   CINS badguys     / proto=6  .  srcport=52002  .  dstport=10679  .     (1272)
2020-10-04 23:22:18
106.12.214.128 attack
 TCP (SYN) 106.12.214.128:52002 -> port 10679, len 44
2020-10-04 15:06:03
106.12.214.173 attackbots
2020-07-14T14:34:01.275536linuxbox-skyline sshd[972962]: Invalid user sawada from 106.12.214.173 port 54844
...
2020-07-15 06:23:39
106.12.214.145 attackbotsspam
Jun 19 08:24:17 web1 sshd[19646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145  user=root
Jun 19 08:24:19 web1 sshd[19646]: Failed password for root from 106.12.214.145 port 51396 ssh2
Jun 19 08:29:43 web1 sshd[20983]: Invalid user plex from 106.12.214.145 port 46968
Jun 19 08:29:43 web1 sshd[20983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145
Jun 19 08:29:43 web1 sshd[20983]: Invalid user plex from 106.12.214.145 port 46968
Jun 19 08:29:45 web1 sshd[20983]: Failed password for invalid user plex from 106.12.214.145 port 46968 ssh2
Jun 19 08:31:38 web1 sshd[21515]: Invalid user ansible from 106.12.214.145 port 41264
Jun 19 08:31:38 web1 sshd[21515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145
Jun 19 08:31:38 web1 sshd[21515]: Invalid user ansible from 106.12.214.145 port 41264
Jun 19 08:31:40 web1 sshd[21515]: Fai
...
2020-06-19 07:33:13
106.12.214.145 attack
frenzy
2020-06-18 13:08:05
106.12.214.145 attack
Jun  9 04:05:35 game-panel sshd[25860]: Failed password for root from 106.12.214.145 port 43816 ssh2
Jun  9 04:12:26 game-panel sshd[26275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145
Jun  9 04:12:28 game-panel sshd[26275]: Failed password for invalid user vagrant from 106.12.214.145 port 39292 ssh2
2020-06-09 15:38:50
106.12.214.145 attackspam
$f2bV_matches
2020-05-02 06:46:12
106.12.214.145 attack
Apr 13 18:52:46 lock-38 sshd[955621]: Failed password for root from 106.12.214.145 port 55340 ssh2
Apr 13 18:57:32 lock-38 sshd[955733]: Failed password for root from 106.12.214.145 port 57750 ssh2
Apr 13 19:02:15 lock-38 sshd[955845]: Invalid user radu from 106.12.214.145 port 60168
Apr 13 19:02:15 lock-38 sshd[955845]: Invalid user radu from 106.12.214.145 port 60168
Apr 13 19:02:15 lock-38 sshd[955845]: Failed password for invalid user radu from 106.12.214.145 port 60168 ssh2
...
2020-04-20 03:41:05
106.12.214.145 attack
DATE:2020-04-15 23:04:59, IP:106.12.214.145, PORT:ssh SSH brute force auth (docker-dc)
2020-04-16 05:35:54
106.12.214.128 attackbots
Apr 14 12:06:02 localhost sshd[7752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.128  user=root
Apr 14 12:06:05 localhost sshd[7752]: Failed password for root from 106.12.214.128 port 37878 ssh2
Apr 14 12:10:42 localhost sshd[8247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.128  user=root
Apr 14 12:10:45 localhost sshd[8247]: Failed password for root from 106.12.214.128 port 37019 ssh2
Apr 14 12:15:37 localhost sshd[8804]: Invalid user tester from 106.12.214.128 port 36160
...
2020-04-14 20:42:36
106.12.214.145 attackspambots
DATE:2020-04-14 14:15:58, IP:106.12.214.145, PORT:ssh SSH brute force auth (docker-dc)
2020-04-14 20:21:38
106.12.214.145 attackspam
SSH login attempts.
2020-04-10 20:10:23
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.214.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31093
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.214.21.			IN	A

;; AUTHORITY SECTION:
.			2997	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071200 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 12 17:07:06 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 21.214.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 21.214.12.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
177.191.181.5 attackspam
Feb  4 01:07:18 MK-Soft-VM7 sshd[6983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.191.181.5 
Feb  4 01:07:20 MK-Soft-VM7 sshd[6983]: Failed password for invalid user davids from 177.191.181.5 port 59494 ssh2
...
2020-02-04 08:33:26
180.87.34.76 attackbots
Feb  4 01:07:25 jane sshd[2645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.87.34.76 
Feb  4 01:07:27 jane sshd[2645]: Failed password for invalid user usuario from 180.87.34.76 port 51740 ssh2
...
2020-02-04 08:28:07
118.68.165.196 attackbots
1580774853 - 02/04/2020 01:07:33 Host: 118.68.165.196/118.68.165.196 Port: 445 TCP Blocked
2020-02-04 08:24:38
159.89.169.109 attackspam
Automatic report - Banned IP Access
2020-02-04 08:17:30
185.192.210.13 attackbotsspam
Automatic report - Port Scan Attack
2020-02-04 08:49:52
106.12.118.30 attack
SSH invalid-user multiple login try
2020-02-04 08:29:05
178.128.52.32 attackbots
Feb  4 00:07:42 l02a sshd[31836]: Invalid user gx from 178.128.52.32
Feb  4 00:07:42 l02a sshd[31836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.52.32 
Feb  4 00:07:42 l02a sshd[31836]: Invalid user gx from 178.128.52.32
Feb  4 00:07:44 l02a sshd[31836]: Failed password for invalid user gx from 178.128.52.32 port 48714 ssh2
2020-02-04 08:12:50
106.13.65.106 attackbotsspam
Feb  4 01:07:14 haigwepa sshd[25296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.106 
Feb  4 01:07:16 haigwepa sshd[25296]: Failed password for invalid user matilda from 106.13.65.106 port 49324 ssh2
...
2020-02-04 08:37:54
103.61.37.231 attack
Feb  4 01:07:23 vps647732 sshd[12101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.231
Feb  4 01:07:26 vps647732 sshd[12101]: Failed password for invalid user louis from 103.61.37.231 port 53088 ssh2
...
2020-02-04 08:29:36
41.221.146.138 attackspam
2020-02-04T00:51:11.384645vps773228.ovh.net sshd[8732]: Invalid user www from 41.221.146.138 port 44410
2020-02-04T00:51:11.399196vps773228.ovh.net sshd[8732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.221.146.138
2020-02-04T00:51:11.384645vps773228.ovh.net sshd[8732]: Invalid user www from 41.221.146.138 port 44410
2020-02-04T00:51:13.735275vps773228.ovh.net sshd[8732]: Failed password for invalid user www from 41.221.146.138 port 44410 ssh2
2020-02-04T00:59:35.875241vps773228.ovh.net sshd[8742]: Invalid user test from 41.221.146.138 port 52033
2020-02-04T00:59:35.894901vps773228.ovh.net sshd[8742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.221.146.138
2020-02-04T00:59:35.875241vps773228.ovh.net sshd[8742]: Invalid user test from 41.221.146.138 port 52033
2020-02-04T00:59:37.421275vps773228.ovh.net sshd[8742]: Failed password for invalid user test from 41.221.146.138 port 52033 ssh2
2020-
...
2020-02-04 08:38:34
185.176.27.98 attackbotsspam
02/03/2020-19:07:27.160633 185.176.27.98 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2020-02-04 08:27:38
69.94.158.117 attackspam
Feb  4 01:06:33  exim[8131]: [1\53] 1iyljb-000279-MA H=barometer.swingthelamp.com (barometer.ecuawif.com) [69.94.158.117] F= rejected after DATA: This message scored 101.6 spam points.
2020-02-04 08:47:01
106.13.31.93 attackspambots
Feb  4 01:07:04 pornomens sshd\[25249\]: Invalid user upgrade from 106.13.31.93 port 51558
Feb  4 01:07:04 pornomens sshd\[25249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.31.93
Feb  4 01:07:06 pornomens sshd\[25249\]: Failed password for invalid user upgrade from 106.13.31.93 port 51558 ssh2
...
2020-02-04 08:45:28
196.216.220.204 attackbotsspam
IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.
2020-02-04 08:39:44
36.72.218.73 attackbotsspam
1580774854 - 02/04/2020 01:07:34 Host: 36.72.218.73/36.72.218.73 Port: 445 TCP Blocked
2020-02-04 08:23:34

Recently Reported IPs

122.55.189.250 103.82.13.20 118.165.229.61 177.135.117.165
36.229.140.199 114.45.72.174 2.50.6.208 133.24.82.53
80.51.120.66 190.78.140.79 197.14.11.80 86.57.163.112
240.45.155.31 1.173.113.147 1.63.62.219 168.90.12.3
37.6.105.203 38.74.94.13 33.97.32.9 61.133.229.38