Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackbotsspam
May 27 21:31:28 electroncash sshd[64988]: Failed password for invalid user db2fenc1 from 106.12.43.142 port 40082 ssh2
May 27 21:34:42 electroncash sshd[710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142  user=root
May 27 21:34:43 electroncash sshd[710]: Failed password for root from 106.12.43.142 port 59554 ssh2
May 27 21:37:51 electroncash sshd[1710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142  user=root
May 27 21:37:54 electroncash sshd[1710]: Failed password for root from 106.12.43.142 port 50784 ssh2
...
2020-05-28 07:34:41
attackspambots
May  3 05:48:16 sip sshd[32063]: Failed password for root from 106.12.43.142 port 42018 ssh2
May  3 05:53:06 sip sshd[1547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
May  3 05:53:08 sip sshd[1547]: Failed password for invalid user sshuser from 106.12.43.142 port 37640 ssh2
2020-05-03 15:15:13
attackbotsspam
Invalid user ci from 106.12.43.142 port 51768
2020-04-23 14:00:38
attackspam
Invalid user tester from 106.12.43.142 port 45436
2020-04-21 06:20:13
attack
Apr 20 07:44:00 sxvn sshd[371692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
2020-04-20 17:42:43
attackspam
Apr  2 03:48:00 vlre-nyc-1 sshd\[30778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142  user=root
Apr  2 03:48:03 vlre-nyc-1 sshd\[30778\]: Failed password for root from 106.12.43.142 port 52532 ssh2
Apr  2 03:56:24 vlre-nyc-1 sshd\[30974\]: Invalid user songbanghao from 106.12.43.142
Apr  2 03:56:24 vlre-nyc-1 sshd\[30974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
Apr  2 03:56:26 vlre-nyc-1 sshd\[30974\]: Failed password for invalid user songbanghao from 106.12.43.142 port 40116 ssh2
...
2020-04-02 15:59:35
attack
Mar 28 23:41:35 eventyay sshd[23244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
Mar 28 23:41:37 eventyay sshd[23244]: Failed password for invalid user tcn from 106.12.43.142 port 38430 ssh2
Mar 28 23:49:52 eventyay sshd[23443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
...
2020-03-29 07:35:11
attackspambots
k+ssh-bruteforce
2020-03-26 13:15:28
attack
2020-03-25 13:48:45,965 fail2ban.actions: WARNING [ssh] Ban 106.12.43.142
2020-03-26 00:03:00
attackspambots
Mar 25 05:22:31 h1745522 sshd[28618]: Invalid user r00t from 106.12.43.142 port 37642
Mar 25 05:22:31 h1745522 sshd[28618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
Mar 25 05:22:31 h1745522 sshd[28618]: Invalid user r00t from 106.12.43.142 port 37642
Mar 25 05:22:33 h1745522 sshd[28618]: Failed password for invalid user r00t from 106.12.43.142 port 37642 ssh2
Mar 25 05:26:51 h1745522 sshd[28745]: Invalid user ntps from 106.12.43.142 port 39694
Mar 25 05:26:51 h1745522 sshd[28745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
Mar 25 05:26:51 h1745522 sshd[28745]: Invalid user ntps from 106.12.43.142 port 39694
Mar 25 05:26:54 h1745522 sshd[28745]: Failed password for invalid user ntps from 106.12.43.142 port 39694 ssh2
Mar 25 05:31:00 h1745522 sshd[28827]: Invalid user n from 106.12.43.142 port 41740
...
2020-03-25 12:44:51
attackbots
suspicious action Fri, 21 Feb 2020 10:16:02 -0300
2020-02-22 01:14:01
attackbots
Feb 12 15:16:43 legacy sshd[2133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
Feb 12 15:16:45 legacy sshd[2133]: Failed password for invalid user zhang from 106.12.43.142 port 43050 ssh2
Feb 12 15:21:20 legacy sshd[2343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142
...
2020-02-13 02:54:15
attack
Unauthorized connection attempt detected from IP address 106.12.43.142 to port 2220 [J]
2020-01-28 06:08:00
attackspam
Jan  9 14:09:49 plesk sshd[1686]: Invalid user dsetiadi from 106.12.43.142
Jan  9 14:09:49 plesk sshd[1686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142 
Jan  9 14:09:50 plesk sshd[1686]: Failed password for invalid user dsetiadi from 106.12.43.142 port 43716 ssh2
Jan  9 14:09:50 plesk sshd[1686]: Received disconnect from 106.12.43.142: 11: Bye Bye [preauth]
Jan  9 14:33:25 plesk sshd[3458]: Invalid user rankwatc from 106.12.43.142
Jan  9 14:33:25 plesk sshd[3458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.142 
Jan  9 14:33:26 plesk sshd[3458]: Failed password for invalid user rankwatc from 106.12.43.142 port 58622 ssh2
Jan  9 14:33:26 plesk sshd[3458]: Received disconnect from 106.12.43.142: 11: Bye Bye [preauth]
Jan  9 14:38:46 plesk sshd[3807]: Invalid user duj from 106.12.43.142
Jan  9 14:38:46 plesk sshd[3807]: pam_unix(sshd:auth): authentication failur........
-------------------------------
2020-01-12 07:23:23
attack
01/10/2020-09:12:37.326726 106.12.43.142 Protocol: 6 ET SCAN Potential SSH Scan
2020-01-10 22:16:24
Comments on same subnet:
IP Type Details Datetime
106.12.43.54 attackbots
firewall-block, port(s): 2228/tcp
2020-09-01 17:45:57
106.12.43.54 attackspambots
srv02 Mass scanning activity detected Target: 1920  ..
2020-08-27 18:13:11
106.12.43.54 attack
Aug 19 23:35:50 r.ca sshd[18444]: Failed password for invalid user zhou from 106.12.43.54 port 50372 ssh2
2020-08-20 17:14:06
106.12.43.54 attack
31154/tcp 3453/tcp 19480/tcp...
[2020-06-29/07-19]5pkt,5pt.(tcp)
2020-07-20 07:36:35
106.12.43.54 attackspambots
Jun 19 02:28:38 ArkNodeAT sshd\[17008\]: Invalid user ubuntu from 106.12.43.54
Jun 19 02:28:38 ArkNodeAT sshd\[17008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.54
Jun 19 02:28:41 ArkNodeAT sshd\[17008\]: Failed password for invalid user ubuntu from 106.12.43.54 port 37360 ssh2
2020-06-19 08:35:20
106.12.43.54 attack
Jun 17 04:44:29 firewall sshd[17523]: Failed password for root from 106.12.43.54 port 52880 ssh2
Jun 17 04:46:25 firewall sshd[17608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.54  user=root
Jun 17 04:46:27 firewall sshd[17608]: Failed password for root from 106.12.43.54 port 48824 ssh2
...
2020-06-17 15:55:49
106.12.43.54 attack
Jun 15 09:43:43 ns382633 sshd\[4431\]: Invalid user bug from 106.12.43.54 port 53332
Jun 15 09:43:43 ns382633 sshd\[4431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.54
Jun 15 09:43:44 ns382633 sshd\[4431\]: Failed password for invalid user bug from 106.12.43.54 port 53332 ssh2
Jun 15 09:51:25 ns382633 sshd\[5946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.54  user=root
Jun 15 09:51:27 ns382633 sshd\[5946\]: Failed password for root from 106.12.43.54 port 36958 ssh2
2020-06-15 18:50:07
106.12.43.54 attackbotsspam
Jun 11 05:57:38 host sshd[24596]: Invalid user kiuchi from 106.12.43.54 port 38122
...
2020-06-11 13:25:24
106.12.43.54 attackbotsspam
SSH brute-force attempt
2020-06-03 21:16:47
106.12.43.54 attackbots
Jun  2 16:58:42 ny01 sshd[27154]: Failed password for root from 106.12.43.54 port 47130 ssh2
Jun  2 17:02:28 ny01 sshd[27741]: Failed password for root from 106.12.43.54 port 43024 ssh2
2020-06-03 05:06:53
106.12.43.54 attackspam
Invalid user contec123 from 106.12.43.54 port 51408
2020-05-16 08:04:06
106.12.43.54 attackbotsspam
May 13 05:50:09 piServer sshd[31196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.43.54 
May 13 05:50:12 piServer sshd[31196]: Failed password for invalid user shop from 106.12.43.54 port 32826 ssh2
May 13 05:59:21 piServer sshd[32431]: Failed password for root from 106.12.43.54 port 53220 ssh2
...
2020-05-13 12:35:44
106.12.43.54 attackspam
Port scan(s) denied
2020-05-02 15:36:43
106.12.43.66 attackbots
"Unauthorized connection attempt on SSHD detected"
2020-04-27 22:43:11
106.12.43.242 attack
Apr 24 14:03:26 rotator sshd\[15297\]: Invalid user frappe from 106.12.43.242Apr 24 14:03:28 rotator sshd\[15297\]: Failed password for invalid user frappe from 106.12.43.242 port 45984 ssh2Apr 24 14:05:27 rotator sshd\[16084\]: Invalid user constructor from 106.12.43.242Apr 24 14:05:29 rotator sshd\[16084\]: Failed password for invalid user constructor from 106.12.43.242 port 42198 ssh2Apr 24 14:07:52 rotator sshd\[16110\]: Failed password for root from 106.12.43.242 port 38406 ssh2Apr 24 14:09:49 rotator sshd\[16150\]: Failed password for root from 106.12.43.242 port 34616 ssh2
...
2020-04-24 21:02:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.43.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39170
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.43.142.			IN	A

;; AUTHORITY SECTION:
.			193	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011000 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 10 22:16:20 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 142.43.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.43.12.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
37.248.157.190 attack
Email rejected due to spam filtering
2020-07-26 07:01:25
107.170.104.125 attackbots
Jul 25 21:24:10 *** sshd[26553]: Invalid user user from 107.170.104.125
2020-07-26 06:52:48
122.118.125.53 attack
Exploited Host.
2020-07-26 06:46:17
45.129.33.20 attackspam
Multiport scan : 18 ports scanned 25005 25006 25012 25013 25014 25017 25018 25029 25033 25036 25037 25041 25061 25065 25074 25077 25095 25097
2020-07-26 06:58:40
123.207.250.132 attack
Jul 26 01:17:05 vps333114 sshd[17065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.250.132
Jul 26 01:17:07 vps333114 sshd[17065]: Failed password for invalid user darshana from 123.207.250.132 port 34560 ssh2
...
2020-07-26 07:16:41
178.119.72.145 attackspambots
Port 22 Scan, PTR: None
2020-07-26 06:47:35
1.209.110.88 attackbots
Brute-force attempt banned
2020-07-26 07:18:53
121.171.173.27 attackbots
Exploited Host.
2020-07-26 07:08:24
45.141.87.7 attack
Brute force attack stopped by firewall
2020-07-26 07:07:07
78.128.113.115 attackbotsspam
(smtpauth) Failed SMTP AUTH login from 78.128.113.115 (BG/Bulgaria/ip-113-115.4vendeta.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-07-26 00:57:49 login authenticator failed for ([78.128.113.115]) [78.128.113.115]: 535 Incorrect authentication data (set_id=dagactie@wikimia.nl)
2020-07-26 00:57:51 login authenticator failed for ([78.128.113.115]) [78.128.113.115]: 535 Incorrect authentication data (set_id=dagactie)
2020-07-26 01:00:31 login authenticator failed for ([78.128.113.115]) [78.128.113.115]: 535 Incorrect authentication data (set_id=support@wikimia.nl)
2020-07-26 01:00:33 login authenticator failed for ([78.128.113.115]) [78.128.113.115]: 535 Incorrect authentication data (set_id=support)
2020-07-26 01:01:56 login authenticator failed for ([78.128.113.115]) [78.128.113.115]: 535 Incorrect authentication data (set_id=info@brict.it)
2020-07-26 07:06:44
14.161.27.203 attack
Dovecot Invalid User Login Attempt.
2020-07-26 07:04:07
61.177.172.102 attackspam
Jul 25 23:09:21 marvibiene sshd[3207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102  user=root
Jul 25 23:09:23 marvibiene sshd[3207]: Failed password for root from 61.177.172.102 port 10717 ssh2
Jul 25 23:09:25 marvibiene sshd[3207]: Failed password for root from 61.177.172.102 port 10717 ssh2
Jul 25 23:09:21 marvibiene sshd[3207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102  user=root
Jul 25 23:09:23 marvibiene sshd[3207]: Failed password for root from 61.177.172.102 port 10717 ssh2
Jul 25 23:09:25 marvibiene sshd[3207]: Failed password for root from 61.177.172.102 port 10717 ssh2
2020-07-26 07:13:03
209.141.47.92 attackbotsspam
Invalid user ansible from 209.141.47.92 port 44940
2020-07-26 06:45:45
36.156.155.192 attack
Jul 26 01:09:23 vps647732 sshd[21704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.155.192
Jul 26 01:09:26 vps647732 sshd[21704]: Failed password for invalid user cod from 36.156.155.192 port 49606 ssh2
...
2020-07-26 07:13:16
75.190.240.97 attackbots
(sshd) Failed SSH login from 75.190.240.97 (US/United States/cpe-75-190-240-97.nc.res.rr.com): 5 in the last 3600 secs
2020-07-26 07:14:18

Recently Reported IPs

92.184.100.157 59.175.176.233 45.186.182.252 37.186.38.250
228.15.67.78 102.197.110.242 147.171.109.217 24.135.6.227
135.84.129.68 72.156.16.59 14.186.51.196 210.211.116.114
106.214.246.86 201.220.113.167 90.171.230.218 190.113.106.37
187.188.129.60 180.215.213.158 178.128.124.121 171.234.122.1