Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: Beijing Baidu Netcom Science and Technology Co., Ltd.

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackbots
Oct  3 20:06:30 minden010 sshd[18686]: Failed password for root from 106.12.87.149 port 37224 ssh2
Oct  3 20:09:28 minden010 sshd[19715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149
Oct  3 20:09:31 minden010 sshd[19715]: Failed password for invalid user phil from 106.12.87.149 port 58051 ssh2
...
2020-10-04 06:43:54
attackbotsspam
$f2bV_matches
2020-10-03 14:35:15
attackspam
Invalid user posto from 106.12.87.149 port 34118
2020-09-22 21:36:16
attackbots
$f2bV_matches
2020-09-22 13:41:06
attackspam
Sep  8 11:31:35 rotator sshd\[10646\]: Invalid user romine from 106.12.87.149Sep  8 11:31:37 rotator sshd\[10646\]: Failed password for invalid user romine from 106.12.87.149 port 60387 ssh2Sep  8 11:36:15 rotator sshd\[11416\]: Failed password for root from 106.12.87.149 port 55831 ssh2Sep  8 11:37:33 rotator sshd\[11426\]: Invalid user admin from 106.12.87.149Sep  8 11:37:34 rotator sshd\[11426\]: Failed password for invalid user admin from 106.12.87.149 port 35000 ssh2Sep  8 11:38:49 rotator sshd\[11436\]: Failed password for root from 106.12.87.149 port 42395 ssh2
...
2020-09-08 21:42:45
attackspambots
...
2020-09-08 13:34:29
attackbotsspam
Sep  7 20:11:51 buvik sshd[3497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149  user=root
Sep  7 20:11:52 buvik sshd[3497]: Failed password for root from 106.12.87.149 port 50796 ssh2
Sep  7 20:13:17 buvik sshd[3621]: Invalid user play from 106.12.87.149
...
2020-09-08 06:08:34
attackbotsspam
Bruteforce detected by fail2ban
2020-08-12 16:26:33
attackbotsspam
SSH Brute Force
2020-08-09 18:09:34
attackspam
Aug  8 01:58:38 vps46666688 sshd[1518]: Failed password for root from 106.12.87.149 port 56166 ssh2
...
2020-08-08 13:05:50
attack
2020-07-30T11:08:26.550784amanda2.illicoweb.com sshd\[48950\]: Invalid user lichen from 106.12.87.149 port 60789
2020-07-30T11:08:26.557159amanda2.illicoweb.com sshd\[48950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149
2020-07-30T11:08:28.359579amanda2.illicoweb.com sshd\[48950\]: Failed password for invalid user lichen from 106.12.87.149 port 60789 ssh2
2020-07-30T11:12:00.527744amanda2.illicoweb.com sshd\[487\]: Invalid user chenjl from 106.12.87.149 port 52981
2020-07-30T11:12:00.534201amanda2.illicoweb.com sshd\[487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149
...
2020-07-30 17:49:57
attack
Invalid user ttt from 106.12.87.149 port 34289
2020-07-23 13:13:38
attackspambots
2020-07-05T08:43:18+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)
2020-07-05 17:04:06
attackbots
2020-06-28T08:37:08.968220linuxbox-skyline sshd[317040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149  user=root
2020-06-28T08:37:11.370511linuxbox-skyline sshd[317040]: Failed password for root from 106.12.87.149 port 60656 ssh2
...
2020-06-28 23:34:39
attackspam
Jun 22 04:12:18 onepixel sshd[425861]: Invalid user farhan from 106.12.87.149 port 33953
Jun 22 04:12:18 onepixel sshd[425861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149 
Jun 22 04:12:18 onepixel sshd[425861]: Invalid user farhan from 106.12.87.149 port 33953
Jun 22 04:12:20 onepixel sshd[425861]: Failed password for invalid user farhan from 106.12.87.149 port 33953 ssh2
Jun 22 04:14:43 onepixel sshd[426942]: Invalid user hvu from 106.12.87.149 port 49374
2020-06-22 12:22:29
attackbots
Jun 20 06:15:01 dignus sshd[15429]: Failed password for invalid user gsm from 106.12.87.149 port 45180 ssh2
Jun 20 06:19:14 dignus sshd[15757]: Invalid user macky from 106.12.87.149 port 40626
Jun 20 06:19:14 dignus sshd[15757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149
Jun 20 06:19:16 dignus sshd[15757]: Failed password for invalid user macky from 106.12.87.149 port 40626 ssh2
Jun 20 06:23:10 dignus sshd[16070]: Invalid user owen from 106.12.87.149 port 36062
...
2020-06-20 23:38:04
attackbotsspam
leo_www
2020-06-18 20:42:59
attack
Jun 17 00:19:46 ny01 sshd[15971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149
Jun 17 00:19:47 ny01 sshd[15971]: Failed password for invalid user max from 106.12.87.149 port 48318 ssh2
Jun 17 00:23:50 ny01 sshd[16479]: Failed password for root from 106.12.87.149 port 45201 ssh2
2020-06-17 14:26:46
attack
May 30 05:46:10 ncomp sshd[15592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149  user=root
May 30 05:46:12 ncomp sshd[15592]: Failed password for root from 106.12.87.149 port 40927 ssh2
May 30 05:48:03 ncomp sshd[15612]: Invalid user xVIRal from 106.12.87.149
2020-05-30 17:11:34
attackspambots
SSH Brute-Force reported by Fail2Ban
2020-05-22 16:58:21
attack
SSH Brute Force
2020-05-17 07:32:11
attack
2020-05-07 22:29:58,854 fail2ban.actions: WARNING [ssh] Ban 106.12.87.149
2020-05-08 04:30:59
attack
$f2bV_matches
2020-04-09 17:06:53
attackspambots
Jan 25 23:15:48 MK-Soft-VM8 sshd[29581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.149 
Jan 25 23:15:49 MK-Soft-VM8 sshd[29581]: Failed password for invalid user docker from 106.12.87.149 port 44364 ssh2
...
2020-01-26 06:51:35
attackbots
Invalid user oracle from 106.12.87.149 port 34630
2020-01-16 09:29:45
Comments on same subnet:
IP Type Details Datetime
106.12.87.83 attackspam
Sep 27 19:25:44 124388 sshd[4857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.83
Sep 27 19:25:44 124388 sshd[4857]: Invalid user myuser1 from 106.12.87.83 port 55932
Sep 27 19:25:46 124388 sshd[4857]: Failed password for invalid user myuser1 from 106.12.87.83 port 55932 ssh2
Sep 27 19:29:48 124388 sshd[5024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.83  user=root
Sep 27 19:29:49 124388 sshd[5024]: Failed password for root from 106.12.87.83 port 40056 ssh2
2020-09-28 04:51:47
106.12.87.83 attackspam
" "
2020-09-27 21:09:13
106.12.87.83 attack
" "
2020-09-27 12:50:38
106.12.87.83 attackspambots
Unauthorized connection attempt detected from IP address 106.12.87.83 to port 1370 [T]
2020-08-29 21:59:34
106.12.87.250 attackbotsspam
srv02 Mass scanning activity detected Target: 24403  ..
2020-08-18 15:41:48
106.12.87.83 attackbotsspam
firewall-block, port(s): 28581/tcp
2020-08-15 04:14:23
106.12.87.159 attack
Automatic Fail2ban report - Trying login SSH
2020-07-16 07:40:44
106.12.87.159 attack
Jul 11 00:34:39 lnxded63 sshd[26051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.159
2020-07-11 07:33:10
106.12.87.83 attackspambots
Jul  6 04:50:57 jumpserver sshd[360078]: Failed password for invalid user astr from 106.12.87.83 port 55202 ssh2
Jul  6 04:53:14 jumpserver sshd[360094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.83  user=root
Jul  6 04:53:16 jumpserver sshd[360094]: Failed password for root from 106.12.87.83 port 39380 ssh2
...
2020-07-06 19:00:58
106.12.87.159 attackbotsspam
Invalid user gitlab from 106.12.87.159 port 37672
2020-06-17 19:54:48
106.12.87.250 attack
 TCP (SYN) 106.12.87.250:48230 -> port 12470, len 44
2020-06-04 18:35:21
106.12.87.159 attackspambots
Jun  3 16:08:44 ns381471 sshd[21877]: Failed password for root from 106.12.87.159 port 33314 ssh2
2020-06-04 00:03:52
106.12.87.159 attack
Invalid user pkh from 106.12.87.159 port 53170
2020-05-22 08:51:50
106.12.87.250 attackbotsspam
ssh intrusion attempt
2020-03-12 03:27:47
106.12.87.250 attackbots
2020-03-06T08:46:32.166446shield sshd\[10601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.250  user=root
2020-03-06T08:46:34.496112shield sshd\[10601\]: Failed password for root from 106.12.87.250 port 47150 ssh2
2020-03-06T08:51:29.698437shield sshd\[11420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.87.250  user=root
2020-03-06T08:51:31.466168shield sshd\[11420\]: Failed password for root from 106.12.87.250 port 52700 ssh2
2020-03-06T08:56:17.892280shield sshd\[12203\]: Invalid user steve from 106.12.87.250 port 58288
2020-03-06 17:11:39
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.87.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56981
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.87.149.			IN	A

;; AUTHORITY SECTION:
.			3377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041401 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 15 05:51:37 +08 2019
;; MSG SIZE  rcvd: 117

Host info
Host 149.87.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 149.87.12.106.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
112.175.120.232 attackspam
slow and persistent scanner
2019-10-26 12:33:55
60.184.181.253 attack
22/tcp
[2019-10-25]1pkt
2019-10-26 08:24:01
94.191.68.83 attackbots
Oct 26 04:12:07 www_kotimaassa_fi sshd[4988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.68.83
Oct 26 04:12:09 www_kotimaassa_fi sshd[4988]: Failed password for invalid user postgres from 94.191.68.83 port 40176 ssh2
...
2019-10-26 12:22:45
5.189.16.37 attackspam
Oct 26 06:11:41 mc1 kernel: \[3349438.953698\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=51345 PROTO=TCP SPT=54940 DPT=1853 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 26 06:15:20 mc1 kernel: \[3349657.813226\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=63734 PROTO=TCP SPT=54940 DPT=1271 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct 26 06:15:35 mc1 kernel: \[3349672.978110\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=36732 PROTO=TCP SPT=54940 DPT=236 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-10-26 12:34:42
88.89.44.167 attack
2019-10-26T10:54:50.949541enmeeting.mahidol.ac.th sshd\[18110\]: Invalid user agavni from 88.89.44.167 port 43499
2019-10-26T10:54:50.965218enmeeting.mahidol.ac.th sshd\[18110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ti0177a400-1693.bb.online.no
2019-10-26T10:54:53.699640enmeeting.mahidol.ac.th sshd\[18110\]: Failed password for invalid user agavni from 88.89.44.167 port 43499 ssh2
...
2019-10-26 12:03:48
210.227.113.18 attackbotsspam
Oct 25 22:50:22 server sshd\[14711\]: Failed password for invalid user vomaske from 210.227.113.18 port 49228 ssh2
Oct 26 07:02:52 server sshd\[2197\]: Invalid user lue from 210.227.113.18
Oct 26 07:02:52 server sshd\[2197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 
Oct 26 07:02:53 server sshd\[2197\]: Failed password for invalid user lue from 210.227.113.18 port 57412 ssh2
Oct 26 07:15:09 server sshd\[6637\]: Invalid user teamspeak from 210.227.113.18
Oct 26 07:15:09 server sshd\[6637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.227.113.18 
...
2019-10-26 12:16:51
113.80.86.2 attackspambots
Oct 26 04:13:32 localhost sshd\[68404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.86.2  user=root
Oct 26 04:13:34 localhost sshd\[68404\]: Failed password for root from 113.80.86.2 port 36308 ssh2
Oct 26 04:18:28 localhost sshd\[68527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.86.2  user=root
Oct 26 04:18:31 localhost sshd\[68527\]: Failed password for root from 113.80.86.2 port 53986 ssh2
Oct 26 04:23:29 localhost sshd\[68627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.80.86.2  user=root
...
2019-10-26 12:26:39
61.69.254.46 attackspam
Oct 26 09:25:54 areeb-Workstation sshd[9137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.69.254.46
Oct 26 09:25:56 areeb-Workstation sshd[9137]: Failed password for invalid user odete from 61.69.254.46 port 55704 ssh2
...
2019-10-26 12:07:53
223.196.83.98 attackbotsspam
Oct 26 05:54:39 mail sshd[18462]: Invalid user aeok from 223.196.83.98
Oct 26 05:54:39 mail sshd[18462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.196.83.98
Oct 26 05:54:39 mail sshd[18462]: Invalid user aeok from 223.196.83.98
Oct 26 05:54:41 mail sshd[18462]: Failed password for invalid user aeok from 223.196.83.98 port 38536 ssh2
...
2019-10-26 12:09:50
187.167.195.131 attack
Automatic report - Port Scan Attack
2019-10-26 12:00:02
198.23.65.253 attack
Unauthorised access (Oct 26) SRC=198.23.65.253 LEN=40 TTL=239 ID=46801 TCP DPT=445 WINDOW=1024 SYN
2019-10-26 12:37:29
46.61.235.111 attack
2019-10-26T03:54:38.357688abusebot-4.cloudsearch.cf sshd\[9860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.61.235.111  user=root
2019-10-26 12:13:06
212.64.109.31 attackbots
2019-10-25T23:22:51.3434981495-001 sshd\[26269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31  user=root
2019-10-25T23:22:53.4317001495-001 sshd\[26269\]: Failed password for root from 212.64.109.31 port 52250 ssh2
2019-10-25T23:40:43.2885591495-001 sshd\[27038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31  user=root
2019-10-25T23:40:45.5477971495-001 sshd\[27038\]: Failed password for root from 212.64.109.31 port 41350 ssh2
2019-10-25T23:44:49.6211871495-001 sshd\[27182\]: Invalid user devol from 212.64.109.31 port 49006
2019-10-25T23:44:49.6315551495-001 sshd\[27182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31
...
2019-10-26 12:07:17
115.110.204.197 attack
2019-10-26T03:54:43.585356abusebot-7.cloudsearch.cf sshd\[22759\]: Invalid user ftpuser from 115.110.204.197 port 47428
2019-10-26 12:09:03
150.95.212.72 attackbotsspam
2019-10-26T04:06:27.162326shield sshd\[31509\]: Invalid user tomcat from 150.95.212.72 port 46890
2019-10-26T04:06:27.166803shield sshd\[31509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-212-72.873a.static.cnode.io
2019-10-26T04:06:29.723232shield sshd\[31509\]: Failed password for invalid user tomcat from 150.95.212.72 port 46890 ssh2
2019-10-26T04:10:31.750105shield sshd\[32250\]: Invalid user backup from 150.95.212.72 port 57166
2019-10-26T04:10:31.754244shield sshd\[32250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-212-72.873a.static.cnode.io
2019-10-26 12:15:22

Recently Reported IPs

103.82.102.192 193.56.29.55 189.79.187.219 178.62.194.63
146.247.224.229 180.176.244.171 91.240.100.80 61.92.215.72
42.3.114.168 1.55.28.80 221.213.44.226 185.154.188.137
1.34.88.131 195.9.179.118 88.190.193.96 79.155.166.247
24.189.212.13 185.217.162.58 145.249.106.164 186.31.65.212