Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea (Republic of)

Internet Service Provider: LG Dacom Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
(sshd) Failed SSH login from 106.245.228.122 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  9 10:20:15 server sshd[20916]: Invalid user test from 106.245.228.122 port 22670
Oct  9 10:20:17 server sshd[20916]: Failed password for invalid user test from 106.245.228.122 port 22670 ssh2
Oct  9 10:34:00 server sshd[24231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
Oct  9 10:34:02 server sshd[24231]: Failed password for root from 106.245.228.122 port 36485 ssh2
Oct  9 10:37:55 server sshd[25362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
2020-10-10 03:15:32
attackbots
Oct  9 12:23:33 host2 sshd[2079464]: Failed password for root from 106.245.228.122 port 61100 ssh2
Oct  9 12:27:24 host2 sshd[2080076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
Oct  9 12:27:26 host2 sshd[2080076]: Failed password for root from 106.245.228.122 port 27669 ssh2
Oct  9 12:27:24 host2 sshd[2080076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
Oct  9 12:27:26 host2 sshd[2080076]: Failed password for root from 106.245.228.122 port 27669 ssh2
...
2020-10-09 19:06:25
attack
2020-09-15 14:37:53,333 fail2ban.actions: WARNING [ssh] Ban 106.245.228.122
2020-09-16 01:56:10
attackbots
(sshd) Failed SSH login from 106.245.228.122 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 15 04:19:26 optimus sshd[1215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
Sep 15 04:19:28 optimus sshd[1215]: Failed password for root from 106.245.228.122 port 44760 ssh2
Sep 15 04:23:54 optimus sshd[2891]: Invalid user server from 106.245.228.122
Sep 15 04:23:54 optimus sshd[2891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122 
Sep 15 04:23:56 optimus sshd[2891]: Failed password for invalid user server from 106.245.228.122 port 15098 ssh2
2020-09-15 17:49:27
attackbotsspam
invalid user test2 from 106.245.228.122 port 40167 ssh2
2020-09-01 07:10:24
attackspam
Aug 25 09:44:07 game-panel sshd[18979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
Aug 25 09:44:09 game-panel sshd[18979]: Failed password for invalid user finn from 106.245.228.122 port 37122 ssh2
Aug 25 09:48:19 game-panel sshd[19185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
2020-08-25 18:03:38
attackspam
SSH Bruteforce attack
2020-08-23 05:46:58
attack
Aug 22 06:04:26 django-0 sshd[30257]: Invalid user doc from 106.245.228.122
...
2020-08-22 14:26:58
attack
Aug 21 06:57:44 lukav-desktop sshd\[8369\]: Invalid user aly from 106.245.228.122
Aug 21 06:57:44 lukav-desktop sshd\[8369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
Aug 21 06:57:46 lukav-desktop sshd\[8369\]: Failed password for invalid user aly from 106.245.228.122 port 45118 ssh2
Aug 21 06:59:11 lukav-desktop sshd\[9022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
Aug 21 06:59:13 lukav-desktop sshd\[9022\]: Failed password for root from 106.245.228.122 port 55202 ssh2
2020-08-21 12:44:07
attackbots
Aug 17 13:57:06 server sshd[32546]: Failed password for root from 106.245.228.122 port 24308 ssh2
Aug 17 14:01:41 server sshd[34705]: Failed password for root from 106.245.228.122 port 57811 ssh2
Aug 17 14:06:20 server sshd[36864]: Failed password for invalid user linuxacademy from 106.245.228.122 port 27322 ssh2
2020-08-17 20:50:12
attackspambots
Aug 15 20:33:57 serwer sshd\[10855\]: Failed password for root from 106.245.228.122 port 51112 ssh2
Aug 15 20:37:01 serwer sshd\[11904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
Aug 15 20:37:03 serwer sshd\[11904\]: Failed password for root from 106.245.228.122 port 14096 ssh2
...
2020-08-17 06:51:47
attackbotsspam
Aug 14 22:42:20 ip40 sshd[1004]: Failed password for root from 106.245.228.122 port 28899 ssh2
...
2020-08-15 05:17:24
attackbots
Jul 30 04:22:12 dignus sshd[8345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
Jul 30 04:22:14 dignus sshd[8345]: Failed password for invalid user gmonter from 106.245.228.122 port 49519 ssh2
Jul 30 04:23:50 dignus sshd[8574]: Invalid user zwang from 106.245.228.122 port 62127
Jul 30 04:23:50 dignus sshd[8574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
Jul 30 04:23:51 dignus sshd[8574]: Failed password for invalid user zwang from 106.245.228.122 port 62127 ssh2
...
2020-07-30 19:35:49
attack
ssh brute force
2020-07-29 16:08:39
attack
2020-07-19T16:06:24.493779shield sshd\[6887\]: Invalid user user1 from 106.245.228.122 port 56697
2020-07-19T16:06:24.501991shield sshd\[6887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
2020-07-19T16:06:26.713572shield sshd\[6887\]: Failed password for invalid user user1 from 106.245.228.122 port 56697 ssh2
2020-07-19T16:09:31.450095shield sshd\[7258\]: Invalid user password from 106.245.228.122 port 15741
2020-07-19T16:09:31.458494shield sshd\[7258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
2020-07-20 00:20:06
attack
Failed password for invalid user webmaster from 106.245.228.122 port 19769 ssh2
2020-07-14 21:03:53
attack
Jul  9 19:19:56 web-main sshd[431056]: Invalid user deana from 106.245.228.122 port 18996
Jul  9 19:19:58 web-main sshd[431056]: Failed password for invalid user deana from 106.245.228.122 port 18996 ssh2
Jul  9 19:29:22 web-main sshd[431097]: Invalid user paulj from 106.245.228.122 port 9685
2020-07-10 04:13:51
attack
Jul  6 22:45:05 server1 sshd\[6376\]: Invalid user deploy from 106.245.228.122
Jul  6 22:45:05 server1 sshd\[6376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122 
Jul  6 22:45:07 server1 sshd\[6376\]: Failed password for invalid user deploy from 106.245.228.122 port 29095 ssh2
Jul  6 22:48:37 server1 sshd\[7481\]: Invalid user redmine from 106.245.228.122
Jul  6 22:48:37 server1 sshd\[7481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122 
...
2020-07-07 13:07:52
attackbots
124. On Jun 23 2020 experienced a Brute Force SSH login attempt -> 41 unique times by 106.245.228.122.
2020-06-24 06:47:09
attackspambots
Jun 23 21:51:21 cp sshd[19485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
Jun 23 21:51:21 cp sshd[19485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
2020-06-24 04:14:41
attack
Jun 23 09:02:30 prod4 sshd\[1656\]: Invalid user ric from 106.245.228.122
Jun 23 09:02:33 prod4 sshd\[1656\]: Failed password for invalid user ric from 106.245.228.122 port 18300 ssh2
Jun 23 09:05:48 prod4 sshd\[3074\]: Failed password for root from 106.245.228.122 port 42842 ssh2
...
2020-06-23 16:33:10
attackspambots
2020-06-06T14:16:31.529167shield sshd\[14938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
2020-06-06T14:16:34.047857shield sshd\[14938\]: Failed password for root from 106.245.228.122 port 50847 ssh2
2020-06-06T14:20:38.357539shield sshd\[16157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
2020-06-06T14:20:40.117113shield sshd\[16157\]: Failed password for root from 106.245.228.122 port 16977 ssh2
2020-06-06T14:24:45.117946shield sshd\[17627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
2020-06-06 23:27:04
attackbots
May 27 22:05:57 mail sshd[16920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
May 27 22:05:59 mail sshd[16920]: Failed password for root from 106.245.228.122 port 38040 ssh2
May 27 22:08:17 mail sshd[17271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
May 27 22:08:18 mail sshd[17271]: Failed password for root from 106.245.228.122 port 54353 ssh2
May 27 22:09:56 mail sshd[17437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122  user=root
May 27 22:09:58 mail sshd[17437]: Failed password for root from 106.245.228.122 port 2686 ssh2
...
2020-05-28 05:05:21
attackspam
May  4 17:26:30 onepixel sshd[949782]: Failed password for root from 106.245.228.122 port 50226 ssh2
May  4 17:32:07 onepixel sshd[962903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122 
May  4 17:32:09 onepixel sshd[962903]: Failed password for invalid user hanshow from 106.245.228.122 port 24533 ssh2
...
2020-05-07 04:04:30
attackspambots
May  6 08:59:15 santamaria sshd\[16097\]: Invalid user zzk from 106.245.228.122
May  6 08:59:15 santamaria sshd\[16097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
May  6 08:59:17 santamaria sshd\[16097\]: Failed password for invalid user zzk from 106.245.228.122 port 7697 ssh2
...
2020-05-06 15:49:21
attackbotsspam
2020-05-05T19:13:46.372519shield sshd\[29227\]: Invalid user admin2 from 106.245.228.122 port 6394
2020-05-05T19:13:46.376444shield sshd\[29227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
2020-05-05T19:13:48.111139shield sshd\[29227\]: Failed password for invalid user admin2 from 106.245.228.122 port 6394 ssh2
2020-05-05T19:16:30.120336shield sshd\[30099\]: Invalid user vmail from 106.245.228.122 port 26222
2020-05-05T19:16:30.125296shield sshd\[30099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.245.228.122
2020-05-06 03:18:53
attackbotsspam
SSH/22 MH Probe, BF, Hack -
2020-05-02 14:13:18
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.245.228.122
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35235
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.245.228.122.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050103 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 02 14:13:12 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 122.228.245.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 122.228.245.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
118.25.25.207 attackspam
Jun 20 22:46:44 srv-ubuntu-dev3 sshd[86826]: Invalid user zhouying from 118.25.25.207
Jun 20 22:46:44 srv-ubuntu-dev3 sshd[86826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.25.207
Jun 20 22:46:44 srv-ubuntu-dev3 sshd[86826]: Invalid user zhouying from 118.25.25.207
Jun 20 22:46:46 srv-ubuntu-dev3 sshd[86826]: Failed password for invalid user zhouying from 118.25.25.207 port 53632 ssh2
Jun 20 22:51:27 srv-ubuntu-dev3 sshd[87615]: Invalid user pab from 118.25.25.207
Jun 20 22:51:27 srv-ubuntu-dev3 sshd[87615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.25.207
Jun 20 22:51:27 srv-ubuntu-dev3 sshd[87615]: Invalid user pab from 118.25.25.207
Jun 20 22:51:29 srv-ubuntu-dev3 sshd[87615]: Failed password for invalid user pab from 118.25.25.207 port 49688 ssh2
Jun 20 22:56:02 srv-ubuntu-dev3 sshd[88326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=
...
2020-06-21 05:15:56
222.186.190.14 attack
Jun 20 16:55:34 NPSTNNYC01T sshd[8988]: Failed password for root from 222.186.190.14 port 26920 ssh2
Jun 20 16:55:43 NPSTNNYC01T sshd[9010]: Failed password for root from 222.186.190.14 port 47191 ssh2
Jun 20 16:55:46 NPSTNNYC01T sshd[9010]: Failed password for root from 222.186.190.14 port 47191 ssh2
...
2020-06-21 04:58:51
103.39.217.240 attack
Jun 20 23:05:54 ift sshd\[49487\]: Failed password for root from 103.39.217.240 port 50388 ssh2Jun 20 23:10:48 ift sshd\[50406\]: Invalid user test from 103.39.217.240Jun 20 23:10:50 ift sshd\[50406\]: Failed password for invalid user test from 103.39.217.240 port 38994 ssh2Jun 20 23:13:28 ift sshd\[50663\]: Failed password for root from 103.39.217.240 port 38226 ssh2Jun 20 23:15:50 ift sshd\[51109\]: Invalid user prashant from 103.39.217.240
...
2020-06-21 04:50:02
220.191.173.222 attackspambots
Jun 20 22:15:53 debian-2gb-nbg1-2 kernel: \[14942836.311636\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=220.191.173.222 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=20545 PROTO=TCP SPT=38742 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-21 04:43:08
45.83.65.180 attackspam
Jun 20 22:15:33 debian-2gb-nbg1-2 kernel: \[14942816.871187\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.83.65.180 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=56 ID=1337 DF PROTO=TCP SPT=51027 DPT=53 WINDOW=0 RES=0x00 SYN URGP=0
2020-06-21 05:09:08
178.32.221.142 attackspambots
Jun 20 22:26:42 piServer sshd[15028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.221.142 
Jun 20 22:26:43 piServer sshd[15028]: Failed password for invalid user kai from 178.32.221.142 port 33148 ssh2
Jun 20 22:32:09 piServer sshd[15408]: Failed password for root from 178.32.221.142 port 33945 ssh2
...
2020-06-21 04:40:14
190.198.233.243 attackbots
Unauthorized connection attempt from IP address 190.198.233.243 on Port 445(SMB)
2020-06-21 05:11:43
103.89.176.74 attackspam
(sshd) Failed SSH login from 103.89.176.74 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 20 22:05:20 amsweb01 sshd[17438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.89.176.74  user=root
Jun 20 22:05:22 amsweb01 sshd[17438]: Failed password for root from 103.89.176.74 port 41266 ssh2
Jun 20 22:12:11 amsweb01 sshd[18431]: Invalid user checker from 103.89.176.74 port 34428
Jun 20 22:12:13 amsweb01 sshd[18431]: Failed password for invalid user checker from 103.89.176.74 port 34428 ssh2
Jun 20 22:15:30 amsweb01 sshd[18985]: Invalid user cvr from 103.89.176.74 port 54304
2020-06-21 05:14:00
114.67.206.90 attackbots
Jun 20 22:12:19 buvik sshd[7534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.206.90
Jun 20 22:12:20 buvik sshd[7534]: Failed password for invalid user testuser from 114.67.206.90 port 42938 ssh2
Jun 20 22:15:33 buvik sshd[8014]: Invalid user gaa from 114.67.206.90
...
2020-06-21 05:09:53
110.137.179.93 attackspambots
Automatic report - Port Scan Attack
2020-06-21 05:04:26
37.187.7.95 attackbots
5x Failed Password
2020-06-21 05:09:36
82.130.246.74 attack
Jun 20 22:39:10 piServer sshd[16032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.130.246.74 
Jun 20 22:39:11 piServer sshd[16032]: Failed password for invalid user rosana from 82.130.246.74 port 45128 ssh2
Jun 20 22:40:51 piServer sshd[16191]: Failed password for root from 82.130.246.74 port 46658 ssh2
...
2020-06-21 05:04:38
122.144.211.235 attackspam
Jun 20 22:15:33 pve1 sshd[10461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.211.235 
Jun 20 22:15:35 pve1 sshd[10461]: Failed password for invalid user sakamoto from 122.144.211.235 port 37766 ssh2
...
2020-06-21 05:08:19
117.50.63.120 attackspam
2020-06-20T22:57:58.043473galaxy.wi.uni-potsdam.de sshd[10175]: Invalid user alan from 117.50.63.120 port 34530
2020-06-20T22:57:58.045792galaxy.wi.uni-potsdam.de sshd[10175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.63.120
2020-06-20T22:57:58.043473galaxy.wi.uni-potsdam.de sshd[10175]: Invalid user alan from 117.50.63.120 port 34530
2020-06-20T22:58:00.300377galaxy.wi.uni-potsdam.de sshd[10175]: Failed password for invalid user alan from 117.50.63.120 port 34530 ssh2
2020-06-20T22:59:01.854031galaxy.wi.uni-potsdam.de sshd[10311]: Invalid user drop from 117.50.63.120 port 49996
2020-06-20T22:59:01.856302galaxy.wi.uni-potsdam.de sshd[10311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.63.120
2020-06-20T22:59:01.854031galaxy.wi.uni-potsdam.de sshd[10311]: Invalid user drop from 117.50.63.120 port 49996
2020-06-20T22:59:03.759380galaxy.wi.uni-potsdam.de sshd[10311]: Failed password for
...
2020-06-21 05:13:17
186.211.209.82 attackspam
Unauthorized connection attempt from IP address 186.211.209.82 on Port 445(SMB)
2020-06-21 05:07:25

Recently Reported IPs

4.53.159.91 13.210.202.197 130.42.226.50 38.0.179.91
84.88.1.138 172.6.5.214 147.73.252.150 51.6.108.221
150.121.153.93 157.189.192.64 195.181.229.147 113.169.129.157
146.6.95.4 13.58.193.197 144.232.89.78 62.112.125.255
177.135.196.6 49.165.172.189 15.223.178.242 35.234.23.150