Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Tencent Cloud Computing (Beijing) Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Oct  5 00:12:40 lnxmail61 sshd[1536]: Failed password for root from 106.54.217.12 port 42882 ssh2
Oct  5 00:15:47 lnxmail61 sshd[1870]: Failed password for root from 106.54.217.12 port 34214 ssh2
2020-10-05 06:21:54
attackspam
Oct  4 10:48:42 nextcloud sshd\[31134\]: Invalid user carla from 106.54.217.12
Oct  4 10:48:42 nextcloud sshd\[31134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
Oct  4 10:48:44 nextcloud sshd\[31134\]: Failed password for invalid user carla from 106.54.217.12 port 58146 ssh2
2020-10-04 22:22:19
attack
SSH login attempts.
2020-10-04 14:08:32
attackspambots
Failed password for root from 106.54.217.12 port 44898 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
Failed password for root from 106.54.217.12 port 44324 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
Failed password for root from 106.54.217.12 port 43744 ssh2
2020-09-21 18:12:29
attackspambots
DATE:2020-09-12 11:10:26,IP:106.54.217.12,MATCHES:10,PORT:ssh
2020-09-12 23:51:06
attackbots
Sep 12 00:07:25 dignus sshd[4155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
Sep 12 00:07:27 dignus sshd[4155]: Failed password for root from 106.54.217.12 port 33594 ssh2
Sep 12 00:11:15 dignus sshd[4508]: Invalid user tucker from 106.54.217.12 port 49076
Sep 12 00:11:15 dignus sshd[4508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
Sep 12 00:11:16 dignus sshd[4508]: Failed password for invalid user tucker from 106.54.217.12 port 49076 ssh2
...
2020-09-12 15:53:34
attackbotsspam
Sep 11 22:10:10 sshgateway sshd\[20875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
Sep 11 22:10:11 sshgateway sshd\[20875\]: Failed password for root from 106.54.217.12 port 56920 ssh2
Sep 11 22:12:53 sshgateway sshd\[21391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
2020-09-12 07:40:24
attack
2020-08-19T16:32:41.524855abusebot.cloudsearch.cf sshd[13419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
2020-08-19T16:32:43.232607abusebot.cloudsearch.cf sshd[13419]: Failed password for root from 106.54.217.12 port 38186 ssh2
2020-08-19T16:34:57.963678abusebot.cloudsearch.cf sshd[13456]: Invalid user elemental from 106.54.217.12 port 58630
2020-08-19T16:34:57.968975abusebot.cloudsearch.cf sshd[13456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
2020-08-19T16:34:57.963678abusebot.cloudsearch.cf sshd[13456]: Invalid user elemental from 106.54.217.12 port 58630
2020-08-19T16:35:00.013017abusebot.cloudsearch.cf sshd[13456]: Failed password for invalid user elemental from 106.54.217.12 port 58630 ssh2
2020-08-19T16:37:07.438523abusebot.cloudsearch.cf sshd[13488]: Invalid user cb from 106.54.217.12 port 50372
...
2020-08-20 00:50:10
attackbots
2020-08-13T03:30:41.139042ns386461 sshd\[632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
2020-08-13T03:30:42.820970ns386461 sshd\[632\]: Failed password for root from 106.54.217.12 port 34542 ssh2
2020-08-13T03:48:01.054536ns386461 sshd\[15945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
2020-08-13T03:48:03.178437ns386461 sshd\[15945\]: Failed password for root from 106.54.217.12 port 59636 ssh2
2020-08-13T03:51:44.724297ns386461 sshd\[19512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
...
2020-08-13 10:12:20
attackspambots
2020-08-09T08:44:04.831161vps751288.ovh.net sshd\[5851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
2020-08-09T08:44:07.311554vps751288.ovh.net sshd\[5851\]: Failed password for root from 106.54.217.12 port 35226 ssh2
2020-08-09T08:49:32.244439vps751288.ovh.net sshd\[5889\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
2020-08-09T08:49:34.087390vps751288.ovh.net sshd\[5889\]: Failed password for root from 106.54.217.12 port 52250 ssh2
2020-08-09T08:53:49.744672vps751288.ovh.net sshd\[5926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12  user=root
2020-08-09 15:34:10
attackbotsspam
SSH Brute Force
2020-08-01 21:40:34
attackspambots
Brute-force attempt banned
2020-07-16 01:08:49
attackspam
Jul  7 17:26:24 mail sshd\[64393\]: Invalid user postgres from 106.54.217.12
Jul  7 17:26:24 mail sshd\[64393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
...
2020-07-08 06:34:48
attackspam
Jul  7 21:02:46 minden010 sshd[30479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
Jul  7 21:02:48 minden010 sshd[30479]: Failed password for invalid user yuyi from 106.54.217.12 port 33712 ssh2
Jul  7 21:05:49 minden010 sshd[31955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
...
2020-07-08 03:31:54
attack
Jun 25 14:58:04 cdc sshd[28765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12 
Jun 25 14:58:06 cdc sshd[28765]: Failed password for invalid user zas from 106.54.217.12 port 42926 ssh2
2020-06-26 01:46:10
attackbotsspam
May 26 09:25:33 PorscheCustomer sshd[21197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
May 26 09:25:35 PorscheCustomer sshd[21197]: Failed password for invalid user amerino from 106.54.217.12 port 47742 ssh2
May 26 09:27:52 PorscheCustomer sshd[21290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
...
2020-05-26 23:12:29
attackspam
2020-05-15T12:25:32.712158abusebot-3.cloudsearch.cf sshd[3312]: Invalid user admin from 106.54.217.12 port 50330
2020-05-15T12:25:32.719401abusebot-3.cloudsearch.cf sshd[3312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
2020-05-15T12:25:32.712158abusebot-3.cloudsearch.cf sshd[3312]: Invalid user admin from 106.54.217.12 port 50330
2020-05-15T12:25:34.336696abusebot-3.cloudsearch.cf sshd[3312]: Failed password for invalid user admin from 106.54.217.12 port 50330 ssh2
2020-05-15T12:27:43.935242abusebot-3.cloudsearch.cf sshd[3422]: Invalid user user from 106.54.217.12 port 44840
2020-05-15T12:27:43.940930abusebot-3.cloudsearch.cf sshd[3422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
2020-05-15T12:27:43.935242abusebot-3.cloudsearch.cf sshd[3422]: Invalid user user from 106.54.217.12 port 44840
2020-05-15T12:27:46.210384abusebot-3.cloudsearch.cf sshd[3422]: Failed password 
...
2020-05-15 21:34:30
attackspam
Invalid user zed from 106.54.217.12 port 44390
2020-05-14 08:38:37
attackbotsspam
Apr 21 06:19:05 eventyay sshd[26710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12
Apr 21 06:19:07 eventyay sshd[26710]: Failed password for invalid user jd from 106.54.217.12 port 39570 ssh2
Apr 21 06:22:24 eventyay sshd[26859]: Failed password for root from 106.54.217.12 port 58310 ssh2
...
2020-04-21 16:21:03
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.54.217.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16581
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.54.217.12.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042100 1800 900 604800 86400

;; Query time: 154 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 21 16:20:58 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 12.217.54.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.217.54.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
111.229.79.17 attackbots
Feb 22 06:37:35 odroid64 sshd\[3071\]: Invalid user ftpuser from 111.229.79.17
Feb 22 06:37:35 odroid64 sshd\[3071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.79.17
...
2020-02-22 17:44:14
148.235.82.68 attack
Feb 21 18:43:44 kapalua sshd\[31918\]: Invalid user liuzunpeng from 148.235.82.68
Feb 21 18:43:44 kapalua sshd\[31918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.82.68
Feb 21 18:43:46 kapalua sshd\[31918\]: Failed password for invalid user liuzunpeng from 148.235.82.68 port 45350 ssh2
Feb 21 18:47:48 kapalua sshd\[32252\]: Invalid user uploader from 148.235.82.68
Feb 21 18:47:48 kapalua sshd\[32252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.235.82.68
2020-02-22 17:37:07
185.39.11.28 attack
Feb 22 09:20:18 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 22 09:22:39 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 22 09:29:14 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\<6w7M7iWfdAC5Jwsc\>\
Feb 22 09:39:59 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 22 09:52:39 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.39.11.28, lip=192.168.100.101, session=\\
Feb 22 09:53:14 pop3
2020-02-22 17:27:47
68.183.19.84 attackspam
5x Failed Password
2020-02-22 17:37:56
112.33.253.60 attack
Feb 22 07:13:49 MK-Soft-VM5 sshd[32029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.33.253.60 
Feb 22 07:13:50 MK-Soft-VM5 sshd[32029]: Failed password for invalid user svnuser from 112.33.253.60 port 47048 ssh2
...
2020-02-22 17:45:43
193.248.216.19 attackbots
Invalid user emp from 193.248.216.19 port 36666
2020-02-22 17:28:36
156.236.119.100 attack
Feb 22 10:17:24 tuotantolaitos sshd[13627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.119.100
Feb 22 10:17:26 tuotantolaitos sshd[13627]: Failed password for invalid user chang from 156.236.119.100 port 52750 ssh2
...
2020-02-22 17:34:57
69.254.62.212 attackspam
Feb 22 09:45:47 server sshd\[30439\]: Invalid user info from 69.254.62.212
Feb 22 09:45:47 server sshd\[30439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-69-254-62-212.hsd1.fl.comcast.net 
Feb 22 09:45:50 server sshd\[30439\]: Failed password for invalid user info from 69.254.62.212 port 7451 ssh2
Feb 22 09:51:03 server sshd\[31342\]: Invalid user magic from 69.254.62.212
Feb 22 09:51:03 server sshd\[31342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-69-254-62-212.hsd1.fl.comcast.net 
...
2020-02-22 17:50:53
113.176.89.116 attack
Feb 22 10:11:31 server sshd[3541096]: Failed password for invalid user odroid from 113.176.89.116 port 59946 ssh2
Feb 22 10:14:26 server sshd[3542749]: Failed password for root from 113.176.89.116 port 56272 ssh2
Feb 22 10:17:22 server sshd[3544479]: Failed password for root from 113.176.89.116 port 52600 ssh2
2020-02-22 17:49:57
77.20.217.64 attack
Feb 21 20:02:33 hanapaa sshd\[18432\]: Invalid user pi from 77.20.217.64
Feb 21 20:02:33 hanapaa sshd\[18434\]: Invalid user pi from 77.20.217.64
Feb 21 20:02:33 hanapaa sshd\[18432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4d14d940.dynamic.kabel-deutschland.de
Feb 21 20:02:33 hanapaa sshd\[18434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4d14d940.dynamic.kabel-deutschland.de
Feb 21 20:02:36 hanapaa sshd\[18432\]: Failed password for invalid user pi from 77.20.217.64 port 36348 ssh2
2020-02-22 17:46:14
51.38.178.226 attack
Feb 21 15:47:23 server sshd\[16744\]: Invalid user zll from 51.38.178.226
Feb 21 15:47:23 server sshd\[16744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=226.ip-51-38-178.eu 
Feb 21 15:47:24 server sshd\[16744\]: Failed password for invalid user zll from 51.38.178.226 port 39786 ssh2
Feb 22 09:57:09 server sshd\[32284\]: Invalid user mouzj from 51.38.178.226
Feb 22 09:57:09 server sshd\[32284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=226.ip-51-38-178.eu 
...
2020-02-22 17:58:51
218.92.0.179 attack
Feb 22 10:39:46 eventyay sshd[25434]: Failed password for root from 218.92.0.179 port 26441 ssh2
Feb 22 10:39:50 eventyay sshd[25434]: Failed password for root from 218.92.0.179 port 26441 ssh2
Feb 22 10:39:53 eventyay sshd[25434]: Failed password for root from 218.92.0.179 port 26441 ssh2
Feb 22 10:39:57 eventyay sshd[25434]: Failed password for root from 218.92.0.179 port 26441 ssh2
...
2020-02-22 17:56:50
54.36.182.244 attackbotsspam
Brute-force attempt banned
2020-02-22 17:46:35
86.35.221.136 attackbotsspam
Automatic report - Port Scan Attack
2020-02-22 17:44:45
82.207.214.192 attackspambots
Feb 22 05:40:24 work-partkepr sshd\[19479\]: Invalid user libuuid from 82.207.214.192 port 42298
Feb 22 05:40:25 work-partkepr sshd\[19479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.207.214.192
...
2020-02-22 17:41:38

Recently Reported IPs

200.65.42.213 58.119.172.1 45.129.2.70 113.255.76.26
1.179.154.21 187.57.13.131 57.134.88.29 213.180.203.158
14.169.54.119 202.87.248.21 36.93.52.122 192.227.223.126
113.22.82.23 222.90.82.199 203.147.73.192 200.194.40.221
129.37.208.244 192.241.237.210 117.211.129.253 3.59.220.90