This IP address has been reported a total of
1,207
times from
544 distinct
sources.
106.12.108.64 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
106.12.108.64 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more106.12.108.64 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 12 16:56:18 server5 sshd[5589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.209.159.11 user=root
Jun 12 16:55:57 server5 sshd[5454]: Failed password for root from 213.136.88.112 port 54044 ssh2
Jun 12 16:53:34 server5 sshd[3945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.76.81 user=root
Jun 12 16:53:36 server5 sshd[3945]: Failed password for root from 182.43.76.81 port 40274 ssh2
Jun 12 16:56:09 server5 sshd[5526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.64 user=root
Jun 12 16:56:11 server5 sshd[5526]: Failed password for root from 106.12.108.64 port 39434 ssh2
IP Addresses Blocked:
213.209.159.11 (MD/Republic of Moldova/-)
213.136.88.112 (DE/Germany/-)
182.43.76.81 (CN/China/-)
show less
2026-06-12T15:16:26.619098+00:00 edge-mini sshd[435176]: Failed password for invalid user systems fr ...
show more2026-06-12T15:16:26.619098+00:00 edge-mini sshd[435176]: Failed password for invalid user systems from 106.12.108.64 port 39078 ssh2
2026-06-12T15:25:06.804374+00:00 edge-mini sshd[435198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.64 user=root
2026-06-12T15:25:08.698509+00:00 edge-mini sshd[435198]: Failed password for root from 106.12.108.64 port 57644 ssh2
...
show less
Brute force attempts against SSH on nonstandard port - Repeat offender 106.12.108.64 banned at least ...
show moreBrute force attempts against SSH on nonstandard port - Repeat offender 106.12.108.64 banned at least 2 times in the last 7 days
show less
Port Scan
Brute-Force
SSH
Anonymous
2026-06-12T11:42:36.929478 localhost.localdomain sshd[3863369]: Invalid user matt from 106.12.108.64 ...
show more2026-06-12T11:42:36.929478 localhost.localdomain sshd[3863369]: Invalid user matt from 106.12.108.64 port 50666
...
show less
2026-06-12T06:32:44.113Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-06-12T06:32:44.113Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 106.12.108.64.
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (4 attempts).
show less
Brute-Force
SSH
Anonymous
2026-06-12T02:26:21.573824 prodgateway sshd-session[39980]: Invalid user myftp from 106.12.108.64 po ...
show more2026-06-12T02:26:21.573824 prodgateway sshd-session[39980]: Invalid user myftp from 106.12.108.64 port 34438
2026-06-12T02:26:21.580575 prodgateway sshd-session[39980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.64
2026-06-12T02:26:23.843909 prodgateway sshd-session[39980]: Failed password for invalid user myftp from 106.12.108.64 port 34438 ssh2
...
show less
2026-06-11T22:31:06.443267+00:00 v2202502255267314709 sshd[1049374]: User root from 106.12.108.64 no ...
show more2026-06-11T22:31:06.443267+00:00 v2202502255267314709 sshd[1049374]: User root from 106.12.108.64 not allowed because not listed in AllowUsers
2026-06-11T22:35:36.853613+00:00 v2202502255267314709 sshd[1060041]: Invalid user jordan from 106.12.108.64 port 49992
2026-06-11T22:37:08.707984+00:00 v2202502255267314709 sshd[1063742]: Invalid user hamza from 106.12.108.64 port 38690
2026-06-11T22:38:44.460294+00:00 v2202502255267314709 sshd[1067285]: User root from 106.12.108.64 not allowed because not listed in AllowUsers
2026-06-11T22:40:09.550899+00:00 v2202502255267314709 sshd[1071010]: User root from 106.12.108.64 not allowed because not listed in AllowUsers
...
show less
2026-06-12T00:35:45.422428+02:00 hosting.defencegeeks.net sshd-session[4087061]: Failed password for ...
show more2026-06-12T00:35:45.422428+02:00 hosting.defencegeeks.net sshd-session[4087061]: Failed password for invalid user jordan from 106.12.108.64 port 58916 ssh2
2026-06-12T00:37:29.776421+02:00 hosting.defencegeeks.net sshd-session[4088331]: Invalid user hamza from 106.12.108.64 port 60412
2026-06-12T00:37:29.783509+02:00 hosting.defencegeeks.net sshd-session[4088331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.64
2026-06-12T00:37:32.647743+02:00 hosting.defencegeeks.net sshd-session[4088331]: Failed password for invalid user hamza from 106.12.108.64 port 60412 ssh2
2026-06-12T00:38:47.918019+02:00 hosting.defencegeeks.net sshd-session[4089520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.64 user=root
2026-06-12T00:38:49.836906+02:00 hosting.defencegeeks.net sshd-session[4089520]: Failed password for root from 106.12.108.64 port 49958 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T22:30:41Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-11T22:30:41Z and 2026-06-11T22:32:23Z
show less
Brute-Force
SSH
Anonymous
2026-06-11T17:45:35.481170+01:00 mail sshd-session[1378907]: Failed password for invalid user eadmin ...
show more2026-06-11T17:45:35.481170+01:00 mail sshd-session[1378907]: Failed password for invalid user eadmin from 106.12.108.64 port 51320 ssh2
2026-06-11T18:41:08.281130+01:00 mail sshd-session[1410548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.64 user=root
2026-06-11T18:41:10.212711+01:00 mail sshd-session[1410548]: Failed password for root from 106.12.108.64 port 35316 ssh2
...
show less
2026-06-11T18:49:27.401299+02:00 clement-turlure.fr sshd[2230251]: Failed password for invalid user ...
show more2026-06-11T18:49:27.401299+02:00 clement-turlure.fr sshd[2230251]: Failed password for invalid user eadmin from 106.12.108.64 port 40566 ssh2
2026-06-11T19:04:44.874061+02:00 clement-turlure.fr sshd[2248943]: Invalid user online from 106.12.108.64 port 58230
2026-06-11T19:04:44.875953+02:00 clement-turlure.fr sshd[2248943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.64
2026-06-11T19:04:46.895691+02:00 clement-turlure.fr sshd[2248943]: Failed password for invalid user online from 106.12.108.64 port 58230 ssh2
2026-06-11T19:07:56.261686+02:00 clement-turlure.fr sshd[2253465]: Invalid user sai from 106.12.108.64 port 48854
...
show less
2026-06-11T11:25:20.966790 ******* sshd[3099097]: Disconnected from authenticating user root 106.12. ...
show more2026-06-11T11:25:20.966790 ******* sshd[3099097]: Disconnected from authenticating user root 106.12.108.64 port 33916 [preauth]
2026-06-11T11:39:37.443005 ******* sshd[3103484]: Connection closed by 106.12.108.64 port 36970 [preauth]
2026-06-11T11:46:22.884036 ******* sshd[3105453]: Connection closed by 106.12.108.64 port 46662 [preauth]
show less
Brute-Force
SSH
Showing 1 to
15
of 1207 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩