This IP address has been reported a total of
3,276
times from
950 distinct
sources.
106.12.6.79 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-04T04:33:05.466600+03:00 kotia.ptr.network sshd-session[17738]: Invalid user school from 106 ...
show more2026-06-04T04:33:05.466600+03:00 kotia.ptr.network sshd-session[17738]: Invalid user school from 106.12.6.79 port 50386
...
show less
2026-06-04T03:26:49.462730+02:00 sfdx sshd[13865]: Invalid user school from 106.12.6.79 port 57484
2 ...
show more2026-06-04T03:26:49.462730+02:00 sfdx sshd[13865]: Invalid user school from 106.12.6.79 port 57484
2026-06-04T03:26:49.645767+02:00 sfdx sshd[13865]: Disconnected from invalid user school 106.12.6.79 port 57484 [preauth]
...
show less
2026-06-03T23:04:16.205624+00:00 obscura.infra.lumis.moe sshd[1602117]: Invalid user metabase from 1 ...
show more2026-06-03T23:04:16.205624+00:00 obscura.infra.lumis.moe sshd[1602117]: Invalid user metabase from 106.12.6.79 port 36644
2026-06-03T23:14:07.692026+00:00 obscura.infra.lumis.moe sshd[1603103]: Invalid user server from 106.12.6.79 port 39856
2026-06-03T23:15:12.536994+00:00 obscura.infra.lumis.moe sshd[1603238]: Invalid user rollserv from 106.12.6.79 port 34430
...
show less
Brute-Force
SSH
Anonymous
2026-06-03T21:30:45.289571+00:00 cheese sshd[615215]: Invalid user vbox from 106.12.6.79 port 40702
...
show more2026-06-03T21:30:45.289571+00:00 cheese sshd[615215]: Invalid user vbox from 106.12.6.79 port 40702
...
show less
2026-06-03T19:24:59.867608 socky.stom66.co.uk proftpd[2496136]: session[2496136] 0.0.0.0 (106.12.6.7 ...
show more2026-06-03T19:24:59.867608 socky.stom66.co.uk proftpd[2496136]: session[2496136] 0.0.0.0 (106.12.6.79[106.12.6.79]): USER developer: no such user found from 106.12.6.79 [106.12.6.79] to ::ffff:5.79.80.26:2222
...
show less
Brute-Force
FTP Brute-Force
Anonymous
2026-06-03T18:34:24.007391+00:00 Canada1 sshd-session[3088915]: pam_unix(sshd:auth): authentication ...
show more2026-06-03T18:34:24.007391+00:00 Canada1 sshd-session[3088915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.6.79
2026-06-03T18:34:25.640692+00:00 Canada1 sshd-session[3088915]: Failed password for invalid user debian from 106.12.6.79 port 37306 ssh2
...
show less
Report 2428437 with IP 2926942 for SSH brute-force attack by source 3470662 via ssh-honeypot/0.2.1+h ...
show moreReport 2428437 with IP 2926942 for SSH brute-force attack by source 3470662 via ssh-honeypot/0.2.1+http
show less
2026-06-03T14:10:59.024199 webhost1 sshd[1084931]: Failed password for root from 106.12.6.79 port 48 ...
show more2026-06-03T14:10:59.024199 webhost1 sshd[1084931]: Failed password for root from 106.12.6.79 port 48092 ssh2
2026-06-03T14:11:01.509144 webhost1 sshd[1084931]: Disconnected from authenticating user root 106.12.6.79 port 48092 [preauth]
2026-06-03T14:23:54.269653 webhost1 sshd[1085247]: Connection closed by 106.12.6.79 port 32960 [preauth]
...
show less
Jun 3 12:19:43 Debian-1202-bookworm-amd64-base sshd[461991]: Failed password for root from 106.12.6 ...
show moreJun 3 12:19:43 Debian-1202-bookworm-amd64-base sshd[461991]: Failed password for root from 106.12.6.79 port 38242 ssh2
Jun 3 12:19:49 Debian-1202-bookworm-amd64-base sshd[469804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.6.79 user=root
Jun 3 12:19:52 Debian-1202-bookworm-amd64-base sshd[469804]: Failed password for root from 106.12.6.79 port 56988 ssh2
Jun 3 12:19:59 Debian-1202-bookworm-amd64-base sshd[475409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.6.79 user=root
Jun 3 12:20:01 Debian-1202-bookworm-amd64-base sshd[475409]: Failed password for root from 106.12.6.79 port 45698 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 3276 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩