This IP address has been reported a total of
261
times from
188 distinct
sources.
106.12.7.70 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 8 02:58:57 alpha-ee6a30e929 sshd[237882]: Failed password for root from 106.12.7.70 port 41244 ...
show moreJun 8 02:58:57 alpha-ee6a30e929 sshd[237882]: Failed password for root from 106.12.7.70 port 41244 ssh2
Jun 8 03:03:06 alpha-ee6a30e929 sshd[237888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.7.70 user=root
Jun 8 03:03:08 alpha-ee6a30e929 sshd[237888]: Failed password for root from 106.12.7.70 port 47462 ssh2
...
show less
Cluster member (Omitted) (US/United States/-) said, DENY 106.12.7.70, Reason:[(sshd) Failed SSH logi ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 106.12.7.70, Reason:[(sshd) Failed SSH login from 106.12.7.70 (CN/China/-): 3 in the last 3600 secs]
show less
2026-06-07T19:58:15.051030+00:00 csmaps sshd[292295]: Connection closed by authenticating user root ...
show more2026-06-07T19:58:15.051030+00:00 csmaps sshd[292295]: Connection closed by authenticating user root 106.12.7.70 port 46350 [preauth]
2026-06-07T19:58:19.506993+00:00 csmaps sshd[292334]: Connection closed by authenticating user root 106.12.7.70 port 53844 [preauth]
2026-06-07T19:58:22.631619+00:00 csmaps sshd[292242]: Connection closed by authenticating user root 106.12.7.70 port 43596 [preauth]
2026-06-07T19:58:24.339978+00:00 csmaps sshd[292366]: Connection closed by authenticating user root 106.12.7.70 port 57276 [preauth]
2026-06-07T19:58:48.068609+00:00 csmaps sshd[292401]: Connection closed by authenticating user root 106.12.7.70 port 59504 [preauth]
...
show less
Report 2441624 with IP 3469407 for SSH brute-force attack by source 3464065 via ssh-honeypot/0.2.0+h ...
show moreReport 2441624 with IP 3469407 for SSH brute-force attack by source 3464065 via ssh-honeypot/0.2.0+http
show less
2026-06-07T18:46:19.682663+02:00 khalid sshd-session[2689864]: Failed password for root from 106.12. ...
show more2026-06-07T18:46:19.682663+02:00 khalid sshd-session[2689864]: Failed password for root from 106.12.7.70 port 56578 ssh2
2026-06-07T18:46:38.902367+02:00 khalid sshd-session[2690016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.7.70 user=root
2026-06-07T18:46:41.095603+02:00 khalid sshd-session[2690016]: Failed password for root from 106.12.7.70 port 38768 ssh2
show less
2026-06-07T16:11:48.602981+01:00 mxbackup sshd[34669]: Failed password for root from 106.12.7.70 por ...
show more2026-06-07T16:11:48.602981+01:00 mxbackup sshd[34669]: Failed password for root from 106.12.7.70 port 54660 ssh2
2026-06-07T16:13:59.323022+01:00 mxbackup sshd[34697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.7.70 user=root
2026-06-07T16:14:00.573308+01:00 mxbackup sshd[34697]: Failed password for root from 106.12.7.70 port 54254 ssh2
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Brute-Force
SSH
Showing 1 to
15
of 261 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩