106.12.108.208

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Port probing on unauthorized port 2377	2020-09-28 05:46:47
attack	Port probing on unauthorized port 2377	2020-09-27 22:06:26
attackspam	Automatic report - Banned IP Access	2019-11-03 00:33:00
attackbotsspam	106.12.108.208 - - [23/Oct/2019:22:53:26 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 106.12.108.208 - - [23/Oct/2019:22:53:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 106.12.108.208 - - [23/Oct/2019:22:53:28 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 106.12.108.208 - - [23/Oct/2019:22:53:29 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 106.12.108.208 - - [23/Oct/2019:22:53:29 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 106.12.108.208 - - [23/Oct/2019:22:53:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-10-24 06:16:59

Comments on same subnet:

IP	Type	Details	Datetime
106.12.108.170	attackspam	firewall-block, port(s): 3838/tcp	2020-10-09 04:25:26
106.12.108.170	attack	firewall-block, port(s): 3838/tcp	2020-10-08 20:34:38
106.12.108.170	attackspambots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-08 12:30:50
106.12.108.170	attackspambots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-08 07:52:13
106.12.108.170	attackbots	30395/tcp 23075/tcp 19587/tcp... [2020-07-30/09-25]11pkt,11pt.(tcp)	2020-09-26 05:13:29
106.12.108.170	attackbotsspam	30395/tcp 23075/tcp 19587/tcp... [2020-07-30/09-25]11pkt,11pt.(tcp)	2020-09-25 22:09:32
106.12.108.170	attackspambots	30395/tcp 23075/tcp 19587/tcp... [2020-07-30/09-25]11pkt,11pt.(tcp)	2020-09-25 13:46:59
106.12.108.170	attack	web-1 [ssh] SSH Attack	2020-08-16 12:45:28
106.12.108.170	attack	Jul 25 12:45:50 ny01 sshd[32292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170 Jul 25 12:45:52 ny01 sshd[32292]: Failed password for invalid user andreia from 106.12.108.170 port 54926 ssh2 Jul 25 12:51:15 ny01 sshd[509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170	2020-07-26 02:17:38
106.12.108.170	attackspambots	Jul 23 23:28:00 piServer sshd[31440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170 Jul 23 23:28:02 piServer sshd[31440]: Failed password for invalid user testuser from 106.12.108.170 port 39524 ssh2 Jul 23 23:32:24 piServer sshd[31908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170 ...	2020-07-24 05:41:17
106.12.108.170	attack	2020-06-14T05:26:09.014403shield sshd\[7535\]: Invalid user admin from 106.12.108.170 port 55486 2020-06-14T05:26:09.018451shield sshd\[7535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170 2020-06-14T05:26:11.319271shield sshd\[7535\]: Failed password for invalid user admin from 106.12.108.170 port 55486 ssh2 2020-06-14T05:29:14.463051shield sshd\[8027\]: Invalid user thuannd9 from 106.12.108.170 port 53820 2020-06-14T05:29:14.465809shield sshd\[8027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170	2020-06-14 17:56:39
106.12.108.170	attackspambots	3x Failed Password	2020-06-04 19:26:05
106.12.108.170	attackbots	May 16 04:54:22 vpn01 sshd[32683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170 May 16 04:54:25 vpn01 sshd[32683]: Failed password for invalid user zm from 106.12.108.170 port 36220 ssh2 ...	2020-05-16 12:55:22
106.12.108.170	attackspam	SSH Invalid Login	2020-05-12 07:42:32
106.12.108.170	attackbotsspam	May 11 03:35:55 gw1 sshd[25318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.170 May 11 03:35:57 gw1 sshd[25318]: Failed password for invalid user job from 106.12.108.170 port 53204 ssh2 ...	2020-05-11 06:57:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.108.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28660
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.108.208.			IN	A

;; AUTHORITY SECTION:
.			553	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102301 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 24 06:16:56 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 208.108.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 208.108.12.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.212.249.228	attack	SSH bruteforce	2019-12-21 13:05:35
183.48.33.194	attackspambots	Dec 21 05:52:14 loxhost sshd\[22912\]: Invalid user openerp from 183.48.33.194 port 44866 Dec 21 05:52:14 loxhost sshd\[22912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.33.194 Dec 21 05:52:16 loxhost sshd\[22912\]: Failed password for invalid user openerp from 183.48.33.194 port 44866 ssh2 Dec 21 05:58:59 loxhost sshd\[23159\]: Invalid user emelda from 183.48.33.194 port 43500 Dec 21 05:58:59 loxhost sshd\[23159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.48.33.194 ...	2019-12-21 13:06:26
80.82.77.212	attack	RPC Portmapper DUMP Request Detected	2019-12-21 13:29:21
2.179.254.98	attack	firewall-block, port(s): 23/tcp	2019-12-21 13:07:48
62.94.208.113	attackbotsspam	B: f2b ssh aggressive 3x	2019-12-21 13:10:01
182.53.132.102	attack	Unauthorized connection attempt from IP address 182.53.132.102 on Port 445(SMB)	2019-12-21 09:25:26
180.251.230.94	attackbotsspam	Unauthorized connection attempt from IP address 180.251.230.94 on Port 445(SMB)	2019-12-21 09:28:06
139.59.86.171	attackbots	Dec 20 19:10:38 sachi sshd\[4602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.86.171 user=sshd Dec 20 19:10:40 sachi sshd\[4602\]: Failed password for sshd from 139.59.86.171 port 51420 ssh2 Dec 20 19:16:45 sachi sshd\[5112\]: Invalid user hibler from 139.59.86.171 Dec 20 19:16:45 sachi sshd\[5112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.86.171 Dec 20 19:16:47 sachi sshd\[5112\]: Failed password for invalid user hibler from 139.59.86.171 port 56268 ssh2	2019-12-21 13:23:11
62.210.10.244	attackbots	12/20/2019-23:58:16.213026 62.210.10.244 Protocol: 17 ATTACK [PTSecurity] Cisco ASA and Cisco FTD possible DoS (CVE-2018-15454)	2019-12-21 13:35:58
122.121.176.204	attackspam	Unauthorized connection attempt detected from IP address 122.121.176.204 to port 445	2019-12-21 13:25:27
185.136.207.105	attack	" "	2019-12-21 13:24:15
106.12.24.1	attackspam	Dec 21 01:58:58 firewall sshd[30684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.24.1 Dec 21 01:58:58 firewall sshd[30684]: Invalid user avery from 106.12.24.1 Dec 21 01:59:00 firewall sshd[30684]: Failed password for invalid user avery from 106.12.24.1 port 60764 ssh2 ...	2019-12-21 13:06:42
222.186.175.169	attackbotsspam	Brute-force attempt banned	2019-12-21 13:27:43
222.186.175.220	attackspam	Dec 21 06:27:07 nextcloud sshd\[16955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220 user=root Dec 21 06:27:09 nextcloud sshd\[16955\]: Failed password for root from 222.186.175.220 port 53700 ssh2 Dec 21 06:27:18 nextcloud sshd\[16955\]: Failed password for root from 222.186.175.220 port 53700 ssh2 ...	2019-12-21 13:33:43
181.52.121.54	attack	Dec 21 05:59:04 grey postfix/smtpd\[23754\]: NOQUEUE: reject: RCPT from unknown\[181.52.121.54\]: 554 5.7.1 Service unavailable\; Client host \[181.52.121.54\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?181.52.121.54\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-21 13:01:12

Recently Reported IPs

250.33.40.96	23.16.68.116	95.28.246.203	132.11.205.181
181.220.251.193	169.218.158.64	173.222.46.71	148.173.173.15
63.200.182.24	243.109.74.95	100.162.98.181	103.131.189.196
51.68.28.15	24.164.185.95	245.140.179.194	220.179.68.246
94.162.68.145	211.185.117.36	1.214.227.16	178.150.122.160