Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspam
Feb  6 00:51:17 server sshd\[28580\]: Invalid user oot from 106.12.48.138
Feb  6 00:51:17 server sshd\[28580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 
Feb  6 00:51:20 server sshd\[28580\]: Failed password for invalid user oot from 106.12.48.138 port 48870 ssh2
Feb  6 01:24:19 server sshd\[1929\]: Invalid user ql from 106.12.48.138
Feb  6 01:24:19 server sshd\[1929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 
...
2020-02-06 08:10:33
attackbotsspam
2020-01-10T23:39:38.9041301495-001 sshd[6414]: Invalid user vnb from 106.12.48.138 port 37292
2020-01-10T23:39:38.9124691495-001 sshd[6414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138
2020-01-10T23:39:38.9041301495-001 sshd[6414]: Invalid user vnb from 106.12.48.138 port 37292
2020-01-10T23:39:41.3699321495-001 sshd[6414]: Failed password for invalid user vnb from 106.12.48.138 port 37292 ssh2
2020-01-10T23:42:48.9563001495-001 sshd[6495]: Invalid user aqi from 106.12.48.138 port 37498
2020-01-10T23:42:48.9595551495-001 sshd[6495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138
2020-01-10T23:42:48.9563001495-001 sshd[6495]: Invalid user aqi from 106.12.48.138 port 37498
2020-01-10T23:42:51.1658341495-001 sshd[6495]: Failed password for invalid user aqi from 106.12.48.138 port 37498 ssh2
2020-01-10T23:45:52.5219401495-001 sshd[6606]: Invalid user klb from 106.12.48.138 port 
...
2020-01-11 13:55:35
attack
2020-01-10T05:48:55.141531  sshd[23540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138  user=root
2020-01-10T05:48:56.846944  sshd[23540]: Failed password for root from 106.12.48.138 port 60068 ssh2
2020-01-10T05:52:04.826107  sshd[23581]: Invalid user tzs from 106.12.48.138 port 54878
2020-01-10T05:52:04.841887  sshd[23581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138
2020-01-10T05:52:04.826107  sshd[23581]: Invalid user tzs from 106.12.48.138 port 54878
2020-01-10T05:52:06.828187  sshd[23581]: Failed password for invalid user tzs from 106.12.48.138 port 54878 ssh2
...
2020-01-10 17:09:48
attackbots
Dec 26 09:26:24 IngegnereFirenze sshd[27645]: Failed password for invalid user tihanyi from 106.12.48.138 port 42714 ssh2
...
2019-12-26 21:33:03
attack
Invalid user lasell from 106.12.48.138 port 44004
2019-12-18 21:40:23
attackbots
F2B jail: sshd. Time: 2019-12-10 08:34:36, Reported by: VKReport
2019-12-10 15:45:16
Comments on same subnet:
IP Type Details Datetime
106.12.48.216 attack
Jun 20 22:15:57 zulu412 sshd\[32143\]: Invalid user monitor from 106.12.48.216 port 42510
Jun 20 22:15:57 zulu412 sshd\[32143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.216
Jun 20 22:16:00 zulu412 sshd\[32143\]: Failed password for invalid user monitor from 106.12.48.216 port 42510 ssh2
...
2020-06-21 04:37:43
106.12.48.216 attackbotsspam
Failed password for invalid user webster from 106.12.48.216 port 58952 ssh2
2020-06-16 18:47:04
106.12.48.216 attack
Jun 15 06:23:10 vps639187 sshd\[15653\]: Invalid user apache from 106.12.48.216 port 45924
Jun 15 06:23:10 vps639187 sshd\[15653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.216
Jun 15 06:23:12 vps639187 sshd\[15653\]: Failed password for invalid user apache from 106.12.48.216 port 45924 ssh2
...
2020-06-15 17:15:25
106.12.48.217 attackspam
2020-06-10T12:36:49.938655shield sshd\[14216\]: Invalid user bay from 106.12.48.217 port 39338
2020-06-10T12:36:49.941143shield sshd\[14216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217
2020-06-10T12:36:52.431442shield sshd\[14216\]: Failed password for invalid user bay from 106.12.48.217 port 39338 ssh2
2020-06-10T12:41:02.776575shield sshd\[16178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217  user=root
2020-06-10T12:41:04.664938shield sshd\[16178\]: Failed password for root from 106.12.48.217 port 57092 ssh2
2020-06-10 21:48:04
106.12.48.216 attackspam
2020-06-09T19:29:04+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-06-10 04:14:35
106.12.48.217 attackbots
Jun  6 12:46:16 game-panel sshd[11281]: Failed password for root from 106.12.48.217 port 36852 ssh2
Jun  6 12:49:05 game-panel sshd[11419]: Failed password for root from 106.12.48.217 port 45144 ssh2
2020-06-06 21:04:01
106.12.48.216 attackspam
Brute-force attempt banned
2020-06-06 07:06:17
106.12.48.78 attackspambots
$f2bV_matches
2020-06-02 17:32:41
106.12.48.78 attack
Jun  1 00:33:14 vpn01 sshd[27807]: Failed password for root from 106.12.48.78 port 45140 ssh2
...
2020-06-01 06:57:17
106.12.48.217 attackbots
SSH Brute-Force reported by Fail2Ban
2020-06-01 01:55:35
106.12.48.217 attackspambots
May 30 06:39:40 web1 sshd[26874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217  user=root
May 30 06:39:41 web1 sshd[26874]: Failed password for root from 106.12.48.217 port 38248 ssh2
May 30 06:44:51 web1 sshd[28127]: Invalid user gogs from 106.12.48.217 port 40886
May 30 06:44:51 web1 sshd[28127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217
May 30 06:44:51 web1 sshd[28127]: Invalid user gogs from 106.12.48.217 port 40886
May 30 06:44:54 web1 sshd[28127]: Failed password for invalid user gogs from 106.12.48.217 port 40886 ssh2
May 30 06:48:15 web1 sshd[28959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217  user=root
May 30 06:48:17 web1 sshd[28959]: Failed password for root from 106.12.48.217 port 54772 ssh2
May 30 06:51:12 web1 sshd[29745]: Invalid user eriksmoen from 106.12.48.217 port 40432
...
2020-05-30 04:56:54
106.12.48.78 attackspambots
May 29 06:08:19 srv-ubuntu-dev3 sshd[35402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78  user=root
May 29 06:08:22 srv-ubuntu-dev3 sshd[35402]: Failed password for root from 106.12.48.78 port 44472 ssh2
May 29 06:11:37 srv-ubuntu-dev3 sshd[35928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78  user=root
May 29 06:11:39 srv-ubuntu-dev3 sshd[35928]: Failed password for root from 106.12.48.78 port 59398 ssh2
May 29 06:15:02 srv-ubuntu-dev3 sshd[36482]: Invalid user apache from 106.12.48.78
May 29 06:15:02 srv-ubuntu-dev3 sshd[36482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78
May 29 06:15:02 srv-ubuntu-dev3 sshd[36482]: Invalid user apache from 106.12.48.78
May 29 06:15:04 srv-ubuntu-dev3 sshd[36482]: Failed password for invalid user apache from 106.12.48.78 port 46106 ssh2
May 29 06:18:10 srv-ubuntu-dev3 sshd[37075]: pa
...
2020-05-29 12:45:22
106.12.48.216 attackbotsspam
2020-05-27 14:41:50 server sshd[61577]: Failed password for invalid user root from 106.12.48.216 port 45738 ssh2
2020-05-29 02:13:59
106.12.48.216 attack
$f2bV_matches
2020-05-26 14:47:56
106.12.48.78 attackspambots
May 23 22:15:05 sso sshd[30657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78
May 23 22:15:07 sso sshd[30657]: Failed password for invalid user npd from 106.12.48.78 port 33692 ssh2
...
2020-05-24 05:24:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.48.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50032
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.48.138.			IN	A

;; AUTHORITY SECTION:
.			306	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121000 1800 900 604800 86400

;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 15:45:07 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 138.48.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.48.12.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
84.51.56.123 attack
email spam
2019-12-17 16:29:58
195.206.4.16 attackspam
email spam
2019-12-17 16:19:50
106.242.204.100 attackspam
email spam
2019-12-17 16:53:24
91.197.135.132 attackspam
email spam
2019-12-17 16:29:11
14.42.164.163 attackbotsspam
email spam
2019-12-17 16:35:51
45.143.98.162 attack
email spam
2019-12-17 16:33:36
41.215.77.54 attackbotsspam
email spam
2019-12-17 16:34:16
208.186.113.232 attackbots
email spam
2019-12-17 16:38:44
85.175.99.105 attackbots
proto=tcp  .  spt=51871  .  dpt=25  .     (Listed on    MailSpike (spam wave plus L3-L5) also unsubscore and rbldns-ru)     (279)
2019-12-17 16:29:45
209.61.151.246 attackspambots
email spam
2019-12-17 16:38:27
91.239.18.172 attackspambots
email spam
2019-12-17 16:28:57
77.48.230.248 attackspambots
Absender hat Spam-Falle ausgel?st
2019-12-17 16:30:54
217.112.128.188 attackbots
email spam
2019-12-17 16:36:25
103.81.114.182 attack
email spam
2019-12-17 16:55:06
62.33.103.24 attack
email spam
2019-12-17 16:31:21

Recently Reported IPs

141.88.116.60 211.181.112.78 49.85.46.31 215.246.159.151
22.204.101.9 167.162.19.238 126.57.205.2 176.40.252.214
249.74.51.95 229.243.147.140 138.49.252.36 25.100.13.113
13.240.200.65 31.227.225.168 11.197.167.119 45.137.54.8
86.163.56.244 14.193.33.60 56.185.69.191 85.10.167.252