City: unknown
Region: unknown
Country: China
Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.
Hostname: unknown
Organization: unknown
Usage Type: Search Engine Spider
| Type | Details | Datetime |
|---|---|---|
| attackspambots | $f2bV_matches |
2020-06-02 17:32:41 |
| attack | Jun 1 00:33:14 vpn01 sshd[27807]: Failed password for root from 106.12.48.78 port 45140 ssh2 ... |
2020-06-01 06:57:17 |
| attackspambots | May 29 06:08:19 srv-ubuntu-dev3 sshd[35402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78 user=root May 29 06:08:22 srv-ubuntu-dev3 sshd[35402]: Failed password for root from 106.12.48.78 port 44472 ssh2 May 29 06:11:37 srv-ubuntu-dev3 sshd[35928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78 user=root May 29 06:11:39 srv-ubuntu-dev3 sshd[35928]: Failed password for root from 106.12.48.78 port 59398 ssh2 May 29 06:15:02 srv-ubuntu-dev3 sshd[36482]: Invalid user apache from 106.12.48.78 May 29 06:15:02 srv-ubuntu-dev3 sshd[36482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78 May 29 06:15:02 srv-ubuntu-dev3 sshd[36482]: Invalid user apache from 106.12.48.78 May 29 06:15:04 srv-ubuntu-dev3 sshd[36482]: Failed password for invalid user apache from 106.12.48.78 port 46106 ssh2 May 29 06:18:10 srv-ubuntu-dev3 sshd[37075]: pa ... |
2020-05-29 12:45:22 |
| attackspambots | May 23 22:15:05 sso sshd[30657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.78 May 23 22:15:07 sso sshd[30657]: Failed password for invalid user npd from 106.12.48.78 port 33692 ssh2 ... |
2020-05-24 05:24:35 |
| attackspambots | prod8 ... |
2020-04-09 17:09:27 |
| attackbots | k+ssh-bruteforce |
2020-04-01 13:25:14 |
| attackspambots | Invalid user bruce from 106.12.48.78 port 41102 |
2020-03-28 02:37:45 |
| attackspambots | Mar 16 23:07:42 haigwepa sshd[21482]: Failed password for root from 106.12.48.78 port 39142 ssh2 ... |
2020-03-17 07:12:45 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.48.216 | attack | Jun 20 22:15:57 zulu412 sshd\[32143\]: Invalid user monitor from 106.12.48.216 port 42510 Jun 20 22:15:57 zulu412 sshd\[32143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.216 Jun 20 22:16:00 zulu412 sshd\[32143\]: Failed password for invalid user monitor from 106.12.48.216 port 42510 ssh2 ... |
2020-06-21 04:37:43 |
| 106.12.48.216 | attackbotsspam | Failed password for invalid user webster from 106.12.48.216 port 58952 ssh2 |
2020-06-16 18:47:04 |
| 106.12.48.216 | attack | Jun 15 06:23:10 vps639187 sshd\[15653\]: Invalid user apache from 106.12.48.216 port 45924 Jun 15 06:23:10 vps639187 sshd\[15653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.216 Jun 15 06:23:12 vps639187 sshd\[15653\]: Failed password for invalid user apache from 106.12.48.216 port 45924 ssh2 ... |
2020-06-15 17:15:25 |
| 106.12.48.217 | attackspam | 2020-06-10T12:36:49.938655shield sshd\[14216\]: Invalid user bay from 106.12.48.217 port 39338 2020-06-10T12:36:49.941143shield sshd\[14216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 2020-06-10T12:36:52.431442shield sshd\[14216\]: Failed password for invalid user bay from 106.12.48.217 port 39338 ssh2 2020-06-10T12:41:02.776575shield sshd\[16178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 user=root 2020-06-10T12:41:04.664938shield sshd\[16178\]: Failed password for root from 106.12.48.217 port 57092 ssh2 |
2020-06-10 21:48:04 |
| 106.12.48.216 | attackspam | 2020-06-09T19:29:04+0000 Failed SSH Authentication/Brute Force Attack. (Server 6) |
2020-06-10 04:14:35 |
| 106.12.48.217 | attackbots | Jun 6 12:46:16 game-panel sshd[11281]: Failed password for root from 106.12.48.217 port 36852 ssh2 Jun 6 12:49:05 game-panel sshd[11419]: Failed password for root from 106.12.48.217 port 45144 ssh2 |
2020-06-06 21:04:01 |
| 106.12.48.216 | attackspam | Brute-force attempt banned |
2020-06-06 07:06:17 |
| 106.12.48.217 | attackbots | SSH Brute-Force reported by Fail2Ban |
2020-06-01 01:55:35 |
| 106.12.48.217 | attackspambots | May 30 06:39:40 web1 sshd[26874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 user=root May 30 06:39:41 web1 sshd[26874]: Failed password for root from 106.12.48.217 port 38248 ssh2 May 30 06:44:51 web1 sshd[28127]: Invalid user gogs from 106.12.48.217 port 40886 May 30 06:44:51 web1 sshd[28127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 May 30 06:44:51 web1 sshd[28127]: Invalid user gogs from 106.12.48.217 port 40886 May 30 06:44:54 web1 sshd[28127]: Failed password for invalid user gogs from 106.12.48.217 port 40886 ssh2 May 30 06:48:15 web1 sshd[28959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 user=root May 30 06:48:17 web1 sshd[28959]: Failed password for root from 106.12.48.217 port 54772 ssh2 May 30 06:51:12 web1 sshd[29745]: Invalid user eriksmoen from 106.12.48.217 port 40432 ... |
2020-05-30 04:56:54 |
| 106.12.48.216 | attackbotsspam | 2020-05-27 14:41:50 server sshd[61577]: Failed password for invalid user root from 106.12.48.216 port 45738 ssh2 |
2020-05-29 02:13:59 |
| 106.12.48.216 | attack | $f2bV_matches |
2020-05-26 14:47:56 |
| 106.12.48.216 | attack | Failed password for invalid user zpw from 106.12.48.216 port 33278 ssh2 |
2020-05-24 01:28:16 |
| 106.12.48.217 | attack | Invalid user testuser from 106.12.48.217 port 39648 |
2020-05-17 08:40:32 |
| 106.12.48.217 | attackspam | May 10 10:30:09 piServer sshd[29651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 May 10 10:30:11 piServer sshd[29651]: Failed password for invalid user yannick from 106.12.48.217 port 42458 ssh2 May 10 10:39:46 piServer sshd[30436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 ... |
2020-05-10 16:51:32 |
| 106.12.48.217 | attackbots | May 5 10:58:02 ns382633 sshd\[26690\]: Invalid user ftpuser from 106.12.48.217 port 36582 May 5 10:58:02 ns382633 sshd\[26690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 May 5 10:58:04 ns382633 sshd\[26690\]: Failed password for invalid user ftpuser from 106.12.48.217 port 36582 ssh2 May 5 11:15:41 ns382633 sshd\[30210\]: Invalid user niu from 106.12.48.217 port 56850 May 5 11:15:41 ns382633 sshd\[30210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.217 |
2020-05-06 00:04:49 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.48.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29047
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.48.78. IN A
;; AUTHORITY SECTION:
. 533 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020031601 1800 900 604800 86400
;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 17 07:12:41 CST 2020
;; MSG SIZE rcvd: 116Host 78.48.12.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 78.48.12.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.137.241.234 | attack | Port probing on unauthorized port 23 |
2020-04-24 05:56:51 |
| 151.80.61.70 | attack | Invalid user oracle from 151.80.61.70 port 50586 |
2020-04-24 06:12:53 |
| 139.217.96.76 | attack | Invalid user ew from 139.217.96.76 port 39808 |
2020-04-24 06:16:18 |
| 104.40.2.239 | attackspam | RDP Bruteforce |
2020-04-24 06:07:34 |
| 198.199.73.177 | attack | Apr 23 20:48:58 debian-2gb-nbg1-2 kernel: \[9926686.253630\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.199.73.177 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=45881 PROTO=TCP SPT=56579 DPT=27510 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-24 06:18:42 |
| 222.128.20.226 | attack | Apr 23 20:57:32 vmd17057 sshd[30875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.128.20.226 Apr 23 20:57:34 vmd17057 sshd[30875]: Failed password for invalid user manuel from 222.128.20.226 port 32832 ssh2 ... |
2020-04-24 06:11:40 |
| 213.244.123.182 | attackspam | SSH Invalid Login |
2020-04-24 06:05:17 |
| 185.43.209.19 | attackspambots | (smtpauth) Failed SMTP AUTH login from 185.43.209.19 (GB/United Kingdom/host19-209-43-185.static.arubacloud.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-23 21:10:52 login authenticator failed for (USER) [185.43.209.19]: 535 Incorrect authentication data (set_id=suzuki@artsrezayatmand.com) |
2020-04-24 05:48:25 |
| 222.186.61.115 | attackbotsspam | 1900/udp 389/udp... [2020-03-30/04-23]56pkt,1pt.(tcp),2pt.(udp) |
2020-04-24 05:58:46 |
| 104.152.52.14 | attackbotsspam | SSH brute-force attempt |
2020-04-24 05:57:33 |
| 41.221.168.167 | attackbotsspam | Invalid user dockerroot from 41.221.168.167 port 51177 |
2020-04-24 06:02:24 |
| 118.25.36.79 | attackspambots | SSH Invalid Login |
2020-04-24 05:53:51 |
| 101.78.183.226 | attackspam | Apr 23 18:37:39 tux postfix/smtpd[8270]: connect from edm01.ecfriend.com[101.78.183.226] Apr x@x Apr 23 18:37:40 tux postfix/smtpd[8270]: disconnect from edm01.ecfriend.com[101.78.183.226] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=101.78.183.226 |
2020-04-24 05:58:06 |
| 61.91.110.194 | attackspam | Lines containing failures of 61.91.110.194 Apr 23 12:33:44 penfold sshd[31977]: Did not receive identification string from 61.91.110.194 port 50297 Apr 23 12:33:44 penfold sshd[31978]: Did not receive identification string from 61.91.110.194 port 51130 Apr 23 12:33:47 penfold sshd[31987]: Invalid user user from 61.91.110.194 port 21848 Apr 23 12:33:47 penfold sshd[31988]: Invalid user user from 61.91.110.194 port 65443 Apr 23 12:33:47 penfold sshd[31987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.91.110.194 Apr 23 12:33:47 penfold sshd[31988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.91.110.194 Apr 23 12:33:49 penfold sshd[31987]: Failed password for invalid user user from 61.91.110.194 port 21848 ssh2 Apr 23 12:33:49 penfold sshd[31988]: Failed password for invalid user user from 61.91.110.194 port 65443 ssh2 Apr 23 12:33:49 penfold sshd[31988]: Connection closed by inva........ ------------------------------ |
2020-04-24 05:51:28 |
| 23.95.89.71 | attackspambots | 2020-04-24T00:03:02.187774v220200467592115444 sshd[6795]: Invalid user oracle from 23.95.89.71 port 34844 2020-04-24T00:03:02.194141v220200467592115444 sshd[6795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.95.89.71 2020-04-24T00:03:02.187774v220200467592115444 sshd[6795]: Invalid user oracle from 23.95.89.71 port 34844 2020-04-24T00:03:04.255321v220200467592115444 sshd[6795]: Failed password for invalid user oracle from 23.95.89.71 port 34844 ssh2 2020-04-24T00:03:05.843262v220200467592115444 sshd[6825]: User root from 23.95.89.71 not allowed because not listed in AllowUsers ... |
2020-04-24 06:04:11 |