Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: Beijing

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attackspambots
reported through recidive - multiple failed attempts(SSH)
2020-06-07 07:02:30
attack
Brute-force attempt banned
2020-06-04 17:30:48
attackspam
May 25 22:11:56 vserver sshd\[28163\]: Failed password for root from 106.12.74.141 port 52706 ssh2May 25 22:15:08 vserver sshd\[28185\]: Invalid user zaleski from 106.12.74.141May 25 22:15:10 vserver sshd\[28185\]: Failed password for invalid user zaleski from 106.12.74.141 port 37962 ssh2May 25 22:18:22 vserver sshd\[28220\]: Failed password for root from 106.12.74.141 port 51470 ssh2
...
2020-05-26 06:34:41
attack
May 23 00:04:00 vps687878 sshd\[1601\]: Failed password for invalid user sng from 106.12.74.141 port 52210 ssh2
May 23 00:06:43 vps687878 sshd\[2031\]: Invalid user wbd from 106.12.74.141 port 36344
May 23 00:06:43 vps687878 sshd\[2031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
May 23 00:06:45 vps687878 sshd\[2031\]: Failed password for invalid user wbd from 106.12.74.141 port 36344 ssh2
May 23 00:09:36 vps687878 sshd\[2338\]: Invalid user iwq from 106.12.74.141 port 48712
May 23 00:09:36 vps687878 sshd\[2338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
...
2020-05-23 06:11:24
attackbots
May 13 15:30:12 pkdns2 sshd\[17685\]: Failed password for root from 106.12.74.141 port 53982 ssh2May 13 15:31:40 pkdns2 sshd\[17749\]: Invalid user test from 106.12.74.141May 13 15:31:42 pkdns2 sshd\[17749\]: Failed password for invalid user test from 106.12.74.141 port 42686 ssh2May 13 15:33:23 pkdns2 sshd\[17845\]: Failed password for root from 106.12.74.141 port 60034 ssh2May 13 15:35:05 pkdns2 sshd\[17912\]: Invalid user admin from 106.12.74.141May 13 15:35:07 pkdns2 sshd\[17912\]: Failed password for invalid user admin from 106.12.74.141 port 49456 ssh2
...
2020-05-14 01:16:38
attackbotsspam
SSH Invalid Login
2020-05-07 07:21:20
attack
Apr  9 18:29:00 sshgateway sshd\[3016\]: Invalid user git-administrator2 from 106.12.74.141
Apr  9 18:29:00 sshgateway sshd\[3016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
Apr  9 18:29:02 sshgateway sshd\[3016\]: Failed password for invalid user git-administrator2 from 106.12.74.141 port 60076 ssh2
2020-04-10 05:04:18
attackbotsspam
2020-03-28T23:02:55.944244linuxbox-skyline sshd[56689]: Invalid user reynold from 106.12.74.141 port 60646
...
2020-03-29 13:36:51
attack
Mar 26 13:52:58 itv-usvr-01 sshd[2411]: Invalid user ifconfig from 106.12.74.141
Mar 26 13:52:58 itv-usvr-01 sshd[2411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
Mar 26 13:52:58 itv-usvr-01 sshd[2411]: Invalid user ifconfig from 106.12.74.141
Mar 26 13:53:00 itv-usvr-01 sshd[2411]: Failed password for invalid user ifconfig from 106.12.74.141 port 49592 ssh2
Mar 26 13:57:21 itv-usvr-01 sshd[2597]: Invalid user victoriano from 106.12.74.141
2020-03-28 02:14:50
attack
2020-03-05T06:18:16.100833abusebot-8.cloudsearch.cf sshd[11861]: Invalid user confluence from 106.12.74.141 port 35484
2020-03-05T06:18:16.110289abusebot-8.cloudsearch.cf sshd[11861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
2020-03-05T06:18:16.100833abusebot-8.cloudsearch.cf sshd[11861]: Invalid user confluence from 106.12.74.141 port 35484
2020-03-05T06:18:18.627025abusebot-8.cloudsearch.cf sshd[11861]: Failed password for invalid user confluence from 106.12.74.141 port 35484 ssh2
2020-03-05T06:28:01.071177abusebot-8.cloudsearch.cf sshd[12353]: Invalid user aron from 106.12.74.141 port 43638
2020-03-05T06:28:01.079958abusebot-8.cloudsearch.cf sshd[12353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
2020-03-05T06:28:01.071177abusebot-8.cloudsearch.cf sshd[12353]: Invalid user aron from 106.12.74.141 port 43638
2020-03-05T06:28:02.904520abusebot-8.cloudsearch.cf sshd[1
...
2020-03-05 15:19:28
attackbotsspam
2020-02-28T04:22:40.404159luisaranguren sshd[1939559]: Invalid user user22 from 106.12.74.141 port 33954
2020-02-28T04:22:42.384393luisaranguren sshd[1939559]: Failed password for invalid user user22 from 106.12.74.141 port 33954 ssh2
...
2020-02-28 04:23:19
attackspam
Invalid user tvm from 106.12.74.141
2020-02-13 10:23:00
attack
2020-02-11T23:39:53.4569341495-001 sshd[36146]: Invalid user martin1 from 106.12.74.141 port 45036
2020-02-11T23:39:53.4600301495-001 sshd[36146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
2020-02-11T23:39:53.4569341495-001 sshd[36146]: Invalid user martin1 from 106.12.74.141 port 45036
2020-02-11T23:39:55.1923111495-001 sshd[36146]: Failed password for invalid user martin1 from 106.12.74.141 port 45036 ssh2
2020-02-11T23:42:15.1235401495-001 sshd[36254]: Invalid user dnsadrc from 106.12.74.141 port 60342
2020-02-11T23:42:15.1265841495-001 sshd[36254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
2020-02-11T23:42:15.1235401495-001 sshd[36254]: Invalid user dnsadrc from 106.12.74.141 port 60342
2020-02-11T23:42:17.3553381495-001 sshd[36254]: Failed password for invalid user dnsadrc from 106.12.74.141 port 60342 ssh2
2020-02-11T23:44:52.0450151495-001 sshd[36411]: Invalid 
...
2020-02-12 13:32:48
attack
$f2bV_matches
2020-02-10 23:56:18
attackspam
Feb  8 13:17:13 sachi sshd\[8066\]: Invalid user wyw from 106.12.74.141
Feb  8 13:17:13 sachi sshd\[8066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
Feb  8 13:17:15 sachi sshd\[8066\]: Failed password for invalid user wyw from 106.12.74.141 port 33770 ssh2
Feb  8 13:20:26 sachi sshd\[8299\]: Invalid user ism from 106.12.74.141
Feb  8 13:20:26 sachi sshd\[8299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
2020-02-09 07:35:21
attack
Unauthorized connection attempt detected from IP address 106.12.74.141 to port 2220 [J]
2020-01-13 06:30:12
attackspam
Invalid user nd from 106.12.74.141 port 48526
2020-01-10 23:17:29
attack
Invalid user rosalia from 106.12.74.141 port 48098
2019-12-24 16:28:29
attackspam
Dec 23 20:27:28 web9 sshd\[14691\]: Invalid user elena123 from 106.12.74.141
Dec 23 20:27:28 web9 sshd\[14691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
Dec 23 20:27:31 web9 sshd\[14691\]: Failed password for invalid user elena123 from 106.12.74.141 port 39638 ssh2
Dec 23 20:30:36 web9 sshd\[15101\]: Invalid user dejade from 106.12.74.141
Dec 23 20:30:36 web9 sshd\[15101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
2019-12-24 14:58:28
attackbotsspam
SSH invalid-user multiple login try
2019-12-19 07:16:50
attackspambots
$f2bV_matches
2019-12-14 06:02:10
attackspambots
Dec 13 09:56:43 loxhost sshd\[6196\]: Invalid user sajimin from 106.12.74.141 port 45896
Dec 13 09:56:43 loxhost sshd\[6196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
Dec 13 09:56:46 loxhost sshd\[6196\]: Failed password for invalid user sajimin from 106.12.74.141 port 45896 ssh2
Dec 13 10:03:47 loxhost sshd\[6373\]: Invalid user jarka from 106.12.74.141 port 44148
Dec 13 10:03:47 loxhost sshd\[6373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
...
2019-12-13 20:25:31
attackspambots
Dec 12 11:59:29 mail sshd[18897]: Invalid user nfs from 106.12.74.141
Dec 12 11:59:29 mail sshd[18897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141
Dec 12 11:59:29 mail sshd[18897]: Invalid user nfs from 106.12.74.141
Dec 12 11:59:31 mail sshd[18897]: Failed password for invalid user nfs from 106.12.74.141 port 47714 ssh2
Dec 12 12:12:38 mail sshd[21685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141  user=dovecot
Dec 12 12:12:40 mail sshd[21685]: Failed password for dovecot from 106.12.74.141 port 45350 ssh2
...
2019-12-12 19:44:15
attack
Dec 10 20:01:30 zeus sshd[32411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141 
Dec 10 20:01:32 zeus sshd[32411]: Failed password for invalid user johnson from 106.12.74.141 port 50930 ssh2
Dec 10 20:07:26 zeus sshd[32635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.141 
Dec 10 20:07:28 zeus sshd[32635]: Failed password for invalid user advidpro from 106.12.74.141 port 51758 ssh2
2019-12-11 05:02:37
Comments on same subnet:
IP Type Details Datetime
106.12.74.99 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 96 - port: 8713 proto: tcp cat: Misc Attackbytes: 60
2020-09-24 03:23:58
106.12.74.99 attack
firewall-block, port(s): 8713/tcp
2020-09-23 19:34:58
106.12.74.23 attackbotsspam
Sep  6 11:54:43 ns3033917 sshd[1224]: Failed password for invalid user wangxue from 106.12.74.23 port 59472 ssh2
Sep  6 11:59:19 ns3033917 sshd[1256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.23  user=root
Sep  6 11:59:21 ns3033917 sshd[1256]: Failed password for root from 106.12.74.23 port 40560 ssh2
...
2020-09-06 20:55:21
106.12.74.23 attackbots
Sep  6 06:29:22 sso sshd[27532]: Failed password for root from 106.12.74.23 port 36004 ssh2
...
2020-09-06 12:33:40
106.12.74.23 attackbotsspam
Sep  5 21:57:35 vmd36147 sshd[31416]: Failed password for root from 106.12.74.23 port 46730 ssh2
Sep  5 22:03:05 vmd36147 sshd[1898]: Failed password for root from 106.12.74.23 port 48026 ssh2
...
2020-09-06 04:54:35
106.12.74.99 attackbots
Aug 26 16:40:07 pve1 sshd[11305]: Failed password for root from 106.12.74.99 port 59536 ssh2
Aug 26 16:45:17 pve1 sshd[13483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.99 
...
2020-08-27 01:46:47
106.12.74.23 attack
$f2bV_matches
2020-08-22 00:10:30
106.12.74.99 attackbotsspam
Aug 20 06:36:32 Invalid user gok from 106.12.74.99 port 52350
2020-08-20 19:24:25
106.12.74.99 attackbotsspam
SSH Brute Force
2020-08-09 07:12:17
106.12.74.99 attackbots
Aug  4 16:44:20 logopedia-1vcpu-1gb-nyc1-01 sshd[160715]: Failed password for root from 106.12.74.99 port 39990 ssh2
...
2020-08-05 05:48:52
106.12.74.23 attackspambots
Aug  4 20:00:43 debian-2gb-nbg1-2 kernel: \[18822508.628684\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.12.74.23 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=46656 PROTO=TCP SPT=48493 DPT=7800 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-05 02:39:06
106.12.74.99 attack
2020-08-01T03:39:12.212027hostname sshd[97939]: Failed password for root from 106.12.74.99 port 44144 ssh2
2020-08-01T03:44:01.892843hostname sshd[98458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.99  user=root
2020-08-01T03:44:04.066184hostname sshd[98458]: Failed password for root from 106.12.74.99 port 52360 ssh2
...
2020-08-01 04:55:43
106.12.74.99 attack
Jul 25 17:09:13 minden010 sshd[9971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.99
Jul 25 17:09:16 minden010 sshd[9971]: Failed password for invalid user jhernandez from 106.12.74.99 port 47372 ssh2
Jul 25 17:12:50 minden010 sshd[10720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.99
...
2020-07-26 04:35:35
106.12.74.99 attackbots
$f2bV_matches
2020-07-23 19:51:04
106.12.74.99 attackspam
(sshd) Failed SSH login from 106.12.74.99 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 17 13:56:40 localhost sshd[12554]: Invalid user paulo from 106.12.74.99 port 54080
Jul 17 13:56:42 localhost sshd[12554]: Failed password for invalid user paulo from 106.12.74.99 port 54080 ssh2
Jul 17 14:11:22 localhost sshd[13543]: Invalid user mcc from 106.12.74.99 port 46994
Jul 17 14:11:25 localhost sshd[13543]: Failed password for invalid user mcc from 106.12.74.99 port 46994 ssh2
Jul 17 14:14:51 localhost sshd[13809]: Invalid user jetty from 106.12.74.99 port 60380
2020-07-18 04:25:56
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.74.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19617
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.74.141.			IN	A

;; AUTHORITY SECTION:
.			577	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121001 1800 900 604800 86400

;; Query time: 337 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 05:02:34 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 141.74.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 141.74.12.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
120.203.29.78 attackspam
(sshd) Failed SSH login from 120.203.29.78 (CN/China/-): 5 in the last 3600 secs
2020-04-13 04:58:20
81.234.28.100 attack
Unauthorized connection attempt detected from IP address 81.234.28.100 to port 23
2020-04-13 04:32:00
128.199.107.111 attackspambots
Apr 12 22:33:48 silence02 sshd[25427]: Failed password for root from 128.199.107.111 port 40746 ssh2
Apr 12 22:37:44 silence02 sshd[25742]: Failed password for root from 128.199.107.111 port 56798 ssh2
2020-04-13 04:55:22
42.116.110.155 attack
Lines containing failures of 42.116.110.155
Apr 12 22:29:12 kmh-wmh-001-nbg01 sshd[13923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155  user=mysql
Apr 12 22:29:14 kmh-wmh-001-nbg01 sshd[13923]: Failed password for mysql from 42.116.110.155 port 56410 ssh2
Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Received disconnect from 42.116.110.155 port 56410:11: Bye Bye [preauth]
Apr 12 22:29:16 kmh-wmh-001-nbg01 sshd[13923]: Disconnected from authenticating user mysql 42.116.110.155 port 56410 [preauth]
Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: Invalid user http from 42.116.110.155 port 39492
Apr 12 22:32:00 kmh-wmh-001-nbg01 sshd[14204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.110.155 
Apr 12 22:32:02 kmh-wmh-001-nbg01 sshd[14204]: Failed password for invalid user http from 42.116.110.155 port 39492 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.ht
2020-04-13 04:48:38
94.27.149.181 attackbotsspam
Unauthorized connection attempt detected from IP address 94.27.149.181 to port 81
2020-04-13 04:28:38
106.13.109.27 attackbots
2020-04-12T16:20:35.9994911495-001 sshd[12326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.109.27  user=root
2020-04-12T16:20:38.1486561495-001 sshd[12326]: Failed password for root from 106.13.109.27 port 58426 ssh2
2020-04-12T16:25:49.2073281495-001 sshd[12599]: Invalid user lightdm from 106.13.109.27 port 33080
2020-04-12T16:25:49.2104111495-001 sshd[12599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.109.27
2020-04-12T16:25:49.2073281495-001 sshd[12599]: Invalid user lightdm from 106.13.109.27 port 33080
2020-04-12T16:25:51.1331311495-001 sshd[12599]: Failed password for invalid user lightdm from 106.13.109.27 port 33080 ssh2
...
2020-04-13 04:48:52
62.221.95.225 attackbotsspam
Unauthorized connection attempt detected from IP address 62.221.95.225 to port 445
2020-04-13 04:40:18
195.123.209.73 attackbots
2020-04-12T20:37:17.502100shield sshd\[30905\]: Invalid user support from 195.123.209.73 port 52158
2020-04-12T20:37:17.506548shield sshd\[30905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.123.209.73
2020-04-12T20:37:19.544819shield sshd\[30905\]: Failed password for invalid user support from 195.123.209.73 port 52158 ssh2
2020-04-12T20:41:39.799733shield sshd\[31758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.123.209.73  user=root
2020-04-12T20:41:41.475847shield sshd\[31758\]: Failed password for root from 195.123.209.73 port 60856 ssh2
2020-04-13 04:59:59
80.24.102.133 attackspambots
Unauthorized connection attempt detected from IP address 80.24.102.133 to port 8080
2020-04-13 04:32:48
125.160.113.31 attackspambots
Unauthorized connection attempt detected from IP address 125.160.113.31 to port 445
2020-04-13 04:24:54
74.105.241.2 attackbotsspam
Unauthorized connection attempt detected from IP address 74.105.241.2 to port 8089
2020-04-13 04:36:21
62.234.186.27 attack
Apr 12 22:23:36 ns382633 sshd\[24935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.186.27  user=root
Apr 12 22:23:38 ns382633 sshd\[24935\]: Failed password for root from 62.234.186.27 port 39800 ssh2
Apr 12 22:36:16 ns382633 sshd\[27754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.186.27  user=root
Apr 12 22:36:18 ns382633 sshd\[27754\]: Failed password for root from 62.234.186.27 port 46372 ssh2
Apr 12 22:41:48 ns382633 sshd\[28924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.186.27  user=root
2020-04-13 04:52:19
58.241.203.14 attackspam
Apr 13 06:28:49 our-server-hostname postfix/smtpd[4961]: connect from unknown[58.241.203.14]
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x
Apr x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=58.241.203.14
2020-04-13 04:43:15
78.157.164.108 attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-04-13 04:35:00
94.226.189.17 attackspam
Unauthorized connection attempt detected from IP address 94.226.189.17 to port 23
2020-04-13 04:27:53

Recently Reported IPs

116.14.146.84 153.246.90.178 211.193.25.171 187.54.58.233
101.127.66.34 89.69.125.131 67.109.70.1 200.140.227.23
218.85.233.83 161.42.198.147 201.144.170.222 88.121.70.110
188.208.187.252 52.71.251.221 79.94.36.180 107.0.162.222
182.38.111.14 71.58.32.158 35.78.113.62 54.212.136.184