Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:
Type Details Datetime
attack
2020-05-26T14:38:59.062339  sshd[20443]: Invalid user uplink from 106.12.80.138 port 57132
2020-05-26T14:38:59.077545  sshd[20443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-05-26T14:38:59.062339  sshd[20443]: Invalid user uplink from 106.12.80.138 port 57132
2020-05-26T14:39:00.517458  sshd[20443]: Failed password for invalid user uplink from 106.12.80.138 port 57132 ssh2
...
2020-05-26 21:21:05
attackspam
2020-05-14T14:20:11.1675111240 sshd\[2038\]: Invalid user support from 106.12.80.138 port 47392
2020-05-14T14:20:11.1723681240 sshd\[2038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-05-14T14:20:13.1762671240 sshd\[2038\]: Failed password for invalid user support from 106.12.80.138 port 47392 ssh2
...
2020-05-15 04:09:14
attack
May  8 04:58:25 pi sshd[16206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138 
May  8 04:58:27 pi sshd[16206]: Failed password for invalid user ghost from 106.12.80.138 port 33596 ssh2
2020-05-08 12:32:42
attackspam
May  5 01:14:26 haigwepa sshd[1796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138 
May  5 01:14:28 haigwepa sshd[1796]: Failed password for invalid user sm from 106.12.80.138 port 45738 ssh2
...
2020-05-05 07:22:45
attackspambots
2020-04-21T03:52:16.895090abusebot.cloudsearch.cf sshd[4800]: Invalid user oracle from 106.12.80.138 port 42120
2020-04-21T03:52:16.900642abusebot.cloudsearch.cf sshd[4800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-04-21T03:52:16.895090abusebot.cloudsearch.cf sshd[4800]: Invalid user oracle from 106.12.80.138 port 42120
2020-04-21T03:52:18.599970abusebot.cloudsearch.cf sshd[4800]: Failed password for invalid user oracle from 106.12.80.138 port 42120 ssh2
2020-04-21T03:57:37.069271abusebot.cloudsearch.cf sshd[5117]: Invalid user rz from 106.12.80.138 port 50160
2020-04-21T03:57:37.075008abusebot.cloudsearch.cf sshd[5117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-04-21T03:57:37.069271abusebot.cloudsearch.cf sshd[5117]: Invalid user rz from 106.12.80.138 port 50160
2020-04-21T03:57:38.844263abusebot.cloudsearch.cf sshd[5117]: Failed password for invalid user 
...
2020-04-21 12:09:37
attackspambots
Invalid user admin from 106.12.80.138 port 49470
2020-04-21 02:06:18
attackbotsspam
Invalid user kd from 106.12.80.138 port 60674
2020-04-04 00:47:49
attackspam
Fail2Ban Ban Triggered
2020-03-27 06:15:15
attackspambots
Mar  3 22:18:34 jane sshd[1331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138 
Mar  3 22:18:35 jane sshd[1331]: Failed password for invalid user william from 106.12.80.138 port 33246 ssh2
...
2020-03-04 05:24:48
attackspambots
Mar  1 05:06:51 marvibiene sshd[48263]: Invalid user usuario from 106.12.80.138 port 51094
Mar  1 05:06:51 marvibiene sshd[48263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
Mar  1 05:06:51 marvibiene sshd[48263]: Invalid user usuario from 106.12.80.138 port 51094
Mar  1 05:06:53 marvibiene sshd[48263]: Failed password for invalid user usuario from 106.12.80.138 port 51094 ssh2
...
2020-03-01 20:13:32
attackspam
SSH invalid-user multiple login try
2020-02-29 04:56:16
attackspambots
Feb 22 00:37:24 [host] sshd[25493]: Invalid user s
Feb 22 00:37:24 [host] sshd[25493]: pam_unix(sshd:
Feb 22 00:37:26 [host] sshd[25493]: Failed passwor
2020-02-22 07:59:36
attackspam
Feb  9 06:55:14 silence02 sshd[408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
Feb  9 06:55:17 silence02 sshd[408]: Failed password for invalid user dtp from 106.12.80.138 port 55198 ssh2
Feb  9 06:58:39 silence02 sshd[597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
2020-02-09 14:14:07
attack
Jan  7 23:18:59 MK-Soft-VM5 sshd[13773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138 
Jan  7 23:19:02 MK-Soft-VM5 sshd[13773]: Failed password for invalid user fabian from 106.12.80.138 port 36596 ssh2
...
2020-01-08 07:37:30
attack
Invalid user backup from 106.12.80.138 port 60034
2020-01-02 07:11:25
attack
SSH auth scanning - multiple failed logins
2019-12-25 15:34:16
attackbots
Invalid user juoniah from 106.12.80.138 port 59144
2019-12-15 04:17:12
attackspambots
Dec  9 23:52:03 ArkNodeAT sshd\[26182\]: Invalid user justin from 106.12.80.138
Dec  9 23:52:03 ArkNodeAT sshd\[26182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.138
Dec  9 23:52:05 ArkNodeAT sshd\[26182\]: Failed password for invalid user justin from 106.12.80.138 port 60656 ssh2
2019-12-10 06:57:20
Comments on same subnet:
IP Type Details Datetime
106.12.80.246 attack
Port scan denied
2020-08-24 14:17:24
106.12.80.246 attackbotsspam
2020-08-18T00:22:54.551625vps773228.ovh.net sshd[5721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
2020-08-18T00:22:54.534006vps773228.ovh.net sshd[5721]: Invalid user guest from 106.12.80.246 port 16588
2020-08-18T00:22:56.213108vps773228.ovh.net sshd[5721]: Failed password for invalid user guest from 106.12.80.246 port 16588 ssh2
2020-08-18T00:28:46.461957vps773228.ovh.net sshd[5820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246  user=root
2020-08-18T00:28:48.449410vps773228.ovh.net sshd[5820]: Failed password for root from 106.12.80.246 port 19193 ssh2
...
2020-08-18 07:28:52
106.12.80.246 attack
Port scan denied
2020-08-14 14:32:29
106.12.80.62 attackbotsspam
1596055655 - 07/30/2020 03:47:35 Host: 106.12.80.62/106.12.80.62 Port: 6379 TCP Blocked
...
2020-07-30 06:10:14
106.12.80.246 attack
Invalid user nuevo from 106.12.80.246 port 17941
2020-06-21 18:14:34
106.12.80.246 attackspam
SASL PLAIN auth failed: ruser=...
2020-06-06 06:45:47
106.12.80.246 attack
May 16 04:41:23 PorscheCustomer sshd[22082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
May 16 04:41:25 PorscheCustomer sshd[22082]: Failed password for invalid user test from 106.12.80.246 port 63341 ssh2
May 16 04:46:44 PorscheCustomer sshd[22277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
...
2020-05-16 19:24:23
106.12.80.246 attack
$f2bV_matches
2020-05-14 18:31:34
106.12.80.246 attack
$f2bV_matches
2020-05-12 13:55:55
106.12.80.246 attackspam
May  8 16:15:28 dev0-dcde-rnet sshd[27599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
May  8 16:15:30 dev0-dcde-rnet sshd[27599]: Failed password for invalid user deb from 106.12.80.246 port 38886 ssh2
May  8 16:21:35 dev0-dcde-rnet sshd[27647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
2020-05-08 22:54:39
106.12.80.246 attackspam
Mar 30 00:18:29 h2779839 sshd[17514]: Invalid user ddo from 106.12.80.246 port 9480
Mar 30 00:18:29 h2779839 sshd[17514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
Mar 30 00:18:29 h2779839 sshd[17514]: Invalid user ddo from 106.12.80.246 port 9480
Mar 30 00:18:31 h2779839 sshd[17514]: Failed password for invalid user ddo from 106.12.80.246 port 9480 ssh2
Mar 30 00:21:20 h2779839 sshd[17592]: Invalid user sam from 106.12.80.246 port 46620
Mar 30 00:21:20 h2779839 sshd[17592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
Mar 30 00:21:20 h2779839 sshd[17592]: Invalid user sam from 106.12.80.246 port 46620
Mar 30 00:21:22 h2779839 sshd[17592]: Failed password for invalid user sam from 106.12.80.246 port 46620 ssh2
Mar 30 00:24:14 h2779839 sshd[17672]: Invalid user oracle from 106.12.80.246 port 27259
...
2020-03-30 06:25:59
106.12.80.246 attackspam
SSH login attempts.
2020-03-27 22:34:13
106.12.80.246 attack
(sshd) Failed SSH login from 106.12.80.246 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 25 13:48:31 amsweb01 sshd[15051]: Invalid user cha from 106.12.80.246 port 10359
Mar 25 13:48:33 amsweb01 sshd[15051]: Failed password for invalid user cha from 106.12.80.246 port 10359 ssh2
Mar 25 14:02:43 amsweb01 sshd[17077]: Invalid user test from 106.12.80.246 port 54571
Mar 25 14:02:46 amsweb01 sshd[17077]: Failed password for invalid user test from 106.12.80.246 port 54571 ssh2
Mar 25 14:06:44 amsweb01 sshd[17513]: Invalid user cpanelconnecttrack from 106.12.80.246 port 46810
2020-03-26 01:00:31
106.12.80.246 attackbots
Mar 18 23:44:50 OPSO sshd\[29175\]: Invalid user couchdb from 106.12.80.246 port 16801
Mar 18 23:44:50 OPSO sshd\[29175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
Mar 18 23:44:52 OPSO sshd\[29175\]: Failed password for invalid user couchdb from 106.12.80.246 port 16801 ssh2
Mar 18 23:50:04 OPSO sshd\[30286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246  user=root
Mar 18 23:50:06 OPSO sshd\[30286\]: Failed password for root from 106.12.80.246 port 27084 ssh2
2020-03-19 06:51:35
106.12.80.246 attack
Mar 11 05:13:07 vps647732 sshd[20524]: Failed password for root from 106.12.80.246 port 28036 ssh2
Mar 11 05:15:45 vps647732 sshd[20582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.80.246
...
2020-03-11 14:01:27
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.80.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9324
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.80.138.			IN	A

;; AUTHORITY SECTION:
.			546	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120902 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 06:57:17 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 138.80.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.80.12.106.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
218.92.0.158 attackbotsspam
Sep 23 22:03:17 game-panel sshd[6311]: Failed password for root from 218.92.0.158 port 10371 ssh2
Sep 23 22:03:30 game-panel sshd[6311]: error: maximum authentication attempts exceeded for root from 218.92.0.158 port 10371 ssh2 [preauth]
Sep 23 22:03:35 game-panel sshd[6318]: Failed password for root from 218.92.0.158 port 38463 ssh2
2019-09-24 08:08:04
117.247.179.119 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2019-09-24 08:00:08
115.84.92.204 attack
Sep 23 23:07:37 dev sshd\[24172\]: Invalid user admin from 115.84.92.204 port 55952
Sep 23 23:07:37 dev sshd\[24172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.84.92.204
Sep 23 23:07:39 dev sshd\[24172\]: Failed password for invalid user admin from 115.84.92.204 port 55952 ssh2
2019-09-24 08:33:09
14.50.226.23 attack
Honeypot attack, port: 5555, PTR: PTR record not found
2019-09-24 08:07:50
220.134.173.132 attackbots
Honeypot attack, port: 23, PTR: 220-134-173-132.HINET-IP.hinet.net.
2019-09-24 08:17:46
183.253.20.205 attack
$f2bV_matches
2019-09-24 08:16:37
95.91.225.194 attackspam
2019-09-23 18:45:40 H=ip5f5be1m3.dynamic.kabel-deutschland.de [95.91.225.194]:25143 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=95.91.225.194)
2019-09-23 18:45:40 unexpected disconnection while reading SMTP command from ip5f5be1m3.dynamic.kabel-deutschland.de [95.91.225.194]:25143 I=[10.100.18.25]:25 (error: Connection reset by peer)
2019-09-23 19:01:58 H=ip5f5be1m3.dynamic.kabel-deutschland.de [95.91.225.194]:25214 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=95.91.225.194)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=95.91.225.194
2019-09-24 08:10:58
23.244.78.138 attack
Port Scan: TCP/445
2019-09-24 08:31:45
195.16.41.171 attackspam
2019-09-24T00:07:57.136054abusebot-5.cloudsearch.cf sshd\[2929\]: Invalid user wb from 195.16.41.171 port 38062
2019-09-24 08:09:18
89.234.156.185 attackspambots
2019-09-24T00:24:49.401824abusebot-4.cloudsearch.cf sshd\[29929\]: Invalid user caratvodka from 89.234.156.185 port 60528
2019-09-24 08:30:41
148.70.23.131 attack
Sep 24 01:10:07 jane sshd[32425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.23.131 
Sep 24 01:10:09 jane sshd[32425]: Failed password for invalid user vagrant from 148.70.23.131 port 45909 ssh2
...
2019-09-24 08:05:13
47.74.231.192 attackspambots
Sep 23 23:43:35 web8 sshd\[1824\]: Invalid user wsxedc from 47.74.231.192
Sep 23 23:43:35 web8 sshd\[1824\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.231.192
Sep 23 23:43:37 web8 sshd\[1824\]: Failed password for invalid user wsxedc from 47.74.231.192 port 53682 ssh2
Sep 23 23:47:59 web8 sshd\[3915\]: Invalid user 53cur17y from 47.74.231.192
Sep 23 23:47:59 web8 sshd\[3915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.231.192
2019-09-24 08:31:11
106.12.86.240 attackbots
Sep 23 23:40:02 game-panel sshd[9779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.86.240
Sep 23 23:40:05 game-panel sshd[9779]: Failed password for invalid user c from 106.12.86.240 port 56832 ssh2
Sep 23 23:45:54 game-panel sshd[9941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.86.240
2019-09-24 08:01:15
36.234.196.67 attackbots
23/tcp
[2019-09-23]1pkt
2019-09-24 08:06:47
183.15.177.246 attack
[portscan] Port scan
2019-09-24 08:19:19

Recently Reported IPs

36.229.97.205 113.22.150.136 78.84.187.202 252.182.180.206
14.169.253.142 179.23.97.242 188.162.187.116 190.72.18.243
182.61.1.64 123.21.207.135 120.31.160.66 59.63.178.26
187.114.145.244 14.232.105.12 180.251.40.202 205.169.224.69
124.115.173.253 208.26.81.99 182.149.165.37 89.248.162.161