106.12.98.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Search Engine Spider

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2020-05-21T08:02:45.808097abusebot-3.cloudsearch.cf sshd[32509]: Invalid user user15 from 106.12.98.42 port 48064 2020-05-21T08:02:45.814382abusebot-3.cloudsearch.cf sshd[32509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42 2020-05-21T08:02:45.808097abusebot-3.cloudsearch.cf sshd[32509]: Invalid user user15 from 106.12.98.42 port 48064 2020-05-21T08:02:47.856769abusebot-3.cloudsearch.cf sshd[32509]: Failed password for invalid user user15 from 106.12.98.42 port 48064 ssh2 2020-05-21T08:07:12.294818abusebot-3.cloudsearch.cf sshd[32767]: Invalid user iga from 106.12.98.42 port 40682 2020-05-21T08:07:12.301800abusebot-3.cloudsearch.cf sshd[32767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42 2020-05-21T08:07:12.294818abusebot-3.cloudsearch.cf sshd[32767]: Invalid user iga from 106.12.98.42 port 40682 2020-05-21T08:07:14.665100abusebot-3.cloudsearch.cf sshd[32767]: Failed passwor ...	2020-05-21 16:46:15
attack	Apr 28 15:13:28 minden010 sshd[7138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42 Apr 28 15:13:30 minden010 sshd[7138]: Failed password for invalid user hadoop from 106.12.98.42 port 52492 ssh2 Apr 28 15:21:10 minden010 sshd[10682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42 ...	2020-04-28 23:05:35
attackbots	$f2bV_matches	2020-04-18 16:17:17

Type

Details

Datetime

attack

2020-05-21T08:02:45.808097abusebot-3.cloudsearch.cf sshd[32509]: Invalid user user15 from 106.12.98.42 port 48064
2020-05-21T08:02:45.814382abusebot-3.cloudsearch.cf sshd[32509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42
2020-05-21T08:02:45.808097abusebot-3.cloudsearch.cf sshd[32509]: Invalid user user15 from 106.12.98.42 port 48064
2020-05-21T08:02:47.856769abusebot-3.cloudsearch.cf sshd[32509]: Failed password for invalid user user15 from 106.12.98.42 port 48064 ssh2
2020-05-21T08:07:12.294818abusebot-3.cloudsearch.cf sshd[32767]: Invalid user iga from 106.12.98.42 port 40682
2020-05-21T08:07:12.301800abusebot-3.cloudsearch.cf sshd[32767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42
2020-05-21T08:07:12.294818abusebot-3.cloudsearch.cf sshd[32767]: Invalid user iga from 106.12.98.42 port 40682
2020-05-21T08:07:14.665100abusebot-3.cloudsearch.cf sshd[32767]: Failed passwor
...

2020-05-21 16:46:15

attack

Apr 28 15:13:28 minden010 sshd[7138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42
Apr 28 15:13:30 minden010 sshd[7138]: Failed password for invalid user hadoop from 106.12.98.42 port 52492 ssh2
Apr 28 15:21:10 minden010 sshd[10682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.42
...

2020-04-28 23:05:35

attackbots

$f2bV_matches

2020-04-18 16:17:17

Comments on same subnet:

IP	Type	Details	Datetime
106.12.98.182	attackbotsspam	Oct 7 20:03:13 xeon sshd[64940]: Failed password for root from 106.12.98.182 port 51034 ssh2	2020-10-08 02:15:29
106.12.98.182	attackspam	prod8 ...	2020-10-07 18:24:28
106.12.98.182	attackbotsspam	Aug 31 02:36:28 sip sshd[1472718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 Aug 31 02:36:28 sip sshd[1472718]: Invalid user terry from 106.12.98.182 port 54172 Aug 31 02:36:30 sip sshd[1472718]: Failed password for invalid user terry from 106.12.98.182 port 54172 ssh2 ...	2020-08-31 09:14:49
106.12.98.182	attackspambots	Invalid user taro from 106.12.98.182 port 35144	2020-08-23 04:21:53
106.12.98.182	attack	Invalid user msf from 106.12.98.182 port 38586	2020-08-21 07:20:32
106.12.98.182	attackspambots	Invalid user msf from 106.12.98.182 port 38586	2020-08-20 07:37:10
106.12.98.182	attack	Aug 19 00:15:48 buvik sshd[29715]: Failed password for invalid user janice from 106.12.98.182 port 60166 ssh2 Aug 19 00:18:41 buvik sshd[30088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 user=root Aug 19 00:18:44 buvik sshd[30088]: Failed password for root from 106.12.98.182 port 46174 ssh2 ...	2020-08-19 06:42:23
106.12.98.182	attack	Aug 12 22:58:52 serwer sshd\[3514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 user=root Aug 12 22:58:55 serwer sshd\[3514\]: Failed password for root from 106.12.98.182 port 54848 ssh2 Aug 12 23:03:04 serwer sshd\[4023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 user=root ...	2020-08-13 06:04:09
106.12.98.182	attackbotsspam	Jul 27 09:27:03 lunarastro sshd[32466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 Jul 27 09:27:04 lunarastro sshd[32466]: Failed password for invalid user hj from 106.12.98.182 port 36310 ssh2	2020-07-27 12:04:56
106.12.98.182	attackspam	Jul 25 00:22:41 ns382633 sshd\[32485\]: Invalid user dev from 106.12.98.182 port 47994 Jul 25 00:22:41 ns382633 sshd\[32485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 Jul 25 00:22:44 ns382633 sshd\[32485\]: Failed password for invalid user dev from 106.12.98.182 port 47994 ssh2 Jul 25 00:38:30 ns382633 sshd\[2790\]: Invalid user rosa from 106.12.98.182 port 53580 Jul 25 00:38:30 ns382633 sshd\[2790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182	2020-07-25 07:57:55
106.12.98.182	attackbots	Invalid user piotr from 106.12.98.182 port 60200	2020-07-22 08:20:39
106.12.98.182	attack	SSH Brute Force	2020-07-19 20:58:33
106.12.98.182	attackbots	sshd	2020-07-15 20:53:18
106.12.98.182	attackspambots	Automatic Fail2ban report - Trying login SSH	2020-07-04 05:06:03
106.12.98.182	attackspam	2020-06-27T04:19:48.133585shield sshd\[1836\]: Invalid user vivek from 106.12.98.182 port 42822 2020-06-27T04:19:48.137527shield sshd\[1836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 2020-06-27T04:19:49.714037shield sshd\[1836\]: Failed password for invalid user vivek from 106.12.98.182 port 42822 ssh2 2020-06-27T04:23:31.505402shield sshd\[2016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.98.182 user=root 2020-06-27T04:23:33.366141shield sshd\[2016\]: Failed password for root from 106.12.98.182 port 57336 ssh2	2020-06-27 15:43:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.98.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39540
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.98.42.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041702 1800 900 604800 86400

;; Query time: 86 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 18 16:17:13 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 42.98.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.98.12.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.53.61.97	attackbots	SMB Server BruteForce Attack	2020-07-14 19:22:54
173.245.211.141	attackbotsspam	[2020-07-14 06:01:17] NOTICE[1150] chan_sip.c: Registration from '"162"' failed for '173.245.211.141:34575' - Wrong password [2020-07-14 06:01:17] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-14T06:01:17.504-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="162",SessionID="0x7fcb4c0dfe08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.211.141/34575",Challenge="289c3137",ReceivedChallenge="289c3137",ReceivedHash="52cc4fb98cb5644a5acbb4d34de1f7de" [2020-07-14 06:11:06] NOTICE[1150] chan_sip.c: Registration from '"163"' failed for '173.245.211.141:40222' - Wrong password [2020-07-14 06:11:06] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-14T06:11:06.029-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="163",SessionID="0x7fcb4c076e28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1 ...	2020-07-14 19:27:05
134.175.32.95	attackspam	Jul 14 03:43:54 game-panel sshd[17467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.32.95 Jul 14 03:43:56 game-panel sshd[17467]: Failed password for invalid user brother from 134.175.32.95 port 55284 ssh2 Jul 14 03:47:44 game-panel sshd[17620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.32.95	2020-07-14 19:20:14
222.186.30.57	attackspambots	2020-07-14T13:13:27.030626n23.at sshd[1794066]: Failed password for root from 222.186.30.57 port 31216 ssh2 2020-07-14T13:13:31.996340n23.at sshd[1794066]: Failed password for root from 222.186.30.57 port 31216 ssh2 2020-07-14T13:13:35.320139n23.at sshd[1794066]: Failed password for root from 222.186.30.57 port 31216 ssh2 ...	2020-07-14 19:21:16
47.22.159.220	attack	Lines containing failures of 47.22.159.220 (max 1000) Jul 14 04:49:35 ks3373544 sshd[25235]: Invalid user admin from 47.22.159.220 port 60975 Jul 14 04:49:37 ks3373544 sshd[25235]: Failed password for invalid user admin from 47.22.159.220 port 60975 ssh2 Jul 14 04:49:38 ks3373544 sshd[25235]: Received disconnect from 47.22.159.220 port 60975:11: Bye Bye [preauth] Jul 14 04:49:38 ks3373544 sshd[25235]: Disconnected from 47.22.159.220 port 60975 [preauth] Jul 14 04:49:41 ks3373544 sshd[25280]: Failed password for r.r from 47.22.159.220 port 32900 ssh2 Jul 14 04:49:41 ks3373544 sshd[25280]: Received disconnect from 47.22.159.220 port 32900:11: Bye Bye [preauth] Jul 14 04:49:41 ks3373544 sshd[25280]: Disconnected from 47.22.159.220 port 32900 [preauth] Jul 14 04:49:42 ks3373544 sshd[25283]: Invalid user admin from 47.22.159.220 port 33013 Jul 14 04:49:44 ks3373544 sshd[25283]: Failed password for invalid user admin from 47.22.159.220 port 33013 ssh2 Jul 14 04:49:44 ks3373544........ ------------------------------	2020-07-14 19:17:19
42.179.232.109	attackbotsspam	Unauthorised access (Jul 14) SRC=42.179.232.109 LEN=40 TTL=46 ID=44465 TCP DPT=8080 WINDOW=25631 SYN Unauthorised access (Jul 14) SRC=42.179.232.109 LEN=40 TTL=46 ID=14279 TCP DPT=8080 WINDOW=25631 SYN	2020-07-14 19:38:28
41.93.32.89	attackspambots	Jul 14 12:49:07 user sshd[31052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.93.32.89 Jul 14 12:49:09 user sshd[31052]: Failed password for invalid user karol from 41.93.32.89 port 49214 ssh2	2020-07-14 19:09:43
186.52.231.219	attack	Port probing on unauthorized port 23	2020-07-14 19:11:50
103.56.205.226	attackspam	Jul 14 04:06:53 pi sshd[31487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.56.205.226 Jul 14 04:06:55 pi sshd[31487]: Failed password for invalid user oracle from 103.56.205.226 port 49708 ssh2	2020-07-14 19:20:38
58.33.31.82	attackspambots	Jul 14 05:58:54 vps46666688 sshd[24087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.33.31.82 Jul 14 05:58:56 vps46666688 sshd[24087]: Failed password for invalid user zbc from 58.33.31.82 port 36191 ssh2 ...	2020-07-14 19:34:27
167.172.249.58	attack	TCP port : 32294	2020-07-14 19:18:28
181.62.248.12	attack	Jul 13 21:38:51 dignus sshd[22035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.62.248.12 Jul 13 21:38:53 dignus sshd[22035]: Failed password for invalid user samba from 181.62.248.12 port 59896 ssh2 Jul 13 21:43:30 dignus sshd[22547]: Invalid user customer from 181.62.248.12 port 39508 Jul 13 21:43:30 dignus sshd[22547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.62.248.12 Jul 13 21:43:32 dignus sshd[22547]: Failed password for invalid user customer from 181.62.248.12 port 39508 ssh2 ...	2020-07-14 19:32:01
101.91.198.130	attackspambots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-07-14 19:29:15
111.229.163.149	attackspambots	SSH_attack	2020-07-14 19:19:24
1.1.154.193	attackspam	Port probing on unauthorized port 445	2020-07-14 19:35:03

Recently Reported IPs

60.178.122.25	52.184.33.130	183.88.243.82	47.97.199.150
200.124.153.118	106.75.92.78	175.34.138.152	51.195.151.55
164.68.110.24	154.31.34.84	198.91.82.246	62.87.107.119
171.255.115.27	111.229.130.64	66.249.69.154	209.141.32.190
167.172.138.137	118.25.6.53	132.145.83.14	223.240.86.204