City: unknown
Region: unknown
Country: China
Internet Service Provider: Beijing Baidu Netcom Science and Technology Co. Ltd.
Hostname: unknown
Organization: unknown
Usage Type: Search Engine Spider
| Type | Details | Datetime |
|---|---|---|
| attackspam | Unauthorized connection attempt detected from IP address 106.12.99.121 to port 1433 [J] |
2020-02-01 17:58:10 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.99.84 | attack | 1596370322 - 08/02/2020 14:12:02 Host: 106.12.99.84/106.12.99.84 Port: 445 TCP Blocked |
2020-08-02 22:17:26 |
| 106.12.99.204 | attackspambots | 2020-07-19T11:44:12.6553031495-001 sshd[16981]: Invalid user cronje from 106.12.99.204 port 41024 2020-07-19T11:44:14.6746911495-001 sshd[16981]: Failed password for invalid user cronje from 106.12.99.204 port 41024 ssh2 2020-07-19T11:48:01.8728961495-001 sshd[17172]: Invalid user chenxuwu from 106.12.99.204 port 53884 2020-07-19T11:48:01.8798671495-001 sshd[17172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.99.204 2020-07-19T11:48:01.8728961495-001 sshd[17172]: Invalid user chenxuwu from 106.12.99.204 port 53884 2020-07-19T11:48:04.0015681495-001 sshd[17172]: Failed password for invalid user chenxuwu from 106.12.99.204 port 53884 ssh2 ... |
2020-07-20 01:17:10 |
| 106.12.99.204 | attackspambots | Jul 11 22:00:07 l03 sshd[11767]: Invalid user jessie from 106.12.99.204 port 47276 ... |
2020-07-12 05:08:23 |
| 106.12.99.204 | attackbotsspam | Jul 6 04:36:15 NG-HHDC-SVS-001 sshd[26875]: Invalid user huy from 106.12.99.204 ... |
2020-07-06 03:16:54 |
| 106.12.99.204 | attack | Bruteforce detected by fail2ban |
2020-06-18 03:47:04 |
| 106.12.99.204 | attackbots | 2020-06-12T05:53:27.9408631240 sshd\[13802\]: Invalid user hm from 106.12.99.204 port 44622 2020-06-12T05:53:27.9455211240 sshd\[13802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.99.204 2020-06-12T05:53:29.9171631240 sshd\[13802\]: Failed password for invalid user hm from 106.12.99.204 port 44622 ssh2 ... |
2020-06-12 16:31:10 |
| 106.12.99.204 | attackspam | Jun 4 17:17:07 ny01 sshd[15121]: Failed password for root from 106.12.99.204 port 53944 ssh2 Jun 4 17:20:51 ny01 sshd[15614]: Failed password for root from 106.12.99.204 port 48986 ssh2 |
2020-06-05 05:33:21 |
| 106.12.99.204 | attackbots | May 28 23:18:27 eventyay sshd[23681]: Failed password for root from 106.12.99.204 port 51052 ssh2 May 28 23:21:23 eventyay sshd[23808]: Failed password for root from 106.12.99.204 port 57536 ssh2 ... |
2020-05-29 05:27:17 |
| 106.12.99.204 | attackspambots | (sshd) Failed SSH login from 106.12.99.204 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 15 12:01:32 elude sshd[13238]: Invalid user lee from 106.12.99.204 port 42928 May 15 12:01:34 elude sshd[13238]: Failed password for invalid user lee from 106.12.99.204 port 42928 ssh2 May 15 12:04:36 elude sshd[13666]: Invalid user dex from 106.12.99.204 port 47608 May 15 12:04:38 elude sshd[13666]: Failed password for invalid user dex from 106.12.99.204 port 47608 ssh2 May 15 12:05:46 elude sshd[13854]: Invalid user jiayuanyang from 106.12.99.204 port 59710 |
2020-05-15 19:07:10 |
| 106.12.99.84 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-22 21:18:09 |
| 106.12.99.173 | attack | Mar 9 02:54:17 server sshd\[7574\]: Invalid user e from 106.12.99.173 Mar 9 02:54:17 server sshd\[7574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.99.173 Mar 9 02:54:18 server sshd\[7574\]: Failed password for invalid user e from 106.12.99.173 port 46928 ssh2 Mar 9 03:26:21 server sshd\[15162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.99.173 user=root Mar 9 03:26:23 server sshd\[15162\]: Failed password for root from 106.12.99.173 port 34060 ssh2 ... |
2020-03-09 08:53:02 |
| 106.12.99.173 | attack | $f2bV_matches |
2020-02-17 06:21:26 |
| 106.12.99.173 | attackbots | Jan 31 22:21:00 game-panel sshd[22174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.99.173 Jan 31 22:21:02 game-panel sshd[22174]: Failed password for invalid user www from 106.12.99.173 port 35302 ssh2 Jan 31 22:24:05 game-panel sshd[22331]: Failed password for support from 106.12.99.173 port 57202 ssh2 |
2020-02-01 07:07:36 |
| 106.12.99.173 | attackbots | leo_www |
2020-01-08 15:05:55 |
| 106.12.99.173 | attackspam | Dec 31 05:55:38 MK-Soft-VM5 sshd[30796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.99.173 Dec 31 05:55:40 MK-Soft-VM5 sshd[30796]: Failed password for invalid user mysql from 106.12.99.173 port 43362 ssh2 ... |
2019-12-31 13:57:27 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.99.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65172
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.99.121. IN A
;; AUTHORITY SECTION:
. 454 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019112600 1800 900 604800 86400
;; Query time: 413 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 26 23:40:56 CST 2019
;; MSG SIZE rcvd: 117Host 121.99.12.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 121.99.12.106.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.252.16.71 | attack | SSH Invalid Login |
2020-05-09 08:13:43 |
| 66.249.73.70 | attack | [Sat May 09 05:03:12.066788 2020] [:error] [pid 17928:tid 140037002565376] [client 66.249.73.70:43923] [client 66.249.73.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/agroklimatologi/kalender-tanam/1194-kalender-tanam-katam-terpadu-pulau-jawa/kalender-tanam-katam-terpadu-provinsi-jawa-timur/kalender-tanam-katam-terpadu-kota-malang/kalender-tanam-katam-terpadu-kecamatan-kedungkandang-kota-malang" ... |
2020-05-09 07:41:50 |
| 216.45.23.6 | attackbotsspam | SSH Invalid Login |
2020-05-09 07:55:41 |
| 118.69.71.106 | attack | ssh brute force |
2020-05-09 07:54:27 |
| 185.221.253.91 | attack | Unauthorized IMAP connection attempt |
2020-05-09 07:40:20 |
| 195.154.133.163 | attack | 195.154.133.163 - - [09/May/2020:03:56:09 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2020-05-09 08:03:21 |
| 207.46.13.70 | attackbots | 207.46.13.70 - - [08/May/2020:23:45:26 +0300] "GET /en/shop/data:text/javascript;base64,%20dmfyihdvb2nvbw1lcmnlx3bhcmftcz17imfqyxhfdxjsijoixc93cc1hzg1pblwvywrtaw4tywphec5wahailcj3y19hamf4x3vybci6ilwvzw5clz93yy1hamf4psulzw5kcg9pbnqljsj9ow== HTTP/1.0" 403 1523 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 207.46.13.70 - - [08/May/2020:23:46:06 +0300] "GET /en/cart/data:text/javascript;base64,%20dmfyihdjx2nhcnrfznjhz21lbnrzx3bhcmftcz17imfqyxhfdxjsijoixc93cc1hzg1pblwvywrtaw4tywphec5wahailcj3y19hamf4x3vybci6ilwvzw5clz93yy1hamf4psulzw5kcg9pbnqljsisimnhcnrfagfzaf9rzxkioij3y19jyxj0x2hhc2hfzgm0mjc4mtzjngfjnze3ntm2ntu5mtqznmi2ytdjotiilcjmcmfnbwvudf9uyw1lijoid2nfznjhz21lbnrzx2rjndi3ode2yzrhyzcxnzuznju1ote0mzzinme3yzkyiiwicmvxdwvzdf90aw1lb3v0ijointawmcj9ow== HTTP/1.0" 403 1523 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)" 207.46.13.70 - - [08/May/2020:23:46:53 +0300] "GET /en/shop/data:text/javascript;base64,%20alf1zxj5kcdib2r5jykuymluzcgnd2nfznjhz21 ... |
2020-05-09 08:02:09 |
| 112.85.42.172 | attackspam | 2020-05-09T01:58:33.779777sd-86998 sshd[16266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root 2020-05-09T01:58:35.907251sd-86998 sshd[16266]: Failed password for root from 112.85.42.172 port 49465 ssh2 2020-05-09T01:58:38.912766sd-86998 sshd[16266]: Failed password for root from 112.85.42.172 port 49465 ssh2 2020-05-09T01:58:33.779777sd-86998 sshd[16266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root 2020-05-09T01:58:35.907251sd-86998 sshd[16266]: Failed password for root from 112.85.42.172 port 49465 ssh2 2020-05-09T01:58:38.912766sd-86998 sshd[16266]: Failed password for root from 112.85.42.172 port 49465 ssh2 2020-05-09T01:58:33.779777sd-86998 sshd[16266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root 2020-05-09T01:58:35.907251sd-86998 sshd[16266]: Failed password for root from 112.85. ... |
2020-05-09 08:06:41 |
| 179.124.197.151 | attackbotsspam | May 8 22:47:29 prox sshd[12957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.197.151 May 8 22:47:31 prox sshd[12957]: Failed password for invalid user supervisor from 179.124.197.151 port 52915 ssh2 |
2020-05-09 07:39:23 |
| 103.48.192.48 | attackspambots | SSH Brute-Force attacks |
2020-05-09 08:11:28 |
| 140.143.243.27 | attack | May 9 00:54:57 vmd48417 sshd[8604]: Failed password for root from 140.143.243.27 port 46970 ssh2 |
2020-05-09 07:59:30 |
| 178.154.200.96 | attackspambots | [Sat May 09 05:38:55.595490 2020] [:error] [pid 4518:tid 140043259455232] [client 178.154.200.96:34758] [client 178.154.200.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XrXff99@Ge7dbo6QM4kZ5gAAAT0"] ... |
2020-05-09 08:16:20 |
| 52.237.196.109 | attackbotsspam | May 8 23:59:38 buvik sshd[16189]: Invalid user secure from 52.237.196.109 May 8 23:59:38 buvik sshd[16189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.237.196.109 May 8 23:59:40 buvik sshd[16189]: Failed password for invalid user secure from 52.237.196.109 port 34039 ssh2 ... |
2020-05-09 08:09:34 |
| 111.67.193.204 | attack | May 9 00:50:03 nextcloud sshd\[10323\]: Invalid user meng from 111.67.193.204 May 9 00:50:03 nextcloud sshd\[10323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.193.204 May 9 00:50:05 nextcloud sshd\[10323\]: Failed password for invalid user meng from 111.67.193.204 port 44128 ssh2 |
2020-05-09 07:47:37 |
| 210.87.7.35 | attack | May 7 02:59:51 online-web-vs-1 sshd[1696522]: Invalid user ddr from 210.87.7.35 port 41258 May 7 02:59:51 online-web-vs-1 sshd[1696522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.87.7.35 May 7 02:59:53 online-web-vs-1 sshd[1696522]: Failed password for invalid user ddr from 210.87.7.35 port 41258 ssh2 May 7 02:59:53 online-web-vs-1 sshd[1696522]: Received disconnect from 210.87.7.35 port 41258:11: Bye Bye [preauth] May 7 02:59:53 online-web-vs-1 sshd[1696522]: Disconnected from 210.87.7.35 port 41258 [preauth] May 7 03:11:38 online-web-vs-1 sshd[1698552]: Invalid user bcs from 210.87.7.35 port 47384 May 7 03:11:38 online-web-vs-1 sshd[1698552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.87.7.35 May 7 03:11:40 online-web-vs-1 sshd[1698552]: Failed password for invalid user bcs from 210.87.7.35 port 47384 ssh2 May 7 03:11:41 online-web-vs-1 sshd[1698552]: Received d........ ------------------------------- |
2020-05-09 08:17:26 |