AbuseIPDB » 106.12.111.49

106.12.111.49 was found in our database!

This IP was reported 315 times. Confidence of Abuse is 1%: ?

1%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	University/College/School
ASN	AS38365
Domain Name	baidu.com
Country	China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 106.12.111.49

Whois 106.12.111.49

IP Abuse Reports for 106.12.111.49:

This IP address has been reported a total of 315 times from 189 distinct sources. 106.12.111.49 was first reported on June 27th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
paradoxnetworks	2024-07-08 10:11:52 (1 year ago)	2024-07-08T10:11:49.155292+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3885545]: Invalid user postgres ... show more2024-07-08T10:11:49.155292+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3885545]: Invalid user postgres from 106.12.111.49 port 48208 2024-07-08T10:11:49.159278+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3885545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 2024-07-08T10:11:51.053989+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3885545]: Failed password for invalid user postgres from 106.12.111.49 port 48208 ssh2 ... show less	Brute-Force SSH
r	2024-07-08 06:29:47 (1 year ago)	Jul 8 06:29:47 panel sshd[22851]: Failed password for root from 106.12.111.49 port 34870 ssh2	Brute-Force SSH
m2jest1c	2024-07-08 06:29:33 (1 year ago)	2024-07-08T02:29:33.822318-04:00 debian-8gb-ash-1 sshd[3731721]: Disconnected from authenticating us ... show more2024-07-08T02:29:33.822318-04:00 debian-8gb-ash-1 sshd[3731721]: Disconnected from authenticating user root 106.12.111.49 port 57706 [preauth] ... show less	Brute-Force SSH
Deep Cave	2024-07-08 05:57:36 (1 year ago)	2024-07-07T22:40:34.177405 macmini.deepcave.net sshd[3446571]: Invalid user sftpuser from 106.12.111 ... show more2024-07-07T22:40:34.177405 macmini.deepcave.net sshd[3446571]: Invalid user sftpuser from 106.12.111.49 port 49566 2024-07-07T22:44:33.399752 macmini.deepcave.net sshd[3447989]: Invalid user guest from 106.12.111.49 port 56258 2024-07-07T22:51:34.310989 macmini.deepcave.net sshd[3450409]: Invalid user postgres from 106.12.111.49 port 60936 2024-07-07T22:52:32.272147 macmini.deepcave.net sshd[3450753]: Invalid user admin from 106.12.111.49 port 41444 2024-07-07T22:57:34.948756 macmini.deepcave.net sshd[3452466]: Invalid user postgres from 106.12.111.49 port 56896 ... show less	Brute-Force SSH
bigscoots.com	2024-07-08 05:48:05 (1 year ago)	(sshd) Failed SSH login from 106.12.111.49 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ... show more(sshd) Failed SSH login from 106.12.111.49 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 8 00:33:00 14199 sshd[16810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 8 00:33:02 14199 sshd[16810]: Failed password for root from 106.12.111.49 port 37254 ssh2 Jul 8 00:43:01 14199 sshd[17965]: Invalid user odoo from 106.12.111.49 port 58388 Jul 8 00:43:02 14199 sshd[17965]: Failed password for invalid user odoo from 106.12.111.49 port 58388 ssh2 Jul 8 00:48:01 14199 sshd[18542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root show less	Brute-Force SSH
guldkage	2024-07-08 05:37:00 (1 year ago)	Unauthorized connection attempt detected from IP address 106.12.111.49 to port 22 (dk-01) [Q]	Brute-Force Exploited Host
Christopher Hughes	2024-07-08 03:22:18 (1 year ago)	Jul 8 04:21:22 dev sshd[1722587]: Failed password for invalid user ubuntu from 106.12.111.49 port 5 ... show moreJul 8 04:21:22 dev sshd[1722587]: Failed password for invalid user ubuntu from 106.12.111.49 port 58398 ssh2 Jul 8 04:21:49 dev sshd[1722598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 8 04:21:51 dev sshd[1722598]: Failed password for root from 106.12.111.49 port 37696 ssh2 Jul 8 04:22:15 dev sshd[1722602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 8 04:22:17 dev sshd[1722602]: Failed password for root from 106.12.111.49 port 45230 ssh2 ... show less	Brute-Force SSH
blazm	2024-07-08 03:22:17 (1 year ago)	2024-07-08T04:21:21.623923+01:00 BLACKBOX sshd[20069]: Failed password for invalid user ubuntu from ... show more2024-07-08T04:21:21.623923+01:00 BLACKBOX sshd[20069]: Failed password for invalid user ubuntu from 106.12.111.49 port 47764 ssh2 2024-07-08T04:21:48.449358+01:00 BLACKBOX sshd[20225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root 2024-07-08T04:21:50.723850+01:00 BLACKBOX sshd[20225]: Failed password for root from 106.12.111.49 port 55294 ssh2 2024-07-08T04:22:15.157241+01:00 BLACKBOX sshd[20368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root 2024-07-08T04:22:17.142906+01:00 BLACKBOX sshd[20368]: Failed password for root from 106.12.111.49 port 34596 ssh2 ... show less	Brute-Force SSH
bigscoots.com	2024-07-08 02:56:23 (1 year ago)	(sshd) Failed SSH login from 106.12.111.49 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ... show more(sshd) Failed SSH login from 106.12.111.49 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 7 21:47:07 13910 sshd[19403]: Invalid user dev from 106.12.111.49 port 39920 Jul 7 21:47:09 13910 sshd[19403]: Failed password for invalid user dev from 106.12.111.49 port 39920 ssh2 Jul 7 21:55:34 13910 sshd[19990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 7 21:55:36 13910 sshd[19990]: Failed password for root from 106.12.111.49 port 36124 ssh2 Jul 7 21:56:14 13910 sshd[20057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root show less	Brute-Force SSH
bigscoots.com	2024-07-08 02:11:43 (1 year ago)	106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 7 21:11:34 15053 sshd[21533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 7 20:57:21 15053 sshd[20448]: Failed password for root from 20.71.215.181 port 54716 ssh2 Jul 7 20:57:18 15053 sshd[20448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.71.215.181 user=root Jul 7 20:56:16 15053 sshd[20369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.145.78 user=root Jul 7 20:56:18 15053 sshd[20369]: Failed password for root from 14.29.145.78 port 49740 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
vmsimple.com	2024-07-08 01:52:24 (1 year ago)	Jul 7 21:51:42 corp sshd[25849]: Failed password for root from 106.12.111.49 port 34466 ssh2 ... show moreJul 7 21:51:42 corp sshd[25849]: Failed password for root from 106.12.111.49 port 34466 ssh2 Jul 7 21:52:22 corp sshd[25867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 7 21:52:23 corp sshd[25867]: Failed password for root from 106.12.111.49 port 44284 ssh2 ... show less	Brute-Force SSH
bigscoots.com	2024-07-08 01:40:47 (1 year ago)	106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 7 20:38:49 17651 sshd[31479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.172.54.235 user=root Jul 7 20:38:50 17651 sshd[31479]: Failed password for root from 45.172.54.235 port 34804 ssh2 Jul 7 20:39:32 17651 sshd[31551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 7 20:39:33 17651 sshd[31551]: Failed password for root from 106.12.111.49 port 54436 ssh2 Jul 7 20:40:42 17651 sshd[31637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.197.57 user=root IP Addresses Blocked: 45.172.54.235 (BR/Brazil/fixo-235.deltaconnex.com.br) show less	Brute-Force SSH
bigscoots.com	2024-07-08 01:17:03 (1 year ago)	106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 7 20:16:45 13533 sshd[7666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.128.107.180 user=root Jul 7 20:14:53 13533 sshd[7513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.93.23.178 user=root Jul 7 20:14:55 13533 sshd[7513]: Failed password for root from 119.93.23.178 port 15937 ssh2 Jul 7 20:13:19 13533 sshd[7352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 7 20:13:22 13533 sshd[7352]: Failed password for root from 106.12.111.49 port 47336 ssh2 IP Addresses Blocked: 43.128.107.180 (SG/Singapore/-) 119.93.23.178 (PH/Philippines/119.93.23.178.static.pldt.net) show less	Brute-Force SSH
ThreatBook.io	2024-07-07 22:09:24 (1 year ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/106.12.111.49	Brute-Force
f-d-m	2024-07-07 21:04:51 (1 year ago)	ssh-bruteforce/k3	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩