AbuseIPDB » 106.12.111.49

106.12.111.49 was found in our database!

This IP was reported 315 times. Confidence of Abuse is 1%: ?

1%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	University/College/School
ASN	AS38365
Domain Name	baidu.com
Country	China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 106.12.111.49

Whois 106.12.111.49

IP Abuse Reports for 106.12.111.49:

This IP address has been reported a total of 315 times from 189 distinct sources. 106.12.111.49 was first reported on June 27th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-07-06 01:08:13 (1 year ago)	(sshd) Failed SSH login from 106.12.111.49 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ... show more(sshd) Failed SSH login from 106.12.111.49 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 5 20:59:04 sshd[429493]: Invalid user [USERNAME] from 106.12.111.49 port 47310 show less	SSH
sid3windr	2024-07-06 00:10:57 (1 year ago)	sshd[27788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost ... show moresshd[27788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root sshd[27788]: Failed password for root from 106.12.111.49 port 53020 ssh2 sshd[29324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root sshd[29324]: Failed password for root from 106.12.111.49 port 33106 ssh2 sshd[29473]: Invalid user user4 from 106.12.111.49 port 43736 show less	Brute-Force SSH
Yepngo	2024-07-05 23:52:56 (1 year ago)	Jul 6 01:52:56 ns3006402 sshd[193918]: Invalid user deploy from 106.12.111.49 port 45468 ...	Brute-Force SSH
Yepngo	2024-07-05 23:19:07 (1 year ago)	Jul 6 01:14:41 ns3006402 sshd[189117]: Failed password for invalid user dockeruser from 106.12.111. ... show moreJul 6 01:14:41 ns3006402 sshd[189117]: Failed password for invalid user dockeruser from 106.12.111.49 port 52242 ssh2 Jul 6 01:19:04 ns3006402 sshd[189712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=ubuntu Jul 6 01:19:06 ns3006402 sshd[189712]: Failed password for ubuntu from 106.12.111.49 port 33422 ssh2 ... show less	Brute-Force SSH
Giacomo Mondino	2024-07-05 23:14:27 (1 year ago)	Jul 5 23:14:26 server sshd[865510]: Invalid user dockeruser from 106.12.111.49 port 55758 Jul ... show moreJul 5 23:14:26 server sshd[865510]: Invalid user dockeruser from 106.12.111.49 port 55758 Jul 5 23:14:26 server sshd[865510]: Failed password for invalid user dockeruser from 106.12.111.49 port 55758 ssh2 ... show less	Brute-Force SSH
Anonymous	2024-07-05 22:47:38 (1 year ago)	2024-07-05T22:47:35.665128+00:00 VM2772336 sshd[900988]: pam_unix(sshd:auth): authentication failure ... show more2024-07-05T22:47:35.665128+00:00 VM2772336 sshd[900988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root 2024-07-05T22:47:37.460847+00:00 VM2772336 sshd[900988]: Failed password for root from 106.12.111.49 port 56610 ssh2 ... show less	Brute-Force SSH
akcurate.de	2024-07-05 22:08:49 (1 year ago)	2024-07-06T00:03:32.122255 mail2.akcurate.de sshd[558119]: Disconnected from authenticating user roo ... show more2024-07-06T00:03:32.122255 mail2.akcurate.de sshd[558119]: Disconnected from authenticating user root 106.12.111.49 port 57894 [preauth] 2024-07-06T00:08:14.822419 mail2.akcurate.de sshd[558222]: Disconnected from authenticating user root 106.12.111.49 port 39624 [preauth] 2024-07-06T00:08:48.140317 mail2.akcurate.de sshd[558213]: Connection closed by 106.12.111.49 port 56350 [preauth] ... show less	Brute-Force SSH
chirorist	2024-07-05 21:40:13 (1 year ago)	2024-07-06T06:39:19.422804 vps1.chirorist.org sshd[179645]: pam_unix(sshd:auth): authentication fail ... show more2024-07-06T06:39:19.422804 vps1.chirorist.org sshd[179645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root 2024-07-06T06:39:21.911817 vps1.chirorist.org sshd[179645]: Failed password for root from 106.12.111.49 port 48398 ssh2 2024-07-06T06:39:45.965310 vps1.chirorist.org sshd[179648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root 2024-07-06T06:39:48.022888 vps1.chirorist.org sshd[179648]: Failed password for root from 106.12.111.49 port 55044 ssh2 2024-07-06T06:40:12.569168 vps1.chirorist.org sshd[179650]: Invalid user ubuntu from 106.12.111.49 port 33448 ... show less	Brute-Force SSH
sid3windr	2024-07-05 21:01:35 (1 year ago)	sshd[3837196]: Failed password for root from 106.12.111.49 port 39488 ssh2 sshd[3837647]: pam_ ... show moresshd[3837196]: Failed password for root from 106.12.111.49 port 39488 ssh2 sshd[3837647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root sshd[3837647]: Failed password for root from 106.12.111.49 port 44306 ssh2 sshd[3837989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root sshd[3837989]: Failed password for root from 106.12.111.49 port 39358 ssh2 show less	Brute-Force SSH
zlydnev.online	2024-07-05 20:35:15 (1 year ago)	Jul 5 20:34:00 eltispisrv01 sshd[2872274]: pam_unix(sshd:auth): authentication failure; logname= ui ... show moreJul 5 20:34:00 eltispisrv01 sshd[2872274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 5 20:34:02 eltispisrv01 sshd[2872274]: Failed password for root from 106.12.111.49 port 44834 ssh2 Jul 5 20:34:42 eltispisrv01 sshd[2872345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 5 20:34:44 eltispisrv01 sshd[2872345]: Failed password for root from 106.12.111.49 port 52862 ssh2 Jul 5 20:35:15 eltispisrv01 sshd[2872392]: Invalid user newuser from 106.12.111.49 port 60876 ... show less	Brute-Force SSH
Rick Sutphin	2024-07-05 19:55:29 (1 year ago)	Jul 5 15:53:25 lxc01 sshd[252040]: Disconnected from authenticating user root 106.12.111.49 port 37 ... show moreJul 5 15:53:25 lxc01 sshd[252040]: Disconnected from authenticating user root 106.12.111.49 port 37884 [preauth] Jul 5 15:54:54 lxc01 sshd[253677]: Disconnected from authenticating user root 106.12.111.49 port 52916 [preauth] Jul 5 15:55:29 lxc01 sshd[254497]: Invalid user user100 from 106.12.111.49 port 34292 ... show less	Brute-Force SSH
on-com	2024-07-05 19:27:15 (1 year ago)	SSH login attempt	SSH
Rizzy	2024-07-05 18:59:26 (1 year ago)	Multiple failed SSH logins or Distributed SSH attack	Brute-Force SSH
bigscoots.com	2024-07-05 17:29:35 (1 year ago)	106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 5 12:29:18 14119 sshd[19553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 5 12:28:58 14119 sshd[19482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.125.133.180 user=root Jul 5 12:29:00 14119 sshd[19482]: Failed password for root from 135.125.133.180 port 52324 ssh2 Jul 5 12:29:10 14119 sshd[19484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.226.84.116 user=root Jul 5 12:29:12 14119 sshd[19484]: Failed password for root from 120.226.84.116 port 48194 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
bigscoots.com	2024-07-05 16:35:37 (1 year ago)	106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more106.12.111.49 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 5 11:35:15 14353 sshd[15620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.131.245.109 user=root Jul 5 11:33:25 14353 sshd[15478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.173.84.123 user=root Jul 5 11:33:25 14353 sshd[15476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.111.49 user=root Jul 5 11:33:28 14353 sshd[15478]: Failed password for root from 107.173.84.123 port 35072 ssh2 Jul 5 11:33:28 14353 sshd[15476]: Failed password for root from 106.12.111.49 port 52160 ssh2 IP Addresses Blocked: 43.131.245.109 (KR/South Korea/-) 107.173.84.123 (US/United States/107-173-84-123-host.colocrossing.com) show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩