AbuseIPDB » 106.120.40.70

106.120.40.70 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 0%: ?

ISP	ChinaNet Beijing Province Network
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	70.40.120.106.static.bjtelecom.net
Domain Name	chinatelecom.com.cn
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 106.120.40.70

Whois 106.120.40.70

IP Abuse Reports for 106.120.40.70:

This IP address has been reported a total of 55 times from 39 distinct sources. 106.120.40.70 was first reported on July 28th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
STOPRANSOM	2024-08-09 13:35:00 (2 months ago)	GET X.X.X.X/../../../../../../../../../bin/sh	Hacking Bad Web Bot
rtbh.com.tr	2024-08-09 12:58:41 (2 months ago)	list.rtbh.com.tr report: 23	Brute-Force
Mr. Was geht Sie das an?	2024-08-09 10:12:10 (2 months ago)	Aug 9 12:12:00 SN-E2-77 sshd[2025509]: Failed password for root from 106.120.40.70 port 2411 ssh2<b ... show moreAug 9 12:12:00 SN-E2-77 sshd[2025509]: Failed password for root from 106.120.40.70 port 2411 ssh2 Aug 9 12:12:03 SN-E2-77 sshd[2025622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.40.70 user=root Aug 9 12:12:05 SN-E2-77 sshd[2025622]: Failed password for root from 106.120.40.70 port 2412 ssh2 Aug 9 12:12:07 SN-E2-77 sshd[2025624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.40.70 user=root Aug 9 12:12:09 SN-E2-77 sshd[2025624]: Failed password for root from 106.120.40.70 port 2413 ssh2 ... show less	Brute-Force SSH
MPL	2024-08-09 10:07:40 (2 months ago)	tcp/23 (2 or more attempts)	Port Scan
diego	2024-08-09 09:54:10 (2 months ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
diego	2024-08-09 08:43:18 (2 months ago)	[rede-44-49] 106.120.40.70 (CN/China/70.40.120.106.static.bjtelecom.net), more than 10 Apache 404 hi ... show more[rede-44-49] 106.120.40.70 (CN/China/70.40.120.106.static.bjtelecom.net), more than 10 Apache 404 hits in the last 3600 secs; Ports: *; Direction: in; Trigger: LF_APACHE_404; Logs: show less	Port Scan
sid3windr	2024-08-09 08:32:21 (2 months ago)	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php (Tarpitted for 1m4s, wasted 3.87kB)	Web App Attack
sumnone	2024-08-09 07:15:24 (2 months ago)	Port probing on unauthorized port 22	Port Scan Hacking Exploited Host
diego	2024-08-09 07:00:51 (2 months ago)	Events: TCP SYN Discovery or Flooding, Seen 6 times in the last 10800 seconds	DDoS Attack
rafamiga	2024-08-09 06:57:00 (2 months ago)	106.120.40.70:2317 [09/Aug/2024:06:57:12.426] http_https~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {< ... show more106.120.40.70:2317 [09/Aug/2024:06:57:12.426] http_https~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>:443\|\|\|Custom-AsyncHttpClient} "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php --- 106.120.40.70:2318 [09/Aug/2024:06:57:13.157] http_https~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>:443\|\|\|Custom-AsyncHttpClient} "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php --- 106.120.40.70:2319 [09/Aug/2024:06:57:13.901] http_https~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>:443\|\|\|Custom-AsyncHttpClient} "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php --- 106.120.40.70:2320 [09/Aug/2024:06:57:14.965] http_https~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>:443\|\|\|Custom-AsyncHttpClient} "GET /vendor/phpunit/Util/PHP/eval-stdin.php --- 106.120.40.70:2321 [09/Aug/2024:06:57:15.733] http_https~ nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>:443\|\|\|Custom-AsyncHttpClient} "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php --- show less	Port Scan Brute-Force
diego	2024-08-09 05:52:38 (2 months ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack
bigscoots.com	2024-08-09 04:56:37 (2 months ago)	(sshd) Failed SSH login from 106.120.40.70 (CN/China/70.40.120.106.static.bjtelecom.net): 5 in the l ... show more(sshd) Failed SSH login from 106.120.40.70 (CN/China/70.40.120.106.static.bjtelecom.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 8 23:56:05 15167 sshd[22650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.40.70 user=root Aug 8 23:56:07 15167 sshd[22650]: Failed password for root from 106.120.40.70 port 2358 ssh2 Aug 8 23:56:11 15167 sshd[22656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.40.70 user=root Aug 8 23:56:13 15167 sshd[22656]: Failed password for root from 106.120.40.70 port 2359 ssh2 Aug 8 23:56:17 15167 sshd[22658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.40.70 user=root show less	Brute-Force SSH
bigscoots.com	2024-08-09 04:29:15 (2 months ago)	(sshd) Failed SSH login from 106.120.40.70 (CN/China/70.40.120.106.static.bjtelecom.net): 5 in the l ... show more(sshd) Failed SSH login from 106.120.40.70 (CN/China/70.40.120.106.static.bjtelecom.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 8 23:28:51 12647 sshd[18504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.40.70 user=root Aug 8 23:28:53 12647 sshd[18504]: Failed password for root from 106.120.40.70 port 2328 ssh2 Aug 8 23:28:55 12647 sshd[18506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.40.70 user=root Aug 8 23:28:57 12647 sshd[18506]: Failed password for root from 106.120.40.70 port 2329 ssh2 Aug 8 23:28:59 12647 sshd[18509]: Invalid user dan from 106.120.40.70 port 2330 show less	Brute-Force SSH
EGP Abuse Dept	2024-08-09 03:45:05 (2 months ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
MPL	2024-08-09 02:51:50 (2 months ago)	tcp/80	Port Scan