城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Search Engine Spider
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspambots | May 22 08:07:45 vps687878 sshd\[26039\]: Failed password for invalid user bjr from 106.12.139.137 port 46258 ssh2 May 22 08:09:38 vps687878 sshd\[26255\]: Invalid user vwc from 106.12.139.137 port 42516 May 22 08:09:38 vps687878 sshd\[26255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.137 May 22 08:09:40 vps687878 sshd\[26255\]: Failed password for invalid user vwc from 106.12.139.137 port 42516 ssh2 May 22 08:11:35 vps687878 sshd\[26623\]: Invalid user lijingping from 106.12.139.137 port 38784 May 22 08:11:35 vps687878 sshd\[26623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.137 ... |
2020-05-22 17:12:36 |
| attackspam | May 10 00:45:44 firewall sshd[13763]: Failed password for invalid user userftp from 106.12.139.137 port 42066 ssh2 May 10 00:47:16 firewall sshd[13800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.137 user=root May 10 00:47:18 firewall sshd[13800]: Failed password for root from 106.12.139.137 port 34058 ssh2 ... |
2020-05-10 19:15:06 |
| attackbotsspam | May 6 06:54:03 server sshd[27768]: Failed password for invalid user fgs from 106.12.139.137 port 58358 ssh2 May 6 06:57:01 server sshd[27935]: Failed password for invalid user root1 from 106.12.139.137 port 39836 ssh2 May 6 06:59:56 server sshd[28070]: Failed password for invalid user nagios from 106.12.139.137 port 49560 ssh2 |
2020-05-06 15:05:33 |
| attackspambots | Apr 21 15:11:37 pve1 sshd[12234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.137 Apr 21 15:11:39 pve1 sshd[12234]: Failed password for invalid user mysql from 106.12.139.137 port 34914 ssh2 ... |
2020-04-21 22:24:46 |
| attackspambots | Automatic report - SSH Brute-Force Attack |
2020-04-03 16:35:24 |
| attack | Invalid user liangbin from 106.12.139.137 port 33872 |
2020-04-03 06:25:00 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.12.139.149 | attack | $f2bV_matches |
2020-05-15 00:58:13 |
| 106.12.139.149 | attack | 2020-05-14T07:11:13.569671 sshd[4146]: Invalid user user2 from 106.12.139.149 port 35314 2020-05-14T07:11:13.585700 sshd[4146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.149 2020-05-14T07:11:13.569671 sshd[4146]: Invalid user user2 from 106.12.139.149 port 35314 2020-05-14T07:11:15.541463 sshd[4146]: Failed password for invalid user user2 from 106.12.139.149 port 35314 ssh2 ... |
2020-05-14 14:24:41 |
| 106.12.139.149 | attackspambots | $f2bV_matches |
2020-05-11 17:35:45 |
| 106.12.139.149 | attack | Apr 28 05:38:59 v22018086721571380 sshd[12824]: Failed password for invalid user sridhar from 106.12.139.149 port 52636 ssh2 |
2020-04-28 12:03:00 |
| 106.12.139.138 | attack | Invalid user admin from 106.12.139.138 port 43886 |
2020-04-18 07:50:28 |
| 106.12.139.149 | attackbotsspam | Invalid user admin from 106.12.139.149 port 55384 |
2020-04-15 12:05:14 |
| 106.12.139.149 | attack | Apr 10 16:23:40 webhost01 sshd[16562]: Failed password for root from 106.12.139.149 port 35014 ssh2 ... |
2020-04-10 17:28:13 |
| 106.12.139.149 | attack | $f2bV_matches |
2020-04-08 08:41:58 |
| 106.12.139.138 | attack | k+ssh-bruteforce |
2020-04-07 06:38:19 |
| 106.12.139.138 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2020-04-05 19:27:44 |
| 106.12.139.149 | attack | Apr 2 07:49:52 lukav-desktop sshd\[29814\]: Invalid user sc from 106.12.139.149 Apr 2 07:49:52 lukav-desktop sshd\[29814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.149 Apr 2 07:49:54 lukav-desktop sshd\[29814\]: Failed password for invalid user sc from 106.12.139.149 port 43744 ssh2 Apr 2 07:53:23 lukav-desktop sshd\[30014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.149 user=root Apr 2 07:53:25 lukav-desktop sshd\[30014\]: Failed password for root from 106.12.139.149 port 54526 ssh2 |
2020-04-02 18:54:35 |
| 106.12.139.149 | attack | SSH bruteforce (Triggered fail2ban) |
2020-03-28 03:43:55 |
| 106.12.139.149 | attack | Invalid user marketing from 106.12.139.149 port 44338 |
2019-12-21 03:48:55 |
| 106.12.139.149 | attack | Invalid user web from 106.12.139.149 port 35804 |
2019-12-13 06:45:30 |
| 106.12.139.149 | attack | Dec 9 13:46:23 icinga sshd[22412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.139.149 Dec 9 13:46:25 icinga sshd[22412]: Failed password for invalid user test from 106.12.139.149 port 41498 ssh2 ... |
2019-12-09 21:44:33 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.139.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62812
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.139.137. IN A
;; AUTHORITY SECTION:
. 448 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040202 1800 900 604800 86400
;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 03 06:24:57 CST 2020
;; MSG SIZE rcvd: 118Host 137.139.12.106.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 137.139.12.106.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 84.2.62.48 | attackspam | Feb 21 12:00:52 auw2 sshd\[29068\]: Invalid user doug from 84.2.62.48 Feb 21 12:00:52 auw2 sshd\[29068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=dsl54023e30.fixip.t-online.hu Feb 21 12:00:53 auw2 sshd\[29068\]: Failed password for invalid user doug from 84.2.62.48 port 52686 ssh2 Feb 21 12:05:10 auw2 sshd\[29438\]: Invalid user admin from 84.2.62.48 Feb 21 12:05:10 auw2 sshd\[29438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=dsl54023e30.fixip.t-online.hu |
2020-02-22 06:19:52 |
| 188.166.163.251 | attackbots | frenzy |
2020-02-22 06:13:46 |
| 150.109.115.158 | attackbots | $f2bV_matches |
2020-02-22 06:29:17 |
| 162.243.135.85 | attackspambots | " " |
2020-02-22 06:37:20 |
| 121.229.25.154 | attack | Automatic report - SSH Brute-Force Attack |
2020-02-22 06:22:50 |
| 89.132.11.188 | attackspambots | Email rejected due to spam filtering |
2020-02-22 06:42:36 |
| 152.136.170.148 | attackspam | Feb 21 22:28:31 minden010 sshd[3860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.170.148 Feb 21 22:28:33 minden010 sshd[3860]: Failed password for invalid user deploy from 152.136.170.148 port 33602 ssh2 Feb 21 22:30:51 minden010 sshd[4871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.170.148 ... |
2020-02-22 06:46:23 |
| 5.101.0.209 | attackbotsspam | [Sat Feb 22 04:31:13.125916 2020] [:error] [pid 12863:tid 140080266069760] [client 5.101.0.209:60264] [client 5.101.0.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/solr/admin/info/system"] [unique_id "XlBMF20LDB0zxIxC9xQMwgAAAfI"] ... |
2020-02-22 06:18:23 |
| 78.156.232.45 | attackbots | Email rejected due to spam filtering |
2020-02-22 06:36:49 |
| 103.226.174.221 | attackspambots | Feb 21 22:30:52 lnxmail61 postfix/smtpd[15553]: warning: unknown[103.226.174.221]: SASL PLAIN authentication failed: Feb 21 22:30:52 lnxmail61 postfix/smtpd[15553]: lost connection after AUTH from unknown[103.226.174.221] Feb 21 22:31:04 lnxmail61 postfix/smtpd[15553]: warning: unknown[103.226.174.221]: SASL PLAIN authentication failed: Feb 21 22:31:04 lnxmail61 postfix/smtpd[15553]: lost connection after AUTH from unknown[103.226.174.221] Feb 21 22:31:15 lnxmail61 postfix/smtps/smtpd[21999]: warning: unknown[103.226.174.221]: SASL PLAIN authentication failed: |
2020-02-22 06:26:41 |
| 222.186.175.215 | attack | Feb 22 05:16:53 lcl-usvr-01 sshd[7046]: refused connect from 222.186.175.215 (222.186.175.215) Feb 22 05:24:01 lcl-usvr-01 sshd[9198]: refused connect from 222.186.175.215 (222.186.175.215) |
2020-02-22 06:27:08 |
| 188.166.54.199 | attack | $f2bV_matches |
2020-02-22 06:07:53 |
| 112.85.42.180 | attackbots | Multiple SSH login attempts. |
2020-02-22 06:21:26 |
| 23.97.180.45 | attackspambots | Feb 21 21:55:15 web8 sshd\[31433\]: Invalid user kim from 23.97.180.45 Feb 21 21:55:15 web8 sshd\[31433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45 Feb 21 21:55:17 web8 sshd\[31433\]: Failed password for invalid user kim from 23.97.180.45 port 49078 ssh2 Feb 21 21:57:43 web8 sshd\[495\]: Invalid user shuangbo from 23.97.180.45 Feb 21 21:57:43 web8 sshd\[495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45 |
2020-02-22 06:15:59 |
| 218.92.0.212 | attackspambots | SSH Brute-Force attacks |
2020-02-22 06:11:42 |