106.0.4.31 - IPInfo

基本信息:

城市(city): unknown

省份(region): Fujian

国家(country): China

运营商(isp): ChinaNet Fujian Province Network

主机名(hostname): unknown

机构(organization): No.31,Jin-rong Street

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	TCP (SYN) 106.0.4.31:42794 -> port 445, len 40	2020-08-16 19:45:52
attackbots	Unauthorized connection attempt detected from IP address 106.0.4.31 to port 1433	2020-06-29 04:19:00
attack	[portscan] tcp/1433 [MsSQL] *(RWIN=1024)(04201124)	2020-04-20 17:53:20
attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-25 21:34:45
attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-14 00:57:11
attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-10 07:34:28
attackbotsspam	Unauthorized connection attempt detected from IP address 106.0.4.31 to port 1433 [J]	2020-01-05 04:38:23
attack	" "	2019-12-22 08:01:01
attack	" "	2019-11-06 18:27:41
attackbots	Unauthorised access (Oct 16) SRC=106.0.4.31 LEN=40 TOS=0x10 PREC=0x40 TTL=240 ID=52731 TCP DPT=445 WINDOW=1024 SYN	2019-10-16 23:41:49
attack	445/tcp 445/tcp 445/tcp... [2019-07-10/08-02]9pkt,1pt.(tcp)	2019-08-03 05:13:10
attackbots	Unauthorized connection attempt from IP address 106.0.4.31 on Port 445(SMB)	2019-08-03 03:04:28

相同子网IP讨论:

IP	类型	评论内容	时间
106.0.49.170	attackspambots	Jul 17 02:05:28 debian sshd\[9574\]: Invalid user luis from 106.0.49.170 port 59970 Jul 17 02:05:28 debian sshd\[9574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.0.49.170 Jul 17 02:05:30 debian sshd\[9574\]: Failed password for invalid user luis from 106.0.49.170 port 59970 ssh2 ...	2019-07-17 19:18:19

类型

评论内容

时间

106.0.49.170

attackspambots

Jul 17 02:05:28 debian sshd\[9574\]: Invalid user luis from 106.0.49.170 port 59970
Jul 17 02:05:28 debian sshd\[9574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.0.49.170
Jul 17 02:05:30 debian sshd\[9574\]: Failed password for invalid user luis from 106.0.49.170 port 59970 ssh2
...

2019-07-17 19:18:19

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.0.4.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17431
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.0.4.31.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 03 03:04:22 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:

Host 31.4.0.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 31.4.0.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
144.76.71.176	attack	20 attempts against mh-misbehave-ban on milky	2020-02-20 06:23:02
218.35.77.140	attack	firewall-block, port(s): 23/tcp	2020-02-20 06:34:27
51.83.138.87	attack	Feb 19 22:56:31 SilenceServices sshd[25921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.138.87 Feb 19 22:56:33 SilenceServices sshd[25921]: Failed password for invalid user roger from 51.83.138.87 port 55802 ssh2 Feb 19 22:57:38 SilenceServices sshd[27237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.138.87	2020-02-20 06:53:56
218.92.0.171	attack	Feb 19 23:27:56 MK-Soft-VM3 sshd[18262]: Failed password for root from 218.92.0.171 port 34982 ssh2 Feb 19 23:28:01 MK-Soft-VM3 sshd[18262]: Failed password for root from 218.92.0.171 port 34982 ssh2 ...	2020-02-20 06:28:44
176.113.115.43	attackbotsspam	02/19/2020-16:58:32.659719 176.113.115.43 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-02-20 06:19:45
41.33.18.117	attackbots	1582149459 - 02/19/2020 22:57:39 Host: 41.33.18.117/41.33.18.117 Port: 445 TCP Blocked	2020-02-20 06:52:25
222.186.173.238	attackspambots	Feb 19 17:21:45 plusreed sshd[21805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Feb 19 17:21:47 plusreed sshd[21805]: Failed password for root from 222.186.173.238 port 57040 ssh2 ...	2020-02-20 06:23:49
222.186.180.17	attackbots	Feb 20 03:08:36 gw1 sshd[3979]: Failed password for root from 222.186.180.17 port 42202 ssh2 Feb 20 03:08:45 gw1 sshd[3979]: Failed password for root from 222.186.180.17 port 42202 ssh2 ...	2020-02-20 06:31:37
69.165.70.248	attackspam	Automatic report - SSH Brute-Force Attack	2020-02-20 06:18:38
202.120.40.69	attack	Feb 19 13:58:29 mockhub sshd[9267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.40.69 Feb 19 13:58:31 mockhub sshd[9267]: Failed password for invalid user debian from 202.120.40.69 port 36506 ssh2 ...	2020-02-20 06:19:19
192.241.175.48	attack	Invalid user luan from 192.241.175.48 port 39552	2020-02-20 06:50:22
185.143.223.170	attackspambots	Feb 19 22:58:29 grey postfix/smtpd\[20517\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.170\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.170\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.170\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\>Feb 19 22:58:29 grey postfix/smtpd\[20517\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.170\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.170\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.170\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\>Feb 19 22:58:29 grey postfix/smtpd\[20517\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.170\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.170\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.170\]\; from=\ t ...	2020-02-20 06:20:38
222.186.175.202	attack	Feb 18 03:52:24 mail sshd[26933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.202 user=root Feb 18 03:52:26 mail sshd[26933]: Failed password for root from 222.186.175.202 port 30482 ssh2 ...	2020-02-20 06:35:57
139.155.71.154	attackbots	Feb 19 17:38:56 ny01 sshd[7224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.71.154 Feb 19 17:38:57 ny01 sshd[7224]: Failed password for invalid user jira from 139.155.71.154 port 58362 ssh2 Feb 19 17:43:30 ny01 sshd[9028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.71.154	2020-02-20 06:53:39
62.210.79.40	attackspam	0,22-33/06 [bc100/m397] PostRequest-Spammer scoring: luanda	2020-02-20 06:33:56

最近上报的IP列表

38.25.11.42	110.194.168.230	100.6.251.164	94.144.221.215
59.58.99.213	148.166.61.82	112.133.248.114	161.111.69.40
44.170.107.76	86.189.190.57	173.60.157.231	17.252.112.93
70.59.165.160	58.67.202.194	187.224.247.81	191.46.119.225
162.179.30.63	63.56.179.93	137.222.223.235	132.154.157.100