106.105.132.144

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan (Province of China)

运营商(isp): New Century Infocomm Tech. Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Honeypot attack, port: 81, PTR: 106.105.132.144.adsl.dynamic.seed.net.tw.	2020-03-01 22:29:41

相同子网IP讨论:

IP	类型	评论内容	时间
106.105.132.240	attackbots	Unauthorized connection attempt detected from IP address 106.105.132.240 to port 5555 [J]	2020-02-05 21:36:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.105.132.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.105.132.144.		IN	A

;; AUTHORITY SECTION:
.			588	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030100 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 01 22:29:34 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

144.132.105.106.in-addr.arpa domain name pointer 106.105.132.144.adsl.dynamic.seed.net.tw.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
144.132.105.106.in-addr.arpa	name = 106.105.132.144.adsl.dynamic.seed.net.tw.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
118.25.152.10	attackbotsspam	2020-03-16T14:09:34.167916scmdmz1 sshd[17885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.152.10 2020-03-16T14:09:34.164956scmdmz1 sshd[17885]: Invalid user nazrul from 118.25.152.10 port 52784 2020-03-16T14:09:35.576669scmdmz1 sshd[17885]: Failed password for invalid user nazrul from 118.25.152.10 port 52784 ssh2 ...	2020-03-16 22:25:42
212.21.20.198	attackbots	Unauthorized connection attempt from IP address 212.21.20.198 on Port 445(SMB)	2020-03-16 22:51:44
45.14.150.133	attackbotsspam	SSH bruteforce (Triggered fail2ban)	2020-03-16 22:03:25
218.253.69.134	attack	Failed password for root from 218.253.69.134 port 34080 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.253.69.134 user=root Failed password for root from 218.253.69.134 port 43920 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.253.69.134 user=root Failed password for root from 218.253.69.134 port 53780 ssh2	2020-03-16 22:41:59
82.196.4.66	attackbots	SSH brute force attempt	2020-03-16 22:47:51
162.241.139.106	attackspam	Mar 16 06:07:33 exim[12684]: [1\103] 1jDhyN-0003Ia-KF H=kle.klezcar.com [162.241.139.106] X=TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256 CV=no F= rejected after DATA: This message scored 18.5 spam points.	2020-03-16 22:27:27
86.43.84.229	attack	03/16/2020-01:07:53.044850 86.43.84.229 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-03-16 22:33:05
190.210.164.165	attackbotsspam	Mar 16 12:16:03 v22019038103785759 sshd\[2132\]: Invalid user arai from 190.210.164.165 port 60248 Mar 16 12:16:03 v22019038103785759 sshd\[2132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.210.164.165 Mar 16 12:16:05 v22019038103785759 sshd\[2132\]: Failed password for invalid user arai from 190.210.164.165 port 60248 ssh2 Mar 16 12:23:40 v22019038103785759 sshd\[2630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.210.164.165 user=root Mar 16 12:23:41 v22019038103785759 sshd\[2630\]: Failed password for root from 190.210.164.165 port 43678 ssh2 ...	2020-03-16 22:18:37
167.114.3.44	attackbots	Fail2Ban Ban Triggered	2020-03-16 22:12:10
185.50.25.6	attack	[munged]::443 185.50.25.6 - - [16/Mar/2020:06:07:55 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.50.25.6 - - [16/Mar/2020:06:07:57 +0100] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.50.25.6 - - [16/Mar/2020:06:07:57 +0100] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.50.25.6 - - [16/Mar/2020:06:08:00 +0100] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.50.25.6 - - [16/Mar/2020:06:08:00 +0100] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 185.50.25.6 - - [16/Mar/2020:06:08:03 +0100] "POST /[munged]: HTTP/1.1" 401 8486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x8	2020-03-16 22:23:44
46.38.145.4	attackspam	Mar 16 15:21:08 srv01 postfix/smtpd\[6507\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 15:21:39 srv01 postfix/smtpd\[6507\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 15:22:09 srv01 postfix/smtpd\[6507\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 15:22:40 srv01 postfix/smtpd\[6507\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 16 15:23:11 srv01 postfix/smtpd\[31749\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-03-16 22:24:48
86.35.252.66	attack	DATE:2020-03-16 06:08:25, IP:86.35.252.66, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-03-16 22:09:03
103.16.202.174	attack	2020-03-16T12:16:12.050699jannga.de sshd[20280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.16.202.174 user=sync 2020-03-16T12:16:14.328601jannga.de sshd[20280]: Failed password for sync from 103.16.202.174 port 32945 ssh2 ...	2020-03-16 22:05:32
123.27.10.47	attackbotsspam	1584335295 - 03/16/2020 06:08:15 Host: 123.27.10.47/123.27.10.47 Port: 445 TCP Blocked	2020-03-16 22:19:30
123.207.153.52	attack	Automatic report - Port Scan	2020-03-16 22:03:05

最近上报的IP列表

106.224.140.40	210.136.250.51	208.144.230.112	116.44.137.24
101.9.192.200	178.206.232.213	186.2.114.173	48.90.241.243
207.129.121.120	72.249.52.76	17.247.219.57	99.201.141.247
215.173.13.175	74.247.188.169	223.46.217.150	58.148.68.1
184.105.13.220	208.98.76.110	187.104.185.86	104.206.142.234