106.11.154.13 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
106.11.154.46	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541183fbad48eb85 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:17:36
106.11.154.33	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 540fd4e34f64eab7 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:38:38
106.11.154.83	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 540feaa28b9beba1 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:20:22

类型

评论内容

时间

106.11.154.46

attack

The IP has triggered Cloudflare WAF. CF-Ray: 541183fbad48eb85 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 04:17:36

106.11.154.33

attackbotsspam

The IP has triggered Cloudflare WAF. CF-Ray: 540fd4e34f64eab7 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:38:38

106.11.154.83

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 540feaa28b9beba1 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:20:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.11.154.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.11.154.13.			IN	A

;; AUTHORITY SECTION:
.			191	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062801 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 29 03:01:49 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

13.154.11.106.in-addr.arpa domain name pointer shenmaspider-106-11-154-13.crawl.sm.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.154.11.106.in-addr.arpa	name = shenmaspider-106-11-154-13.crawl.sm.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
104.236.122.193	attack	SSH login attempts	2019-10-22 15:16:53
185.176.27.118	attackbots	10/22/2019-02:41:36.210604 185.176.27.118 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-10-22 14:44:42
159.65.155.227	attackbots	Oct 22 02:43:02 xtremcommunity sshd\[768332\]: Invalid user 1234$ABCD from 159.65.155.227 port 57436 Oct 22 02:43:02 xtremcommunity sshd\[768332\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 Oct 22 02:43:04 xtremcommunity sshd\[768332\]: Failed password for invalid user 1234$ABCD from 159.65.155.227 port 57436 ssh2 Oct 22 02:47:32 xtremcommunity sshd\[768426\]: Invalid user 1 from 159.65.155.227 port 39126 Oct 22 02:47:32 xtremcommunity sshd\[768426\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 ...	2019-10-22 15:01:21
188.165.24.200	attackbots	detected by Fail2Ban	2019-10-22 14:43:11
159.203.201.196	attackbots	UTC: 2019-10-21 port: 264/tcp	2019-10-22 15:07:13
94.191.50.114	attack	Oct 22 06:48:12 localhost sshd\[31066\]: Invalid user monitor1 from 94.191.50.114 port 41306 Oct 22 06:48:12 localhost sshd\[31066\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.114 Oct 22 06:48:13 localhost sshd\[31066\]: Failed password for invalid user monitor1 from 94.191.50.114 port 41306 ssh2	2019-10-22 14:59:24
104.131.37.34	attackspambots	detected by Fail2Ban	2019-10-22 14:45:35
118.92.93.233	attack	$f2bV_matches	2019-10-22 14:54:21
95.6.86.143	attackbotsspam	UTC: 2019-10-21 port: 23/tcp	2019-10-22 14:52:43
5.135.181.11	attackspambots	2019-10-22T02:03:30.770848ns525875 sshd\[2074\]: Invalid user yw from 5.135.181.11 port 52264 2019-10-22T02:03:30.777611ns525875 sshd\[2074\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3010967.ip-5-135-181.eu 2019-10-22T02:03:32.845436ns525875 sshd\[2074\]: Failed password for invalid user yw from 5.135.181.11 port 52264 ssh2 2019-10-22T02:08:21.157128ns525875 sshd\[8159\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3010967.ip-5-135-181.eu user=root ...	2019-10-22 15:18:49
144.217.50.242	attackspam	Oct 22 08:07:43 nginx sshd[57213]: Invalid user test from 144.217.50.242 Oct 22 08:07:43 nginx sshd[57213]: Received disconnect from 144.217.50.242 port 35570:11: Normal Shutdown, Thank you for playing [preauth]	2019-10-22 15:11:02
2.153.59.116	attackspambots	Brute force attempt	2019-10-22 15:10:35
182.50.130.27	attackbots	Automatic report - XMLRPC Attack	2019-10-22 15:21:34
51.83.104.120	attackspambots	2019-10-22T04:39:29.238744shield sshd\[28653\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.104.120 user=root 2019-10-22T04:39:31.359564shield sshd\[28653\]: Failed password for root from 51.83.104.120 port 49772 ssh2 2019-10-22T04:43:20.388702shield sshd\[29694\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.104.120 user=root 2019-10-22T04:43:21.887466shield sshd\[29694\]: Failed password for root from 51.83.104.120 port 59402 ssh2 2019-10-22T04:47:18.849990shield sshd\[30584\]: Invalid user user from 51.83.104.120 port 40800	2019-10-22 15:15:45
195.154.191.151	attackbots	\[2019-10-22 00:16:21\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '195.154.191.151:55095' - Wrong password \[2019-10-22 00:16:21\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-22T00:16:21.946-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="309",SessionID="0x7f6130804e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.191.151/55095",Challenge="4c7de8aa",ReceivedChallenge="4c7de8aa",ReceivedHash="2a54a76cf5959fd8691a065aeaa9e285" \[2019-10-22 00:17:27\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '195.154.191.151:54451' - Wrong password \[2019-10-22 00:17:27\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-22T00:17:27.536-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="109",SessionID="0x7f6130477218",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154	2019-10-22 14:50:43

最近上报的IP列表

185.54.228.83	111.206.198.56	180.76.73.219	202.239.227.79
169.229.216.44	180.76.79.3	180.76.166.155	180.76.34.237
27.14.45.27	35.87.172.104	169.229.255.140	180.76.35.3
180.76.34.183	180.76.81.26	138.99.176.138	169.229.169.174
180.76.78.202	180.76.108.20	103.144.2.54	111.252.186.90