106.12.100.13 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Jan 9 23:36:15 woltan sshd[18890]: Failed password for root from 106.12.100.13 port 44888 ssh2	2020-03-21 04:23:08
attack	Invalid user rohit from 106.12.100.13 port 36768	2020-03-12 16:49:10
attack	Feb 18 08:03:29 [host] sshd[11682]: Invalid user f Feb 18 08:03:29 [host] sshd[11682]: pam_unix(sshd: Feb 18 08:03:31 [host] sshd[11682]: Failed passwor	2020-02-18 19:01:41
attackspam	Dec 30 02:19:10 nbi-636 sshd[15275]: User r.r from 106.12.100.13 not allowed because not listed in AllowUsers Dec 30 02:19:10 nbi-636 sshd[15275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.13 user=r.r Dec 30 02:19:11 nbi-636 sshd[15275]: Failed password for invalid user r.r from 106.12.100.13 port 36406 ssh2 Dec 30 02:19:12 nbi-636 sshd[15275]: Received disconnect from 106.12.100.13 port 36406:11: Bye Bye [preauth] Dec 30 02:19:12 nbi-636 sshd[15275]: Disconnected from 106.12.100.13 port 36406 [preauth] Dec 30 02:29:10 nbi-636 sshd[17222]: Invalid user cal from 106.12.100.13 port 36542 Dec 30 02:29:13 nbi-636 sshd[17222]: Failed password for invalid user cal from 106.12.100.13 port 36542 ssh2 Dec 30 02:29:13 nbi-636 sshd[17222]: Received disconnect from 106.12.100.13 port 36542:11: Bye Bye [preauth] Dec 30 02:29:13 nbi-636 sshd[17222]: Disconnected from 106.12.100.13 port 36542 [preauth] Dec 30 02:33:04 nbi-636 s........ -------------------------------	2019-12-31 16:44:02

相同子网IP讨论:

IP	类型	评论内容	时间
106.12.100.206	attackspam	SSH Brute Force	2020-10-14 05:58:54
106.12.100.206	attackspam	$f2bV_matches	2020-10-10 02:34:31
106.12.100.206	attackbots	(sshd) Failed SSH login from 106.12.100.206 (CN/China/-): 5 in the last 3600 secs	2020-10-09 18:19:41
106.12.100.206	attackbotsspam	Invalid user demo from 106.12.100.206 port 45768	2020-10-02 02:22:37
106.12.100.206	attackspambots	Invalid user demo from 106.12.100.206 port 45768	2020-10-01 18:32:15
106.12.100.73	attackspam	5x Failed Password	2020-09-28 04:45:22
106.12.100.73	attack	(sshd) Failed SSH login from 106.12.100.73 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 27 06:53:05 server4 sshd[16109]: Invalid user itsupport from 106.12.100.73 Sep 27 06:53:05 server4 sshd[16109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.73 Sep 27 06:53:06 server4 sshd[16109]: Failed password for invalid user itsupport from 106.12.100.73 port 43948 ssh2 Sep 27 06:59:33 server4 sshd[19907]: Invalid user nexthink from 106.12.100.73 Sep 27 06:59:33 server4 sshd[19907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.73	2020-09-27 21:03:28
106.12.100.73	attackbots	Sep 27 01:38:12 ns392434 sshd[11988]: Invalid user testuser from 106.12.100.73 port 33568 Sep 27 01:38:12 ns392434 sshd[11988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.73 Sep 27 01:38:12 ns392434 sshd[11988]: Invalid user testuser from 106.12.100.73 port 33568 Sep 27 01:38:15 ns392434 sshd[11988]: Failed password for invalid user testuser from 106.12.100.73 port 33568 ssh2 Sep 27 01:53:48 ns392434 sshd[12520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.73 user=root Sep 27 01:53:50 ns392434 sshd[12520]: Failed password for root from 106.12.100.73 port 56730 ssh2 Sep 27 01:58:18 ns392434 sshd[12650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.73 user=root Sep 27 01:58:20 ns392434 sshd[12650]: Failed password for root from 106.12.100.73 port 59232 ssh2 Sep 27 02:02:41 ns392434 sshd[12686]: Invalid user auditoria from 106.12.100.73 port 33484	2020-09-27 12:43:19
106.12.100.206	attackbots	2020-08-30T03:43:23.073148morrigan.ad5gb.com sshd[410396]: Failed password for invalid user storage from 106.12.100.206 port 33866 ssh2 2020-08-30T03:43:23.400860morrigan.ad5gb.com sshd[410396]: Disconnected from invalid user storage 106.12.100.206 port 33866 [preauth]	2020-08-30 17:23:42
106.12.100.206	attackspambots	Bruteforce detected by fail2ban	2020-08-27 23:24:06
106.12.100.206	attack	Invalid user jenkins from 106.12.100.206 port 45660	2020-08-25 22:45:39
106.12.100.206	attackspambots	Aug 23 17:49:31 buvik sshd[1573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.206 Aug 23 17:49:33 buvik sshd[1573]: Failed password for invalid user tryton from 106.12.100.206 port 52484 ssh2 Aug 23 17:54:45 buvik sshd[2286]: Invalid user le from 106.12.100.206 ...	2020-08-24 03:20:54
106.12.100.206	attack	Aug 21 18:25:35 wbs sshd\[27428\]: Invalid user ankit from 106.12.100.206 Aug 21 18:25:35 wbs sshd\[27428\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.206 Aug 21 18:25:37 wbs sshd\[27428\]: Failed password for invalid user ankit from 106.12.100.206 port 55224 ssh2 Aug 21 18:30:53 wbs sshd\[27762\]: Invalid user edwin from 106.12.100.206 Aug 21 18:30:53 wbs sshd\[27762\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.100.206	2020-08-22 13:04:34
106.12.100.73	attackbotsspam	Aug 13 10:42:47 piServer sshd[29954]: Failed password for root from 106.12.100.73 port 57150 ssh2 Aug 13 10:46:40 piServer sshd[30446]: Failed password for root from 106.12.100.73 port 44864 ssh2 ...	2020-08-13 18:09:11
106.12.100.206	attackbotsspam	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-13 07:37:09

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.100.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17951
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.100.13.			IN	A

;; AUTHORITY SECTION:
.			519	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123100 1800 900 604800 86400

;; Query time: 969 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 16:43:57 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 13.100.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 13.100.12.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
139.204.71.218	attackbots	Jul 1 00:48:20 server sshd\[96196\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.204.71.218 user=root Jul 1 00:48:22 server sshd\[96196\]: Failed password for root from 139.204.71.218 port 38300 ssh2 Jul 1 00:48:25 server sshd\[96196\]: Failed password for root from 139.204.71.218 port 38300 ssh2 ...	2019-07-12 07:44:14
185.40.4.67	attackbotsspam	\[2019-07-11 19:38:16\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '185.40.4.67:57369' - Wrong password \[2019-07-11 19:38:16\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-11T19:38:16.793-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="115",SessionID="0x7f02f8994028",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.67/57369",Challenge="2a33bfc2",ReceivedChallenge="2a33bfc2",ReceivedHash="cc98978b7e027e5d1f3195c67b9d6351" \[2019-07-11 19:38:40\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '185.40.4.67:49257' - Wrong password \[2019-07-11 19:38:40\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-11T19:38:40.943-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7f02f94cdc98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.67/4	2019-07-12 07:47:36
139.199.113.140	attackbotsspam	May 7 03:44:44 server sshd\[176957\]: Invalid user dirsrv from 139.199.113.140 May 7 03:44:44 server sshd\[176957\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 May 7 03:44:46 server sshd\[176957\]: Failed password for invalid user dirsrv from 139.199.113.140 port 51578 ssh2 ...	2019-07-12 08:04:28
162.243.143.131	attack	11.07.2019 21:23:03 Connection to port 636 blocked by firewall	2019-07-12 07:51:13
139.199.119.26	attackspambots	May 31 06:41:30 server sshd\[201918\]: Invalid user amsftp from 139.199.119.26 May 31 06:41:30 server sshd\[201918\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.119.26 May 31 06:41:32 server sshd\[201918\]: Failed password for invalid user amsftp from 139.199.119.26 port 46156 ssh2 ...	2019-07-12 08:03:58
139.59.149.183	attack	Jul 9 06:01:23 server sshd\[159473\]: Invalid user web2 from 139.59.149.183 Jul 9 06:01:23 server sshd\[159473\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.149.183 Jul 9 06:01:25 server sshd\[159473\]: Failed password for invalid user web2 from 139.59.149.183 port 40006 ssh2 ...	2019-07-12 07:31:05
206.189.181.86	attack	Jul 12 00:10:08 animalibera sshd[18302]: Invalid user opera from 206.189.181.86 port 51238 ...	2019-07-12 08:16:30
117.220.0.146	attack	Scanning random ports - tries to find possible vulnerable services	2019-07-12 07:30:49
139.199.89.117	attack	May 29 11:31:19 server sshd\[126462\]: Invalid user linux from 139.199.89.117 May 29 11:31:19 server sshd\[126462\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.89.117 May 29 11:31:20 server sshd\[126462\]: Failed password for invalid user linux from 139.199.89.117 port 47922 ssh2 ...	2019-07-12 07:46:39
71.189.47.10	attackspambots	Invalid user appserver from 71.189.47.10 port 55055	2019-07-12 07:45:50
206.189.65.11	attackbotsspam	Tried sshing with brute force.	2019-07-12 08:17:01
213.32.70.183	attackspambots	ssh failed login	2019-07-12 07:36:39
139.219.10.63	attackspam	Jul 1 22:36:48 server sshd\[223044\]: Invalid user test from 139.219.10.63 Jul 1 22:36:48 server sshd\[223044\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.10.63 Jul 1 22:36:50 server sshd\[223044\]: Failed password for invalid user test from 139.219.10.63 port 52488 ssh2 ...	2019-07-12 07:43:47
139.59.147.33	attackspambots	May 3 15:27:36 server sshd\[39243\]: Invalid user zimbra from 139.59.147.33 May 3 15:27:36 server sshd\[39243\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.147.33 May 3 15:27:38 server sshd\[39243\]: Failed password for invalid user zimbra from 139.59.147.33 port 33972 ssh2 ...	2019-07-12 07:32:11
78.189.229.247	attackspambots	Unauthorized connection attempt from IP address 78.189.229.247 on Port 445(SMB)	2019-07-12 08:03:35

最近上报的IP列表

95.156.236.14	104.37.187.26	118.25.186.146	180.35.116.224
142.11.218.177	42.52.65.230	195.206.183.216	47.96.237.64
58.219.213.3	58.215.194.146	14.170.154.45	171.105.248.161
200.75.150.142	123.148.246.162	106.13.119.58	117.199.69.82
77.40.45.254	142.11.218.181	103.120.6.251	18.162.50.115