106.12.12.152 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Jun 2 23:13:59 piServer sshd[22161]: Failed password for root from 106.12.12.152 port 48488 ssh2 Jun 2 23:17:34 piServer sshd[22469]: Failed password for root from 106.12.12.152 port 43776 ssh2 ...	2020-06-03 05:25:45

相同子网IP讨论:

IP	类型	评论内容	时间
106.12.125.241	attack	Oct 12 23:39:26 localhost sshd[1152202]: Invalid user CVSROOT from 106.12.125.241 port 37014 ...	2020-10-12 23:39:48
106.12.125.241	attack	ssh brute force	2020-10-12 15:02:58
106.12.121.179	attackbotsspam	Brute-force attempt banned	2020-10-10 03:44:36
106.12.126.114	attackbots	ET SCAN NMAP -sS window 1024	2020-10-10 03:29:42
106.12.121.179	attack	sshd: Failed password for invalid user .... from 106.12.121.179 port 54966 ssh2 (8 attempts)	2020-10-09 19:40:25
106.12.126.114	attack	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-09 19:22:57
106.12.125.241	attackbots	Oct 9 09:47:45 ns382633 sshd\[20848\]: Invalid user administrator from 106.12.125.241 port 55126 Oct 9 09:47:45 ns382633 sshd\[20848\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.241 Oct 9 09:47:47 ns382633 sshd\[20848\]: Failed password for invalid user administrator from 106.12.125.241 port 55126 ssh2 Oct 9 09:53:23 ns382633 sshd\[21610\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.241 user=root Oct 9 09:53:25 ns382633 sshd\[21610\]: Failed password for root from 106.12.125.241 port 48080 ssh2	2020-10-09 17:42:14
106.12.123.239	attackspam	Found on CINS badguys / proto=6 . srcport=56933 . dstport=3508 . (5380)	2020-10-09 04:11:23
106.12.123.239	attackspambots	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-08 20:19:28
106.12.123.239	attackspam	Failed password for invalid user samba from 106.12.123.239 port 42704 ssh2	2020-10-08 12:15:56
106.12.123.239	attackspambots	TCP (SYN) 106.12.123.239:53351 -> port 20725, len 44	2020-10-08 07:36:48
106.12.127.39	attackspam	Oct 6 00:16:59 dev0-dcde-rnet sshd[24466]: Failed password for root from 106.12.127.39 port 35302 ssh2 Oct 6 00:22:53 dev0-dcde-rnet sshd[24535]: Failed password for root from 106.12.127.39 port 54790 ssh2	2020-10-06 08:01:45
106.12.127.39	attackbotsspam	$f2bV_matches	2020-10-05 16:23:30
106.12.125.178	attack	2020-10-04T00:32:21.990228mail.standpoint.com.ua sshd[8726]: Invalid user admin from 106.12.125.178 port 57304 2020-10-04T00:32:21.992993mail.standpoint.com.ua sshd[8726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.178 2020-10-04T00:32:21.990228mail.standpoint.com.ua sshd[8726]: Invalid user admin from 106.12.125.178 port 57304 2020-10-04T00:32:23.391915mail.standpoint.com.ua sshd[8726]: Failed password for invalid user admin from 106.12.125.178 port 57304 ssh2 2020-10-04T00:33:47.893416mail.standpoint.com.ua sshd[8899]: Invalid user minecraft from 106.12.125.178 port 51324 ...	2020-10-04 07:12:02
106.12.125.178	attack	Oct 3 14:13:57 *** sshd[15317]: User root from 106.12.125.178 not allowed because not listed in AllowUsers	2020-10-03 23:26:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.12.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56526
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.12.152.			IN	A

;; AUTHORITY SECTION:
.			521	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060202 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 03 05:25:41 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 152.12.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 152.12.12.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
128.199.137.252	attackspambots	Sep 1 22:34:46 mail sshd\[11150\]: Failed password for invalid user svn from 128.199.137.252 port 60966 ssh2 Sep 1 22:39:36 mail sshd\[11941\]: Invalid user deployer from 128.199.137.252 port 48794 Sep 1 22:39:36 mail sshd\[11941\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.137.252 Sep 1 22:39:38 mail sshd\[11941\]: Failed password for invalid user deployer from 128.199.137.252 port 48794 ssh2 Sep 1 22:44:24 mail sshd\[12501\]: Invalid user teste from 128.199.137.252 port 36618	2019-09-02 08:03:29
203.160.132.4	attackspam	Sep 2 00:54:37 debian sshd\[30015\]: Invalid user getmail from 203.160.132.4 port 38326 Sep 2 00:54:37 debian sshd\[30015\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.160.132.4 ...	2019-09-02 08:11:35
139.198.4.44	attackbots	Sep 1 13:09:39 php2 sshd\[14257\]: Invalid user nash from 139.198.4.44 Sep 1 13:09:39 php2 sshd\[14257\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.4.44 Sep 1 13:09:41 php2 sshd\[14257\]: Failed password for invalid user nash from 139.198.4.44 port 58636 ssh2 Sep 1 13:14:39 php2 sshd\[14692\]: Invalid user marcio from 139.198.4.44 Sep 1 13:14:39 php2 sshd\[14692\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.4.44	2019-09-02 08:12:56
91.137.8.221	attackbots	Sep 1 22:02:35 localhost sshd\[25438\]: Invalid user start from 91.137.8.221 port 48604 Sep 1 22:02:35 localhost sshd\[25438\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.137.8.221 Sep 1 22:02:36 localhost sshd\[25438\]: Failed password for invalid user start from 91.137.8.221 port 48604 ssh2 ...	2019-09-02 08:29:44
177.128.121.210	attack	Automatic report - Port Scan Attack	2019-09-02 08:49:25
198.245.63.151	attackbots	Sep 2 00:32:01 www_kotimaassa_fi sshd[27890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.63.151 Sep 2 00:32:03 www_kotimaassa_fi sshd[27890]: Failed password for invalid user adam from 198.245.63.151 port 35536 ssh2 ...	2019-09-02 08:33:21
77.247.108.187	attackbots	SIPVicious Scanner Detection, PTR: PTR record not found	2019-09-02 08:23:16
62.210.7.218	attack	SPF: NEUTRAL with IP 62.210.7.218 Learn more DKIM: 'PASS' with domain elegist.org.uk Learn more DMARC: 'PASS' Learn more	2019-09-02 08:39:07
107.170.109.82	attack	SSH Brute-Force attacks	2019-09-02 08:36:02
164.132.207.231	attackbots	Sep 1 10:32:44 tdfoods sshd\[1847\]: Invalid user sal from 164.132.207.231 Sep 1 10:32:44 tdfoods sshd\[1847\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3075598.ip-164-132-207.eu Sep 1 10:32:46 tdfoods sshd\[1847\]: Failed password for invalid user sal from 164.132.207.231 port 32806 ssh2 Sep 1 10:36:36 tdfoods sshd\[2129\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3075598.ip-164-132-207.eu user=root Sep 1 10:36:38 tdfoods sshd\[2129\]: Failed password for root from 164.132.207.231 port 49024 ssh2	2019-09-02 08:54:22
149.129.244.23	attackspambots	[ssh] SSH attack	2019-09-02 08:56:01
77.247.109.72	attack	\[2019-09-01 20:03:53\] NOTICE\[1829\] chan_sip.c: Registration from '"401" \' failed for '77.247.109.72:6787' - Wrong password \[2019-09-01 20:03:53\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-01T20:03:53.905-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="401",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/6787",Challenge="6b8665a8",ReceivedChallenge="6b8665a8",ReceivedHash="050f7bc7250964cac8b3687046f2ddff" \[2019-09-01 20:03:54\] NOTICE\[1829\] chan_sip.c: Registration from '"401" \' failed for '77.247.109.72:6787' - Wrong password \[2019-09-01 20:03:54\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-01T20:03:54.248-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="401",SessionID="0x7f7b30899568",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-09-02 08:23:46
117.69.51.164	attack	2019-09-01 12:28:29 dovecot_login authenticator failed for (rlrnlskrgk.com) [117.69.51.164]:51887 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-09-01 12:28:39 dovecot_login authenticator failed for (rlrnlskrgk.com) [117.69.51.164]:52250 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-09-01 12:28:52 dovecot_login authenticator failed for (rlrnlskrgk.com) [117.69.51.164]:52969 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) ...	2019-09-02 08:35:05
13.126.42.80	attack	2019-09-01T23:48:41.525225abusebot-8.cloudsearch.cf sshd\[2107\]: Invalid user kaylie from 13.126.42.80 port 22915	2019-09-02 08:16:25
92.118.37.82	attackbotsspam	Sep 2 02:03:09 h2177944 kernel: \[259250.707362\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=12776 PROTO=TCP SPT=55326 DPT=25309 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:03:20 h2177944 kernel: \[259261.746723\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=59440 PROTO=TCP SPT=55326 DPT=28599 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:04:22 h2177944 kernel: \[259324.084524\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=9335 PROTO=TCP SPT=55326 DPT=26581 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:06:57 h2177944 kernel: \[259478.739938\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=43128 PROTO=TCP SPT=55326 DPT=22328 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:07:05 h2177944 kernel: \[259487.593435\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40	2019-09-02 08:10:44

最近上报的IP列表

114.119.163.68	191.30.128.76	109.90.32.102	109.156.255.106
219.137.52.230	37.221.164.176	2a0d:a740:1:0:65ee:ba1:a947:fea4	40.71.217.26
191.189.238.135	67.227.43.31	52.130.85.214	111.34.220.91
189.106.247.227	175.194.121.189	3.15.114.182	191.245.174.237
78.32.24.152	221.218.121.139	80.61.54.146	62.172.119.80