必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attack
Nov 10 17:08:48 ArkNodeAT sshd\[30902\]: Invalid user 7890 from 106.12.132.66
Nov 10 17:08:48 ArkNodeAT sshd\[30902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66
Nov 10 17:08:50 ArkNodeAT sshd\[30902\]: Failed password for invalid user 7890 from 106.12.132.66 port 49164 ssh2
2019-11-11 01:32:40
attackbots
Nov  6 06:58:58 bouncer sshd\[18224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=root
Nov  6 06:59:01 bouncer sshd\[18224\]: Failed password for root from 106.12.132.66 port 35574 ssh2
Nov  6 07:03:37 bouncer sshd\[18231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=root
...
2019-11-06 14:17:21
attackspam
Oct 30 07:57:29 server sshd\[26886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=root
Oct 30 07:57:30 server sshd\[26886\]: Failed password for root from 106.12.132.66 port 37854 ssh2
Oct 30 08:07:22 server sshd\[29276\]: Invalid user lorena from 106.12.132.66
Oct 30 08:07:22 server sshd\[29276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66 
Oct 30 08:07:24 server sshd\[29276\]: Failed password for invalid user lorena from 106.12.132.66 port 42100 ssh2
...
2019-10-30 15:27:54
attack
2019-10-29T12:08:59.367116abusebot-2.cloudsearch.cf sshd\[3476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=root
2019-10-30 00:11:18
attackspam
2019-10-29T09:24:19.414536abusebot-2.cloudsearch.cf sshd\[2751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=root
2019-10-29 17:33:02
attackbotsspam
Oct 15 13:38:27 marvibiene sshd[17934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=root
Oct 15 13:38:29 marvibiene sshd[17934]: Failed password for root from 106.12.132.66 port 57814 ssh2
Oct 15 15:02:48 marvibiene sshd[18600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=root
Oct 15 15:02:51 marvibiene sshd[18600]: Failed password for root from 106.12.132.66 port 35596 ssh2
...
2019-10-15 23:36:41
attack
Oct  5 19:21:18 zn008 sshd[17180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=r.r
Oct  5 19:21:20 zn008 sshd[17180]: Failed password for r.r from 106.12.132.66 port 57434 ssh2
Oct  5 19:21:20 zn008 sshd[17180]: Received disconnect from 106.12.132.66: 11: Bye Bye [preauth]
Oct  5 19:35:55 zn008 sshd[18369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=r.r
Oct  5 19:35:58 zn008 sshd[18369]: Failed password for r.r from 106.12.132.66 port 48566 ssh2
Oct  5 19:35:58 zn008 sshd[18369]: Received disconnect from 106.12.132.66: 11: Bye Bye [preauth]
Oct  5 19:40:31 zn008 sshd[18796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66  user=r.r
Oct  5 19:40:33 zn008
.... truncated .... 

Oct  5 19:21:18 zn008 sshd[17180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ........
-------------------------------
2019-10-08 05:22:30
attackbots
Oct  7 04:51:22 localhost sshd\[95230\]: Invalid user 123Amigo from 106.12.132.66 port 54070
Oct  7 04:51:22 localhost sshd\[95230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66
Oct  7 04:51:24 localhost sshd\[95230\]: Failed password for invalid user 123Amigo from 106.12.132.66 port 54070 ssh2
Oct  7 04:56:14 localhost sshd\[95386\]: Invalid user Steuern@123 from 106.12.132.66 port 60082
Oct  7 04:56:14 localhost sshd\[95386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.66
...
2019-10-07 16:47:28
attackbotsspam
Oct  5 13:37:12 vps691689 sshd[14056]: Failed password for root from 106.12.132.66 port 52054 ssh2
Oct  5 13:41:39 vps691689 sshd[14157]: Failed password for root from 106.12.132.66 port 56060 ssh2
...
2019-10-05 19:54:47
相同子网IP讨论:
IP 类型 评论内容 时间
106.12.132.224 attackspam
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224 
Failed password for invalid user ekim from 106.12.132.224 port 52754 ssh2
Failed password for root from 106.12.132.224 port 36956 ssh2
2020-10-13 00:57:56
106.12.132.224 attackspam
Oct 12 10:14:25 abendstille sshd\[30630\]: Invalid user yoneyama from 106.12.132.224
Oct 12 10:14:25 abendstille sshd\[30630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224
Oct 12 10:14:27 abendstille sshd\[30630\]: Failed password for invalid user yoneyama from 106.12.132.224 port 39144 ssh2
Oct 12 10:18:24 abendstille sshd\[3001\]: Invalid user briacheslav from 106.12.132.224
Oct 12 10:18:24 abendstille sshd\[3001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224
...
2020-10-12 16:21:33
106.12.132.224 attackspam
Aug 23 19:48:42 * sshd[29235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224
Aug 23 19:48:44 * sshd[29235]: Failed password for invalid user rom from 106.12.132.224 port 57872 ssh2
2020-08-24 02:07:29
106.12.132.224 attackbots
$f2bV_matches
2020-08-17 04:02:21
106.12.132.224 attackbotsspam
Ssh brute force
2020-08-12 08:31:21
106.12.132.224 attackbots
Aug  7 17:14:02 ny01 sshd[23643]: Failed password for root from 106.12.132.224 port 35184 ssh2
Aug  7 17:17:01 ny01 sshd[24042]: Failed password for root from 106.12.132.224 port 51424 ssh2
2020-08-08 05:39:45
106.12.132.224 attackbots
$f2bV_matches
2020-08-05 12:50:40
106.12.132.224 attackspambots
SSH bruteforce
2020-07-28 23:57:05
106.12.132.224 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-07-26 08:23:06
106.12.132.86 attackbots
Lines containing failures of 106.12.132.86
Jun 25 07:41:40 neweola sshd[19717]: Invalid user wgr from 106.12.132.86 port 39262
Jun 25 07:41:40 neweola sshd[19717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.86 
Jun 25 07:41:41 neweola sshd[19717]: Failed password for invalid user wgr from 106.12.132.86 port 39262 ssh2
Jun 25 07:41:43 neweola sshd[19717]: Received disconnect from 106.12.132.86 port 39262:11: Bye Bye [preauth]
Jun 25 07:41:43 neweola sshd[19717]: Disconnected from invalid user wgr 106.12.132.86 port 39262 [preauth]
Jun 25 08:19:11 neweola sshd[21124]: Invalid user alok from 106.12.132.86 port 42479
Jun 25 08:19:11 neweola sshd[21124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.86 
Jun 25 08:19:13 neweola sshd[21124]: Failed password for invalid user alok from 106.12.132.86 port 42479 ssh2
Jun 25 08:19:14 neweola sshd[21124]: Received disconnect f........
------------------------------
2020-06-27 02:31:54
106.12.132.224 attackbots
$f2bV_matches
2020-06-25 21:50:28
106.12.132.224 attackspambots
Jun  6 21:49:10 jumpserver sshd[98929]: Failed password for root from 106.12.132.224 port 48750 ssh2
Jun  6 21:52:05 jumpserver sshd[98956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224  user=root
Jun  6 21:52:07 jumpserver sshd[98956]: Failed password for root from 106.12.132.224 port 41842 ssh2
...
2020-06-07 06:43:36
106.12.132.224 attackspam
Jun  5 00:26:18 vmi345603 sshd[11818]: Failed password for root from 106.12.132.224 port 55552 ssh2
...
2020-06-05 07:25:10
106.12.132.224 attackbotsspam
Jun  4 06:36:39 OPSO sshd\[25010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224  user=root
Jun  4 06:36:42 OPSO sshd\[25010\]: Failed password for root from 106.12.132.224 port 54408 ssh2
Jun  4 06:39:43 OPSO sshd\[25136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224  user=root
Jun  4 06:39:45 OPSO sshd\[25136\]: Failed password for root from 106.12.132.224 port 37598 ssh2
Jun  4 06:42:50 OPSO sshd\[25610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.224  user=root
2020-06-04 18:17:15
106.12.132.224 attackbots
May 27 07:25:26 r.ca sshd[20874]: Failed password for root from 106.12.132.224 port 36878 ssh2
2020-05-28 00:57:09
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.132.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39808
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.132.66.			IN	A

;; AUTHORITY SECTION:
.			359	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100500 1800 900 604800 86400

;; Query time: 150 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 05 19:54:44 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 66.132.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 66.132.12.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.248.162.218 attackspam
Aug 25 14:41:33 server sshd\[21673\]: Invalid user windows from 104.248.162.218 port 59192
Aug 25 14:41:33 server sshd\[21673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.162.218
Aug 25 14:41:35 server sshd\[21673\]: Failed password for invalid user windows from 104.248.162.218 port 59192 ssh2
Aug 25 14:45:35 server sshd\[9778\]: Invalid user test from 104.248.162.218 port 32878
Aug 25 14:45:35 server sshd\[9778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.162.218
2019-08-25 21:15:28
120.52.152.17 attack
08/25/2019-09:32:21.049328 120.52.152.17 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-08-25 21:52:46
80.211.252.40 attackbotsspam
From idealista.com
2019-08-25 21:34:25
202.29.33.74 attackbotsspam
Aug 25 09:55:20 OPSO sshd\[8269\]: Invalid user myang from 202.29.33.74 port 42050
Aug 25 09:55:20 OPSO sshd\[8269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.33.74
Aug 25 09:55:22 OPSO sshd\[8269\]: Failed password for invalid user myang from 202.29.33.74 port 42050 ssh2
Aug 25 10:00:32 OPSO sshd\[9022\]: Invalid user it2 from 202.29.33.74 port 59416
Aug 25 10:00:32 OPSO sshd\[9022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.33.74
2019-08-25 22:02:05
223.130.100.157 attackspam
Reported by AbuseIPDB proxy server.
2019-08-25 21:22:49
134.209.237.152 attackspam
Aug 25 03:02:25 lcprod sshd\[12012\]: Invalid user bwadmin from 134.209.237.152
Aug 25 03:02:25 lcprod sshd\[12012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Aug 25 03:02:27 lcprod sshd\[12012\]: Failed password for invalid user bwadmin from 134.209.237.152 port 42632 ssh2
Aug 25 03:06:30 lcprod sshd\[12380\]: Invalid user cdoran from 134.209.237.152
Aug 25 03:06:30 lcprod sshd\[12380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
2019-08-25 21:15:59
129.28.115.92 attack
Aug 24 22:30:13 hpm sshd\[14275\]: Invalid user arm from 129.28.115.92
Aug 24 22:30:13 hpm sshd\[14275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.115.92
Aug 24 22:30:15 hpm sshd\[14275\]: Failed password for invalid user arm from 129.28.115.92 port 41579 ssh2
Aug 24 22:39:40 hpm sshd\[15091\]: Invalid user lx from 129.28.115.92
Aug 24 22:39:40 hpm sshd\[15091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.115.92
2019-08-25 21:32:29
218.92.0.211 attackbots
$f2bV_matches
2019-08-25 21:35:48
106.12.133.247 attackspambots
F2B jail: sshd. Time: 2019-08-25 11:42:13, Reported by: VKReport
2019-08-25 22:15:16
189.86.195.130 attackspambots
Unauthorized connection attempt from IP address 189.86.195.130 on Port 445(SMB)
2019-08-25 21:18:57
78.163.4.234 attackbots
:
2019-08-25 21:39:07
167.71.82.184 attackspam
Aug 25 03:34:31 tdfoods sshd\[28862\]: Invalid user Qwerty1 from 167.71.82.184
Aug 25 03:34:31 tdfoods sshd\[28862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.82.184
Aug 25 03:34:33 tdfoods sshd\[28862\]: Failed password for invalid user Qwerty1 from 167.71.82.184 port 47436 ssh2
Aug 25 03:38:28 tdfoods sshd\[29238\]: Invalid user 123456 from 167.71.82.184
Aug 25 03:38:28 tdfoods sshd\[29238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.82.184
2019-08-25 21:49:06
95.60.133.70 attackbotsspam
Aug 25 09:10:15 XXX sshd[11126]: Invalid user ofsaa from 95.60.133.70 port 35536
2019-08-25 22:06:17
120.52.152.18 attackspambots
08/25/2019-08:37:18.135814 120.52.152.18 Protocol: 17 ET EXPLOIT Wireshark ENTTEC DMX Data Processing Code Execution Attempt 2
2019-08-25 21:44:09
167.114.73.35 attackspambots
SIPVicious Scanner Detection
2019-08-25 21:58:24

最近上报的IP列表

187.162.116.196 52.78.189.104 189.148.63.139 66.249.155.245
65.61.172.50 144.217.183.134 197.96.226.85 183.82.32.140
83.197.28.221 208.56.9.10 157.245.66.20 156.162.160.85
80.112.202.138 115.61.125.51 217.112.128.68 192.169.215.114
202.184.193.65 193.154.102.197 14.21.36.84 198.108.67.131