必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
106.12.148.170 attack
Oct 13 17:25:17 server sshd[26547]: Failed password for invalid user vsftpd from 106.12.148.170 port 48018 ssh2
Oct 13 17:29:10 server sshd[28630]: Failed password for invalid user quiros from 106.12.148.170 port 59850 ssh2
Oct 13 17:32:51 server sshd[30741]: Failed password for root from 106.12.148.170 port 43450 ssh2
2020-10-14 00:30:01
106.12.148.154 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-13 23:15:47
106.12.148.170 attack
Invalid user cb from 106.12.148.170 port 47326
2020-10-13 15:40:59
106.12.148.154 attackbotsspam
Oct 12 08:48:24 v26 sshd[4335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.154  user=r.r
Oct 12 08:48:25 v26 sshd[4335]: Failed password for r.r from 106.12.148.154 port 53357 ssh2
Oct 12 08:48:25 v26 sshd[4335]: Received disconnect from 106.12.148.154 port 53357:11: Bye Bye [preauth]
Oct 12 08:48:25 v26 sshd[4335]: Disconnected from 106.12.148.154 port 53357 [preauth]
Oct 12 08:58:27 v26 sshd[5841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.154  user=r.r
Oct 12 08:58:29 v26 sshd[5841]: Failed password for r.r from 106.12.148.154 port 54441 ssh2
Oct 12 08:58:29 v26 sshd[5841]: Received disconnect from 106.12.148.154 port 54441:11: Bye Bye [preauth]
Oct 12 08:58:29 v26 sshd[5841]: Disconnected from 106.12.148.154 port 54441 [preauth]
Oct 12 09:02:29 v26 sshd[6474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.1........
-------------------------------
2020-10-13 14:32:48
106.12.148.170 attackbots
SSH brute-force attempt
2020-10-13 08:16:48
106.12.148.154 attack
Oct 12 08:48:24 v26 sshd[4335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.154  user=r.r
Oct 12 08:48:25 v26 sshd[4335]: Failed password for r.r from 106.12.148.154 port 53357 ssh2
Oct 12 08:48:25 v26 sshd[4335]: Received disconnect from 106.12.148.154 port 53357:11: Bye Bye [preauth]
Oct 12 08:48:25 v26 sshd[4335]: Disconnected from 106.12.148.154 port 53357 [preauth]
Oct 12 08:58:27 v26 sshd[5841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.154  user=r.r
Oct 12 08:58:29 v26 sshd[5841]: Failed password for r.r from 106.12.148.154 port 54441 ssh2
Oct 12 08:58:29 v26 sshd[5841]: Received disconnect from 106.12.148.154 port 54441:11: Bye Bye [preauth]
Oct 12 08:58:29 v26 sshd[5841]: Disconnected from 106.12.148.154 port 54441 [preauth]
Oct 12 09:02:29 v26 sshd[6474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.1........
-------------------------------
2020-10-13 07:14:00
106.12.148.170 attack
Oct  7 17:54:11 dev0-dcde-rnet sshd[8763]: Failed password for root from 106.12.148.170 port 36916 ssh2
Oct  7 17:59:40 dev0-dcde-rnet sshd[8788]: Failed password for root from 106.12.148.170 port 36546 ssh2
2020-10-08 05:48:25
106.12.148.170 attackbotsspam
2020-10-06T22:39:57.103856shield sshd\[6255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.170  user=root
2020-10-06T22:39:58.968096shield sshd\[6255\]: Failed password for root from 106.12.148.170 port 51866 ssh2
2020-10-06T22:44:05.757563shield sshd\[6611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.170  user=root
2020-10-06T22:44:07.667391shield sshd\[6611\]: Failed password for root from 106.12.148.170 port 54962 ssh2
2020-10-06T22:48:13.684314shield sshd\[7030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.170  user=root
2020-10-07 14:04:02
106.12.148.74 attackspambots
2020-10-01T10:48:50.173302ionos.janbro.de sshd[191644]: Failed password for root from 106.12.148.74 port 34782 ssh2
2020-10-01T10:51:52.634872ionos.janbro.de sshd[191657]: Invalid user user2 from 106.12.148.74 port 48520
2020-10-01T10:51:52.867944ionos.janbro.de sshd[191657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74
2020-10-01T10:51:52.634872ionos.janbro.de sshd[191657]: Invalid user user2 from 106.12.148.74 port 48520
2020-10-01T10:51:54.559763ionos.janbro.de sshd[191657]: Failed password for invalid user user2 from 106.12.148.74 port 48520 ssh2
2020-10-01T10:54:52.963134ionos.janbro.de sshd[191672]: Invalid user oracle from 106.12.148.74 port 34042
2020-10-01T10:54:53.101926ionos.janbro.de sshd[191672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74
2020-10-01T10:54:52.963134ionos.janbro.de sshd[191672]: Invalid user oracle from 106.12.148.74 port 34042
2020-10-01T10:54
...
2020-10-02 02:42:44
106.12.148.74 attackbotsspam
Oct  1 12:34:31 roki-contabo sshd\[3687\]: Invalid user sun from 106.12.148.74
Oct  1 12:34:31 roki-contabo sshd\[3687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74
Oct  1 12:34:33 roki-contabo sshd\[3687\]: Failed password for invalid user sun from 106.12.148.74 port 33524 ssh2
Oct  1 12:39:52 roki-contabo sshd\[3762\]: Invalid user zope from 106.12.148.74
Oct  1 12:39:52 roki-contabo sshd\[3762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74
...
2020-10-01 18:54:05
106.12.148.127 attack
$f2bV_matches
2020-09-29 12:19:33
106.12.148.74 attack
Sep 28 21:48:27 pornomens sshd\[9741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74  user=root
Sep 28 21:48:29 pornomens sshd\[9741\]: Failed password for root from 106.12.148.74 port 41642 ssh2
Sep 28 21:51:18 pornomens sshd\[9766\]: Invalid user teste from 106.12.148.74 port 54750
Sep 28 21:51:18 pornomens sshd\[9766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74
...
2020-09-29 06:20:14
106.12.148.74 attackspambots
Sep 28 13:43:59 jumpserver sshd[355833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74 
Sep 28 13:43:59 jumpserver sshd[355833]: Invalid user sonar from 106.12.148.74 port 52274
Sep 28 13:44:01 jumpserver sshd[355833]: Failed password for invalid user sonar from 106.12.148.74 port 52274 ssh2
...
2020-09-28 22:45:33
106.12.148.74 attackbots
(sshd) Failed SSH login from 106.12.148.74 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 28 00:03:25 server sshd[5089]: Invalid user max from 106.12.148.74 port 42722
Sep 28 00:03:27 server sshd[5089]: Failed password for invalid user max from 106.12.148.74 port 42722 ssh2
Sep 28 00:08:36 server sshd[6402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.148.74  user=root
Sep 28 00:08:37 server sshd[6402]: Failed password for root from 106.12.148.74 port 45430 ssh2
Sep 28 00:12:57 server sshd[7694]: Invalid user hex from 106.12.148.74 port 48098
2020-09-28 14:50:45
106.12.148.170 attackspambots
Triggered by Fail2Ban at Ares web server
2020-09-16 00:56:31
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.148.144
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3559
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.12.148.144.			IN	A

;; AUTHORITY SECTION:
.			560	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 11:55:41 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 144.148.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 144.148.12.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
165.227.117.255 attackspam
Sep 15 14:06:55 *** sshd[20472]: User root from 165.227.117.255 not allowed because not listed in AllowUsers
2020-09-15 22:25:21
139.59.129.45 attack
SSH Login Bruteforce
2020-09-15 22:19:06
164.132.44.218 attack
Time:     Tue Sep 15 14:15:33 2020 +0000
IP:       164.132.44.218 (FR/France/218.ip-164-132-44.eu)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 15 14:00:40 ca-48-ede1 sshd[76170]: Failed password for root from 164.132.44.218 port 47244 ssh2
Sep 15 14:06:43 ca-48-ede1 sshd[76978]: Invalid user oracle from 164.132.44.218 port 36921
Sep 15 14:06:44 ca-48-ede1 sshd[76978]: Failed password for invalid user oracle from 164.132.44.218 port 36921 ssh2
Sep 15 14:11:12 ca-48-ede1 sshd[77612]: Failed password for root from 164.132.44.218 port 45248 ssh2
Sep 15 14:15:31 ca-48-ede1 sshd[78211]: Failed password for root from 164.132.44.218 port 53868 ssh2
2020-09-15 22:47:12
212.64.60.50 attack
Sep 15 15:40:39 marvibiene sshd[18587]: Failed password for root from 212.64.60.50 port 46952 ssh2
2020-09-15 22:37:57
194.168.212.81 attackspam
Sep 15 15:27:36 web01.agentur-b-2.de postfix/smtpd[137099]: NOQUEUE: reject: RCPT from smtp.st-ambrosecollege.org.uk[194.168.212.81]: 450 4.7.1 : Helo command rejected: Host not found; from=<14ByrneKieron@st-ambrosecollege.org.uk> to= proto=ESMTP helo=
Sep 15 15:28:41 web01.agentur-b-2.de postfix/smtpd[137024]: NOQUEUE: reject: RCPT from smtp.st-ambrosecollege.org.uk[194.168.212.81]: 450 4.7.1 : Helo command rejected: Host not found; from=<14ByrneKieron@st-ambrosecollege.org.uk> to= proto=ESMTP helo=
Sep 15 15:29:46 web01.agentur-b-2.de postfix/smtpd[137024]: NOQUEUE: reject: RCPT from smtp.st-ambrosecollege.org.uk[194.168.212.81]: 450 4.7.1 : Helo command rejected: Host not found; from=<14ByrneKieron@st-ambrosecollege.org.uk> to= proto=ESMTP helo=
2020-09-15 23:00:22
36.255.156.126 attackbots
Sep 15 14:27:24 sip sshd[1607142]: Failed password for root from 36.255.156.126 port 42040 ssh2
Sep 15 14:32:12 sip sshd[1607164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.255.156.126  user=root
Sep 15 14:32:13 sip sshd[1607164]: Failed password for root from 36.255.156.126 port 53962 ssh2
...
2020-09-15 22:20:25
179.212.136.198 attack
Brute%20Force%20SSH
2020-09-15 22:20:08
152.89.216.33 attack
SSH/22 MH Probe, BF, Hack -
2020-09-15 22:38:52
98.254.104.71 attackbots
4x Failed Password
2020-09-15 22:19:52
201.20.185.14 attackbotsspam
Sep 14 18:36:48 mail.srvfarm.net postfix/smtpd[2076885]: warning: unknown[201.20.185.14]: SASL PLAIN authentication failed: 
Sep 14 18:36:49 mail.srvfarm.net postfix/smtpd[2076885]: lost connection after AUTH from unknown[201.20.185.14]
Sep 14 18:38:10 mail.srvfarm.net postfix/smtpd[2076880]: warning: unknown[201.20.185.14]: SASL PLAIN authentication failed: 
Sep 14 18:38:10 mail.srvfarm.net postfix/smtpd[2076880]: lost connection after AUTH from unknown[201.20.185.14]
Sep 14 18:39:03 mail.srvfarm.net postfix/smtpd[2073290]: warning: unknown[201.20.185.14]: SASL PLAIN authentication failed:
2020-09-15 22:59:32
93.236.95.59 attackbots
(sshd) Failed SSH login from 93.236.95.59 (DE/Germany/Bavaria/A-Burg/p5dec5f3b.dip0.t-ipconnect.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 14 14:10:03 atlas sshd[17435]: Invalid user samouris from 93.236.95.59 port 39234
Sep 14 14:10:06 atlas sshd[17435]: Failed password for invalid user samouris from 93.236.95.59 port 39234 ssh2
Sep 14 14:20:25 atlas sshd[19804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.236.95.59  user=root
Sep 14 14:20:27 atlas sshd[19804]: Failed password for root from 93.236.95.59 port 41314 ssh2
Sep 14 14:28:28 atlas sshd[22047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.236.95.59  user=root
2020-09-15 22:50:34
61.216.45.205 attackbots
 TCP (SYN) 61.216.45.205:60747 -> port 81, len 44
2020-09-15 22:45:52
167.250.49.216 attack
SSH/22 MH Probe, BF, Hack -
2020-09-15 22:27:03
111.229.176.206 attackbots
$f2bV_matches
2020-09-15 22:21:33
190.85.162.162 attackspambots
Bruteforce detected by fail2ban
2020-09-15 22:21:06

最近上报的IP列表

106.12.155.136 106.12.155.161 106.12.159.225 106.12.168.231
106.12.162.156 112.81.60.4 106.12.19.60 237.83.95.68
112.81.68.50 112.81.74.76 106.13.60.41 106.13.31.20
106.13.201.9 106.13.227.67 106.13.22.236 106.13.42.251
106.13.55.102 106.13.230.132 112.81.8.159 106.13.2.118