必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attack
Feb  3 20:36:27 silence02 sshd[29377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.14
Feb  3 20:36:28 silence02 sshd[29377]: Failed password for invalid user hu from 106.12.200.14 port 53166 ssh2
Feb  3 20:39:00 silence02 sshd[29588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.14
2020-02-04 03:52:34
attack
Feb  3 00:30:33 MK-Soft-VM7 sshd[16693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.14 
Feb  3 00:30:35 MK-Soft-VM7 sshd[16693]: Failed password for invalid user eppc from 106.12.200.14 port 47570 ssh2
...
2020-02-03 07:35:15
attackspambots
Unauthorized connection attempt detected from IP address 106.12.200.14 to port 2220 [J]
2020-01-28 00:16:33
attackbots
Unauthorized connection attempt detected from IP address 106.12.200.14 to port 2220 [J]
2020-01-20 18:24:13
attackspambots
SSHD brute force attack detected by fail2ban
2020-01-19 21:05:46
相同子网IP讨论:
IP 类型 评论内容 时间
106.12.200.239 attack
SSH bruteforce
2020-10-06 01:17:31
106.12.200.239 attack
2020-09-28T09:12:44.909681linuxbox-skyline sshd[202304]: Invalid user www from 106.12.200.239 port 54772
...
2020-09-29 01:10:31
106.12.200.239 attackspambots
Aug  7 05:47:57 rotator sshd\[10543\]: Invalid user \<\;stddef.h\>\; from 106.12.200.239Aug  7 05:47:59 rotator sshd\[10543\]: Failed password for invalid user \<\;stddef.h\>\; from 106.12.200.239 port 39542 ssh2Aug  7 05:51:39 rotator sshd\[11356\]: Invalid user asd!@\#$ from 106.12.200.239Aug  7 05:51:41 rotator sshd\[11356\]: Failed password for invalid user asd!@\#$ from 106.12.200.239 port 57202 ssh2Aug  7 05:55:29 rotator sshd\[12141\]: Invalid user $cann3r123 from 106.12.200.239Aug  7 05:55:30 rotator sshd\[12141\]: Failed password for invalid user $cann3r123 from 106.12.200.239 port 46620 ssh2
...
2020-08-07 14:44:16
106.12.200.239 attack
Aug  1 23:39:20 vps647732 sshd[26676]: Failed password for root from 106.12.200.239 port 51628 ssh2
...
2020-08-02 05:49:05
106.12.200.239 attack
2020-07-21T22:16:05+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)
2020-07-22 05:09:46
106.12.200.239 attack
2020-07-15 16:15:12,048 fail2ban.actions: WARNING [ssh] Ban 106.12.200.239
2020-07-15 22:54:04
106.12.200.145 attack
1593741323 - 07/03/2020 03:55:23 Host: 106.12.200.145/106.12.200.145 Port: 8080 TCP Blocked
2020-07-04 01:16:28
106.12.200.70 attack
leo_www
2020-06-05 12:13:06
106.12.200.70 attack
May 26 23:53:30 pixelmemory sshd[3978342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.70 
May 26 23:53:30 pixelmemory sshd[3978342]: Invalid user office from 106.12.200.70 port 50130
May 26 23:53:32 pixelmemory sshd[3978342]: Failed password for invalid user office from 106.12.200.70 port 50130 ssh2
May 26 23:59:06 pixelmemory sshd[3987286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.70  user=root
May 26 23:59:08 pixelmemory sshd[3987286]: Failed password for root from 106.12.200.70 port 60162 ssh2
...
2020-05-27 16:52:32
106.12.200.70 attack
May 21 09:04:00 santamaria sshd\[5942\]: Invalid user irv from 106.12.200.70
May 21 09:04:00 santamaria sshd\[5942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.70
May 21 09:04:02 santamaria sshd\[5942\]: Failed password for invalid user irv from 106.12.200.70 port 36538 ssh2
...
2020-05-21 15:10:41
106.12.200.160 attack
ZmEu vulnerability scanner used to probe for vulnerable PHPMyAdmin installations and guess SSH passwords.

106.12.200.160 - - [29/Apr/2020:22:00:16 +0000] "GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1" 403 154 "-" "ZmEu"
2020-04-30 06:03:11
106.12.200.160 attackspambots
(sshd) Failed SSH login from 106.12.200.160 (CN/China/-): 5 in the last 3600 secs
2020-04-30 03:31:42
106.12.200.70 attackspambots
Wordpress malicious attack:[sshd]
2020-04-25 13:05:54
106.12.200.70 attackbotsspam
Apr 23 08:13:25 OPSO sshd\[408\]: Invalid user nw from 106.12.200.70 port 44526
Apr 23 08:13:25 OPSO sshd\[408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.70
Apr 23 08:13:28 OPSO sshd\[408\]: Failed password for invalid user nw from 106.12.200.70 port 44526 ssh2
Apr 23 08:17:28 OPSO sshd\[1320\]: Invalid user testor from 106.12.200.70 port 51216
Apr 23 08:17:28 OPSO sshd\[1320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.70
2020-04-23 14:36:46
106.12.200.160 attackbots
2020-04-22T14:32:27.567011mail.broermann.family sshd[14407]: Invalid user aj from 106.12.200.160 port 41250
2020-04-22T14:32:27.573538mail.broermann.family sshd[14407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.200.160
2020-04-22T14:32:27.567011mail.broermann.family sshd[14407]: Invalid user aj from 106.12.200.160 port 41250
2020-04-22T14:32:29.549501mail.broermann.family sshd[14407]: Failed password for invalid user aj from 106.12.200.160 port 41250 ssh2
2020-04-22T14:36:00.590682mail.broermann.family sshd[14585]: User root from 106.12.200.160 not allowed because not listed in AllowUsers
...
2020-04-22 21:45:56
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.200.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61119
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.200.14.			IN	A

;; AUTHORITY SECTION:
.			314	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011900 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 19 21:05:42 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 14.200.12.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.200.12.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
27.194.92.133 attack
5500/tcp
[2019-06-23]1pkt
2019-06-24 02:33:45
188.85.29.100 attack
Unauthorized connection attempt from IP address 188.85.29.100 on Port 445(SMB)
2019-06-24 02:25:59
51.68.62.19 attack
Blocked user enumeration attempt
2019-06-24 02:25:02
79.26.184.64 attack
$f2bV_matches
2019-06-24 02:07:57
201.150.88.64 attack
SMTP-sasl brute force
...
2019-06-24 02:11:34
223.16.52.72 attackspam
5555/tcp
[2019-06-23]1pkt
2019-06-24 02:28:48
158.69.144.67 attackbots
SMTP Login attempts
2019-06-24 02:32:52
116.68.197.174 attackspambots
Unauthorized connection attempt from IP address 116.68.197.174 on Port 445(SMB)
2019-06-24 02:18:35
213.184.224.70 attackbotsspam
3389BruteforceFW21
2019-06-24 02:44:32
188.239.64.66 attack
Unauthorized connection attempt from IP address 188.239.64.66 on Port 445(SMB)
2019-06-24 02:41:35
198.50.194.238 attackspam
2019-06-23T10:17:04.763578abusebot-4.cloudsearch.cf sshd\[4452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=layer-7.mitigation.heavyhost.net
2019-06-24 02:34:42
14.136.119.30 attack
23/tcp
[2019-06-23]1pkt
2019-06-24 02:09:17
23.94.158.185 attackspambots
NAME : CC-16 CIDR : 23.94.0.0/15 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - New York - block certain countries :) IP: 23.94.158.185  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl
2019-06-24 02:28:17
90.55.252.166 attack
Jun 23 11:18:27 m2 sshd[8975]: Invalid user cisco from 90.55.252.166
Jun 23 11:18:31 m2 sshd[8975]: Failed password for invalid user cisco from 90.55.252.166 port 40358 ssh2
Jun 23 11:21:20 m2 sshd[9963]: Failed password for r.r from 90.55.252.166 port 48688 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=90.55.252.166
2019-06-24 02:37:59
50.2.38.159 attackspam
NAME : EONIX CIDR : 50.2.0.0/15 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Nevada - block certain countries :) IP: 50.2.38.159  Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery https://help-dysk.pl
2019-06-24 02:44:13

最近上报的IP列表

171.244.51.119 157.245.203.50 118.89.31.153 109.95.76.180
106.12.209.57 231.44.11.168 104.210.151.147 215.69.49.3
254.251.29.64 155.139.20.46 68.183.191.157 68.183.12.80
54.169.29.28 52.172.213.143 45.114.221.86 49.235.95.179
20.47.211.224 119.95.175.55 252.244.62.137 88.35.106.149