106.12.252.125

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Found on 106.12.0.0/15 Dark List de / proto=6 . srcport=63091 . dstport=445 . (4323)	2020-09-23 01:46:32
attackspambots	Found on 106.12.0.0/15 Dark List de / proto=6 . srcport=63091 . dstport=445 . (4323)	2020-09-22 17:49:47

相同子网IP讨论:

IP	类型	评论内容	时间
106.12.252.212	attackspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-09 03:10:18
106.12.252.212	attackspam	445/tcp 1433/tcp... [2020-08-21/10-07]9pkt,2pt.(tcp)	2020-10-08 19:14:37
106.12.252.212	attackbots	Icarus honeypot on github	2020-09-08 20:08:52
106.12.252.212	attack	Icarus honeypot on github	2020-09-08 12:06:08
106.12.252.212	attackbots	Icarus honeypot on github	2020-09-08 04:42:15
106.12.252.212	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-07 02:03:13
106.12.252.212	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-06 17:24:33
106.12.252.212	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-06 09:25:24
106.12.252.212	attackbots	20/8/18@08:29:34: FAIL: Alarm-Network address from=106.12.252.212 ...	2020-08-19 03:57:41
106.12.252.143	attack	Port probing on unauthorized port 1433	2020-06-15 07:00:27

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.252.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59904
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.252.125.			IN	A

;; AUTHORITY SECTION:
.			236	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092101 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Sep 22 17:49:43 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 125.252.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 125.252.12.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
119.235.24.244	attackspambots	Jul 24 15:57:16 srv206 sshd[18882]: Invalid user domingos from 119.235.24.244 ...	2019-07-24 22:43:25
103.60.160.136	attackbots	WordPress XMLRPC scan :: 103.60.160.136 0.192 BYPASS [24/Jul/2019:21:54:45 1000] [censored_1] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1"	2019-07-24 23:42:23
118.152.164.59	attackbotsspam	Invalid user steam from 118.152.164.59 port 38168	2019-07-24 23:48:15
77.247.108.112	attackbots	\[2019-07-24 09:07:48\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T09:07:48.455-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048614236015",SessionID="0x7f06f82756a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.112/50758",ACLName="no_extension_match" \[2019-07-24 09:08:03\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T09:08:03.486-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00048614236015",SessionID="0x7f06f80754e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.112/60002",ACLName="no_extension_match" \[2019-07-24 09:08:20\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T09:08:20.758-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="901148614236015",SessionID="0x7f06f82756a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.112/55491",ACLName="no_	2019-07-24 22:40:59
106.12.125.139	attackbotsspam	Jul 24 11:17:59 vps200512 sshd\[28789\]: Invalid user jboss from 106.12.125.139 Jul 24 11:17:59 vps200512 sshd\[28789\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.139 Jul 24 11:18:02 vps200512 sshd\[28789\]: Failed password for invalid user jboss from 106.12.125.139 port 33326 ssh2 Jul 24 11:20:39 vps200512 sshd\[28864\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.139 user=ubuntu Jul 24 11:20:41 vps200512 sshd\[28864\]: Failed password for ubuntu from 106.12.125.139 port 54888 ssh2	2019-07-24 23:23:56
54.39.96.8	attackspam	Jul 24 16:49:27 mail sshd\[1099\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.96.8 Jul 24 16:49:30 mail sshd\[1099\]: Failed password for invalid user tf2mgeserver from 54.39.96.8 port 42696 ssh2 Jul 24 16:53:38 mail sshd\[1719\]: Invalid user jolien from 54.39.96.8 port 36360 Jul 24 16:53:38 mail sshd\[1719\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.96.8 Jul 24 16:53:40 mail sshd\[1719\]: Failed password for invalid user jolien from 54.39.96.8 port 36360 ssh2	2019-07-24 23:15:04
191.53.52.100	attack	$f2bV_matches	2019-07-24 23:43:18
179.189.201.192	attackspambots	failed_logins	2019-07-24 23:04:54
182.72.199.106	attackspam	2019-07-24T15:27:38.227718abusebot-7.cloudsearch.cf sshd\[20190\]: Invalid user devs from 182.72.199.106 port 56642	2019-07-24 23:36:44
111.230.46.229	attack	Jul 24 11:20:43 OPSO sshd\[11866\]: Invalid user tui from 111.230.46.229 port 51408 Jul 24 11:20:43 OPSO sshd\[11866\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.46.229 Jul 24 11:20:45 OPSO sshd\[11866\]: Failed password for invalid user tui from 111.230.46.229 port 51408 ssh2 Jul 24 11:24:56 OPSO sshd\[12250\]: Invalid user sahil from 111.230.46.229 port 59298 Jul 24 11:24:56 OPSO sshd\[12250\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.46.229	2019-07-24 23:25:20
5.62.41.147	attackbotsspam	\[2019-07-24 10:18:02\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '5.62.41.147:4015' - Wrong password \[2019-07-24 10:18:02\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-24T10:18:02.873-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4120",SessionID="0x7f06f83e80f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.147/57035",Challenge="5340180b",ReceivedChallenge="5340180b",ReceivedHash="859988c52522895f9ca356c97e947264" \[2019-07-24 10:18:40\] NOTICE\[20804\] chan_sip.c: Registration from '\' failed for '5.62.41.147:4127' - Wrong password \[2019-07-24 10:18:40\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-24T10:18:40.970-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5716",SessionID="0x7f06f83e80f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.147/5	2019-07-24 22:36:50
51.255.83.44	attackbotsspam	ssh failed login	2019-07-24 22:44:19
191.53.104.222	attack	$f2bV_matches	2019-07-24 22:45:42
54.85.76.123	attackspam	Jul 24 16:11:28 debian sshd\[23621\]: Invalid user test from 54.85.76.123 port 33916 Jul 24 16:11:28 debian sshd\[23621\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.85.76.123 ...	2019-07-24 23:13:29
151.61.120.7	attackbotsspam	Automatic report - Port Scan Attack	2019-07-24 22:46:49

最近上报的IP列表

105.114.199.178	84.241.208.105	53.213.57.187	89.205.92.205
244.107.127.58	249.140.80.102	232.149.176.164	124.211.203.90
222.9.13.209	234.83.30.173	119.149.136.46	81.30.208.171
49.73.43.197	146.185.130.195	41.225.238.252	180.117.163.90
29.119.10.179	181.169.74.100	213.227.209.123	112.133.232.71