106.12.37.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port Scan ...	2020-10-12 07:19:22
attackspambots	TCP ports : 2906 / 27832	2020-10-11 23:33:02
attackspambots	Found on 106.12.0.0/15 Dark List de / proto=6 . srcport=44291 . dstport=27832 . (906)	2020-10-11 15:31:29
attackbotsspam	srv02 Mass scanning activity detected Target: 27832 ..	2020-10-11 08:49:24
attackspam	SIP/5060 Probe, BF, Hack -	2020-09-23 19:54:55
attack	Port scan: Attack repeated for 24 hours	2020-09-23 12:15:08
attack	DATE:2020-09-22 19:05:41,IP:106.12.37.20,MATCHES:10,PORT:ssh	2020-09-23 04:00:43
attackspam	SSH login attempts brute force.	2020-09-14 02:22:01
attack	ET CINS Active Threat Intelligence Poor Reputation IP group 96 - port: 4837 proto: tcp cat: Misc Attackbytes: 60	2020-09-13 18:20:12
attackspam	Invalid user xc from 106.12.37.20 port 39984	2020-08-26 01:49:49
attack	fail2ban -- 106.12.37.20 ...	2020-08-21 20:48:49

相同子网IP讨论:

IP	类型	评论内容	时间
106.12.37.38	attackspambots	Invalid user humberto from 106.12.37.38 port 42564	2020-10-13 04:12:28
106.12.37.38	attackbots	SSH login attempts.	2020-10-12 19:49:27
106.12.37.245	attackbotsspam	Jan 24 14:37:00 www5 sshd\[51847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.37.245 user=root Jan 24 14:37:03 www5 sshd\[51847\]: Failed password for root from 106.12.37.245 port 47266 ssh2 Jan 24 14:39:08 www5 sshd\[52130\]: Invalid user add from 106.12.37.245 ...	2020-01-24 20:59:09
106.12.37.245	attackspam	SASL PLAIN auth failed: ruser=...	2020-01-24 07:10:27
106.12.37.245	attackbotsspam	Unauthorized connection attempt detected from IP address 106.12.37.245 to port 2220 [J]	2020-01-23 22:38:14
106.12.37.43	attack	firewall-block, port(s): 6379/tcp	2019-11-21 18:50:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.12.37.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9797
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.12.37.20.			IN	A

;; AUTHORITY SECTION:
.			550	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082001 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 20:48:45 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 20.37.12.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.37.12.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
58.235.50.181	attackspambots	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-26 07:04:23
117.50.63.253	attackspam	Automatic report - Banned IP Access	2020-02-26 06:59:50
222.186.169.192	attack	Feb 25 23:50:15 serwer sshd\[21333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root Feb 25 23:50:17 serwer sshd\[21333\]: Failed password for root from 222.186.169.192 port 45444 ssh2 Feb 25 23:50:21 serwer sshd\[21333\]: Failed password for root from 222.186.169.192 port 45444 ssh2 ...	2020-02-26 07:14:49
89.163.132.37	attackbotsspam	DATE:2020-02-25 23:43:01, IP:89.163.132.37, PORT:ssh SSH brute force auth (docker-dc)	2020-02-26 06:54:29
109.238.230.42	attackbots	suspicious action Tue, 25 Feb 2020 13:33:22 -0300	2020-02-26 06:53:49
222.186.31.83	attackspambots	Feb 25 23:42:30 dcd-gentoo sshd[18913]: User root from 222.186.31.83 not allowed because none of user's groups are listed in AllowGroups Feb 25 23:42:32 dcd-gentoo sshd[18913]: error: PAM: Authentication failure for illegal user root from 222.186.31.83 Feb 25 23:42:30 dcd-gentoo sshd[18913]: User root from 222.186.31.83 not allowed because none of user's groups are listed in AllowGroups Feb 25 23:42:32 dcd-gentoo sshd[18913]: error: PAM: Authentication failure for illegal user root from 222.186.31.83 Feb 25 23:42:30 dcd-gentoo sshd[18913]: User root from 222.186.31.83 not allowed because none of user's groups are listed in AllowGroups Feb 25 23:42:32 dcd-gentoo sshd[18913]: error: PAM: Authentication failure for illegal user root from 222.186.31.83 Feb 25 23:42:32 dcd-gentoo sshd[18913]: Failed keyboard-interactive/pam for invalid user root from 222.186.31.83 port 19363 ssh2 ...	2020-02-26 06:56:11
211.24.100.215	attackspambots	Honeypot attack, port: 445, PTR: cgw-211-24-100-215.bbrtl.time.net.my.	2020-02-26 06:53:15
89.155.233.95	attack	Honeypot attack, port: 5555, PTR: a89-155-233-95.cpe.netcabo.pt.	2020-02-26 07:06:49
179.111.200.155	attack	suspicious action Tue, 25 Feb 2020 13:33:14 -0300	2020-02-26 07:00:07
189.195.41.134	attackbots	Feb 26 01:18:09 server sshd\[21230\]: Invalid user tw from 189.195.41.134 Feb 26 01:18:09 server sshd\[21230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.41.134 Feb 26 01:18:11 server sshd\[21230\]: Failed password for invalid user tw from 189.195.41.134 port 49254 ssh2 Feb 26 01:32:51 server sshd\[24429\]: Invalid user rabbitmq from 189.195.41.134 Feb 26 01:32:51 server sshd\[24429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.195.41.134 ...	2020-02-26 06:43:22
177.86.20.79	attack	Feb 25 17:33:08 grey postfix/smtpd\[19664\]: NOQUEUE: reject: RCPT from unknown\[177.86.20.79\]: 554 5.7.1 Service unavailable\; Client host \[177.86.20.79\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[177.86.20.79\]\; from=\ to=\ proto=ESMTP helo=\<20-79.pox.com.br\> ...	2020-02-26 07:03:16
104.131.7.48	attackspambots	Invalid user git from 104.131.7.48 port 58378	2020-02-26 07:10:35
196.29.120.73	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-26 07:02:10
51.68.230.54	attackspam	Feb 26 00:07:08 Ubuntu-1404-trusty-64-minimal sshd\[10697\]: Invalid user hessischermuehlenverein123 from 51.68.230.54 Feb 26 00:07:08 Ubuntu-1404-trusty-64-minimal sshd\[10697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.230.54 Feb 26 00:07:10 Ubuntu-1404-trusty-64-minimal sshd\[10697\]: Failed password for invalid user hessischermuehlenverein123 from 51.68.230.54 port 52682 ssh2 Feb 26 00:10:33 Ubuntu-1404-trusty-64-minimal sshd\[13040\]: Invalid user test from 51.68.230.54 Feb 26 00:10:33 Ubuntu-1404-trusty-64-minimal sshd\[13040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.230.54	2020-02-26 07:11:06
81.33.27.115	attackspam	Unauthorized connection attempt from IP address 81.33.27.115 on Port 445(SMB)	2020-02-26 07:09:11

最近上报的IP列表

91.86.104.255	168.208.82.233	11.49.215.158	130.34.28.152
205.18.49.191	194.141.228.202	253.241.118.75	230.250.8.91
244.236.121.141	83.154.105.7	191.91.64.147	93.39.184.17
49.72.181.188	152.136.96.220	1.10.230.37	221.122.56.2
111.72.195.254	49.146.13.68	211.218.2.118	134.60.30.36