城市(city): unknown
省份(region): Beijing
国家(country): China
运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.
主机名(hostname): unknown
机构(organization): Beijing Baidu Netcom Science and Technology Co., Ltd.
使用类型(Usage Type): Search Engine Spider
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackbots | Sep 4 00:42:42 markkoudstaal sshd[18728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 Sep 4 00:42:44 markkoudstaal sshd[18728]: Failed password for invalid user vboxuser from 106.13.104.94 port 36128 ssh2 Sep 4 00:46:21 markkoudstaal sshd[19120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 |
2019-09-04 11:22:33 |
| attackspam | Aug 28 20:14:34 [munged] sshd[17268]: Invalid user vishvjit from 106.13.104.94 port 38867 Aug 28 20:14:34 [munged] sshd[17268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 |
2019-08-29 07:19:33 |
| attackspambots | Brute force attempt |
2019-07-13 01:19:06 |
| attackspambots | Jun 28 07:01:50 ns341937 sshd[14140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 Jun 28 07:01:52 ns341937 sshd[14140]: Failed password for invalid user css from 106.13.104.94 port 48983 ssh2 Jun 28 07:16:28 ns341937 sshd[16953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.94 ... |
2019-06-28 14:47:10 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.104.8 | attack | firewall-block, port(s): 24565/tcp |
2020-10-06 02:37:22 |
| 106.13.104.8 | attack | Found on CINS badguys / proto=6 . srcport=54148 . dstport=11451 . (3502) |
2020-10-05 18:25:25 |
| 106.13.104.8 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 93 - port: 5069 proto: tcp cat: Misc Attackbytes: 60 |
2020-08-27 02:04:47 |
| 106.13.104.8 | attackspam | Jun 20 22:35:42 dignus sshd[31848]: Failed password for invalid user helong from 106.13.104.8 port 57672 ssh2 Jun 20 22:39:35 dignus sshd[32144]: Invalid user raimundo from 106.13.104.8 port 50040 Jun 20 22:39:35 dignus sshd[32144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.8 Jun 20 22:39:37 dignus sshd[32144]: Failed password for invalid user raimundo from 106.13.104.8 port 50040 ssh2 Jun 20 22:43:29 dignus sshd[32450]: Invalid user help from 106.13.104.8 port 42402 ... |
2020-06-21 13:46:28 |
| 106.13.104.8 | attackspam | May 13 12:13:04 itv-usvr-02 sshd[4982]: Invalid user readnews from 106.13.104.8 port 35802 May 13 12:13:04 itv-usvr-02 sshd[4982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.8 May 13 12:13:04 itv-usvr-02 sshd[4982]: Invalid user readnews from 106.13.104.8 port 35802 May 13 12:13:06 itv-usvr-02 sshd[4982]: Failed password for invalid user readnews from 106.13.104.8 port 35802 ssh2 May 13 12:15:23 itv-usvr-02 sshd[5060]: Invalid user debian from 106.13.104.8 port 60236 |
2020-05-13 14:53:24 |
| 106.13.104.8 | attackbotsspam | Invalid user sebastian from 106.13.104.8 port 51016 |
2020-04-27 07:05:33 |
| 106.13.104.8 | attackbots | Apr 20 16:01:37 server sshd[19518]: Failed password for root from 106.13.104.8 port 59874 ssh2 Apr 20 16:07:11 server sshd[23360]: Failed password for root from 106.13.104.8 port 33458 ssh2 Apr 20 16:12:34 server sshd[27270]: Failed password for invalid user admin from 106.13.104.8 port 59472 ssh2 |
2020-04-21 03:33:10 |
| 106.13.104.92 | attackspam | Feb 27 05:49:11 server sshd[1957796]: Failed password for invalid user deploy from 106.13.104.92 port 39558 ssh2 Feb 27 05:53:57 server sshd[1958756]: Failed password for invalid user ashish from 106.13.104.92 port 36904 ssh2 Feb 27 05:58:40 server sshd[1959634]: Failed password for invalid user odoo from 106.13.104.92 port 34232 ssh2 |
2020-02-27 13:47:37 |
| 106.13.104.92 | attackbotsspam | Feb 23 22:49:15 |
2020-02-24 05:50:43 |
| 106.13.104.92 | attackspambots | 2020-01-17 05:24:19 server sshd[12758]: Failed password for invalid user jack from 106.13.104.92 port 47900 ssh2 |
2020-01-18 01:12:52 |
| 106.13.104.92 | attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2020-01-16 04:52:24 |
| 106.13.104.92 | attack | Jan 14 12:29:37 vzmaster sshd[27337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 user=r.r Jan 14 12:29:39 vzmaster sshd[27337]: Failed password for r.r from 106.13.104.92 port 43520 ssh2 Jan 14 12:46:09 vzmaster sshd[31085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 user=r.r Jan 14 12:46:11 vzmaster sshd[31085]: Failed password for r.r from 106.13.104.92 port 55852 ssh2 Jan 14 12:49:15 vzmaster sshd[4403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 user=r.r Jan 14 12:49:17 vzmaster sshd[4403]: Failed password for r.r from 106.13.104.92 port 51164 ssh2 Jan 14 12:53:04 vzmaster sshd[11160]: Invalid user ubuntu from 106.13.104.92 Jan 14 12:53:04 vzmaster sshd[11160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.92 Jan 14 12:53:06 vzmaster ss........ ------------------------------- |
2020-01-14 21:33:58 |
| 106.13.104.103 | attackspambots | Nov 11 21:02:12 server sshd\[3170\]: Invalid user rolimnet from 106.13.104.103 Nov 11 21:02:12 server sshd\[3170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.103 Nov 11 21:02:14 server sshd\[3170\]: Failed password for invalid user rolimnet from 106.13.104.103 port 17928 ssh2 Nov 12 09:25:19 server sshd\[8102\]: Invalid user rolimnet from 106.13.104.103 Nov 12 09:25:19 server sshd\[8102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.104.103 ... |
2019-11-12 19:18:11 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.104.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41461
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.104.94. IN A
;; AUTHORITY SECTION:
. 2991 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040600 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 21:25:12 +08 2019
;; MSG SIZE rcvd: 117
Host 94.104.13.106.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 94.104.13.106.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.178.87.186 | attackspam | Automatic report - Port Scan Attack |
2020-01-13 08:01:52 |
| 5.196.110.170 | attack | Tried to connect to Port 22 (12x) |
2020-01-13 07:53:30 |
| 34.239.44.13 | attackspambots | Jan 12 23:17:53 server2 sshd\[15218\]: Invalid user 163.172.61.206 from 34.239.44.13 Jan 12 23:17:59 server2 sshd\[15220\]: Invalid user 163.172.61.206 from 34.239.44.13 Jan 12 23:20:14 server2 sshd\[15494\]: Invalid user 163.172.61.206 from 34.239.44.13 Jan 12 23:21:00 server2 sshd\[15506\]: Invalid user 163.172.61.206 from 34.239.44.13 Jan 12 23:22:59 server2 sshd\[15579\]: Invalid user 163.44.162.88 from 34.239.44.13 Jan 12 23:24:53 server2 sshd\[15649\]: Invalid user 163.44.162.88 from 34.239.44.13 |
2020-01-13 07:56:28 |
| 134.209.27.117 | attackbots | Jan 13 01:32:29 www sshd\[42918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.27.117 user=root Jan 13 01:32:31 www sshd\[42918\]: Failed password for root from 134.209.27.117 port 43088 ssh2 Jan 13 01:35:35 www sshd\[42965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.27.117 user=root ... |
2020-01-13 07:49:53 |
| 201.90.17.6 | attackspam | 1578864295 - 01/12/2020 22:24:55 Host: 201.90.17.6/201.90.17.6 Port: 445 TCP Blocked |
2020-01-13 07:54:03 |
| 81.12.159.146 | attackspam | none |
2020-01-13 08:04:18 |
| 49.233.136.245 | attackbots | Unauthorized connection attempt detected from IP address 49.233.136.245 to port 2220 [J] |
2020-01-13 08:01:29 |
| 185.209.0.32 | attack | 01/12/2020-23:17:07.851830 185.209.0.32 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-01-13 07:25:40 |
| 37.49.230.96 | attackspam | 37.49.230.96 was recorded 12 times by 1 hosts attempting to connect to the following ports: 65470,65472,65471,65473,65474,65466,65478,65479,65480,65410,65420,65430. Incident counter (4h, 24h, all-time): 12, 12, 163 |
2020-01-13 08:02:45 |
| 203.146.170.167 | attackspambots | Unauthorized connection attempt detected from IP address 203.146.170.167 to port 2220 [J] |
2020-01-13 07:39:44 |
| 104.248.169.127 | attackbotsspam | Jan 13 01:34:20 taivassalofi sshd[165566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.169.127 Jan 13 01:34:22 taivassalofi sshd[165566]: Failed password for invalid user isabel from 104.248.169.127 port 34994 ssh2 ... |
2020-01-13 07:34:50 |
| 45.77.172.67 | attackbotsspam | Jan 12 20:38:26 www sshd[18449]: Address 45.77.172.67 maps to 45.77.172.67.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jan 12 20:38:26 www sshd[18449]: Invalid user badmin from 45.77.172.67 Jan 12 20:38:27 www sshd[18449]: Failed password for invalid user badmin from 45.77.172.67 port 42014 ssh2 Jan 12 20:41:21 www sshd[18552]: Address 45.77.172.67 maps to 45.77.172.67.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jan 12 20:41:21 www sshd[18552]: Invalid user charhostnamey from 45.77.172.67 Jan 12 20:41:23 www sshd[18552]: Failed password for invalid user charhostnamey from 45.77.172.67 port 42002 ssh2 Jan 12 20:44:10 www sshd[18660]: Address 45.77.172.67 maps to 45.77.172.67.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jan 12 20:44:10 www sshd[18660]: Invalid user ftpusr from 45.77.172.67 Jan 12 20:44:12 www sshd[18660]: Failed password for invalid user ftpusr ........ ------------------------------ |
2020-01-13 07:57:43 |
| 59.22.155.190 | attackbotsspam | Lines containing failures of 59.22.155.190 (max 1000) Jan 12 19:20:32 localhost sshd[22524]: Invalid user test from 59.22.155.190 port 38374 Jan 12 19:20:32 localhost sshd[22524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.22.155.190 Jan 12 19:20:34 localhost sshd[22524]: Failed password for invalid user test from 59.22.155.190 port 38374 ssh2 Jan 12 19:20:36 localhost sshd[22524]: Received disconnect from 59.22.155.190 port 38374:11: Bye Bye [preauth] Jan 12 19:20:36 localhost sshd[22524]: Disconnected from invalid user test 59.22.155.190 port 38374 [preauth] Jan 12 19:34:56 localhost sshd[25495]: Invalid user suport from 59.22.155.190 port 51071 Jan 12 19:34:56 localhost sshd[25495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.22.155.190 Jan 12 19:34:58 localhost sshd[25495]: Failed password for invalid user suport from 59.22.155.190 port 51071 ssh2 Jan 12 19:34:59 localhos........ ------------------------------ |
2020-01-13 07:36:24 |
| 205.185.124.242 | attack | Unauthorized connection attempt detected from IP address 205.185.124.242 to port 23 [J] |
2020-01-13 08:00:51 |
| 92.118.37.88 | attackspam | 01/12/2020-17:49:15.410048 92.118.37.88 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-01-13 07:59:16 |