必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Beijing

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): Beijing Baidu Netcom Science and Technology Co., Ltd.

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attackspam
2020-02-21 18:50:37 server sshd[24072]: Failed password for invalid user chendaocheng from 106.13.113.161 port 44468 ssh2
2020-02-23 07:33:47
attack
Dec 15 15:37:52 srv01 sshd[16968]: Invalid user toshitaka from 106.13.113.161 port 32954
Dec 15 15:37:52 srv01 sshd[16968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Dec 15 15:37:52 srv01 sshd[16968]: Invalid user toshitaka from 106.13.113.161 port 32954
Dec 15 15:37:55 srv01 sshd[16968]: Failed password for invalid user toshitaka from 106.13.113.161 port 32954 ssh2
Dec 15 15:47:28 srv01 sshd[17931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161  user=root
Dec 15 15:47:30 srv01 sshd[17931]: Failed password for root from 106.13.113.161 port 53168 ssh2
...
2019-12-16 04:49:59
attackspam
Dec  2 14:37:31 vpn01 sshd[1452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Dec  2 14:37:33 vpn01 sshd[1452]: Failed password for invalid user zxcv from 106.13.113.161 port 46298 ssh2
...
2019-12-02 21:40:39
attack
Nov 28 17:18:29 heissa sshd\[32476\]: Invalid user ftpuser from 106.13.113.161 port 60700
Nov 28 17:18:29 heissa sshd\[32476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Nov 28 17:18:31 heissa sshd\[32476\]: Failed password for invalid user ftpuser from 106.13.113.161 port 60700 ssh2
Nov 28 17:24:04 heissa sshd\[890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161  user=root
Nov 28 17:24:06 heissa sshd\[890\]: Failed password for root from 106.13.113.161 port 58960 ssh2
2019-11-29 03:37:09
attack
Nov 28 03:08:27 linuxvps sshd\[14170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161  user=root
Nov 28 03:08:29 linuxvps sshd\[14170\]: Failed password for root from 106.13.113.161 port 58578 ssh2
Nov 28 03:14:09 linuxvps sshd\[17374\]: Invalid user faturamento from 106.13.113.161
Nov 28 03:14:09 linuxvps sshd\[17374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Nov 28 03:14:11 linuxvps sshd\[17374\]: Failed password for invalid user faturamento from 106.13.113.161 port 58936 ssh2
2019-11-28 16:22:56
attackspambots
Nov 17 15:35:27 mout sshd[16138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161  user=root
Nov 17 15:35:29 mout sshd[16138]: Failed password for root from 106.13.113.161 port 46002 ssh2
2019-11-18 05:41:29
attackbotsspam
Nov 17 05:25:59 vibhu-HP-Z238-Microtower-Workstation sshd\[30200\]: Invalid user kory from 106.13.113.161
Nov 17 05:25:59 vibhu-HP-Z238-Microtower-Workstation sshd\[30200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Nov 17 05:26:01 vibhu-HP-Z238-Microtower-Workstation sshd\[30200\]: Failed password for invalid user kory from 106.13.113.161 port 60466 ssh2
Nov 17 05:33:18 vibhu-HP-Z238-Microtower-Workstation sshd\[30624\]: Invalid user thorsten from 106.13.113.161
Nov 17 05:33:18 vibhu-HP-Z238-Microtower-Workstation sshd\[30624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
...
2019-11-17 08:17:42
attackbots
" "
2019-10-23 18:26:39
attack
Oct 20 13:55:31 heissa sshd\[30908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161  user=root
Oct 20 13:55:34 heissa sshd\[30908\]: Failed password for root from 106.13.113.161 port 45282 ssh2
Oct 20 14:02:50 heissa sshd\[31998\]: Invalid user pych from 106.13.113.161 port 52894
Oct 20 14:02:50 heissa sshd\[31998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Oct 20 14:02:52 heissa sshd\[31998\]: Failed password for invalid user pych from 106.13.113.161 port 52894 ssh2
2019-10-20 22:21:00
attackspambots
Oct  4 00:33:02 gw1 sshd[9968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Oct  4 00:33:04 gw1 sshd[9968]: Failed password for invalid user vgorder from 106.13.113.161 port 53798 ssh2
...
2019-10-04 03:43:43
attackspam
$f2bV_matches
2019-09-20 02:12:06
attack
Sep 19 12:25:49 vps691689 sshd[10302]: Failed password for root from 106.13.113.161 port 52198 ssh2
Sep 19 12:31:23 vps691689 sshd[10374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
...
2019-09-19 18:42:35
attack
Automatic report - Banned IP Access
2019-09-13 14:07:31
attack
Sep 11 22:09:39 [host] sshd[18948]: Invalid user cloud from 106.13.113.161
Sep 11 22:09:39 [host] sshd[18948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Sep 11 22:09:41 [host] sshd[18948]: Failed password for invalid user cloud from 106.13.113.161 port 44798 ssh2
2019-09-12 09:13:33
attackspam
Sep  9 12:21:57 hpm sshd\[1300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161  user=www-data
Sep  9 12:21:59 hpm sshd\[1300\]: Failed password for www-data from 106.13.113.161 port 57782 ssh2
Sep  9 12:29:13 hpm sshd\[2177\]: Invalid user ts3srv from 106.13.113.161
Sep  9 12:29:13 hpm sshd\[2177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161
Sep  9 12:29:15 hpm sshd\[2177\]: Failed password for invalid user ts3srv from 106.13.113.161 port 38766 ssh2
2019-09-10 06:32:16
attackspambots
Sep  6 05:58:31 rpi sshd[5033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161 
Sep  6 05:58:32 rpi sshd[5033]: Failed password for invalid user 1q2w3e4r from 106.13.113.161 port 41966 ssh2
2019-09-06 13:07:44
attack
Sep  5 21:11:44 rpi sshd[30971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.161 
Sep  5 21:11:46 rpi sshd[30971]: Failed password for invalid user 0r4cl3 from 106.13.113.161 port 41156 ssh2
2019-09-06 03:24:07
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.113.91 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-08-10 20:01:13
106.13.113.91 attackbotsspam
Aug  5 16:42:52 rush sshd[30951]: Failed password for root from 106.13.113.91 port 40260 ssh2
Aug  5 16:45:16 rush sshd[31061]: Failed password for root from 106.13.113.91 port 36552 ssh2
...
2020-08-06 00:54:58
106.13.113.91 attackspambots
Aug  2 03:47:15 itv-usvr-02 sshd[22438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.91  user=root
Aug  2 03:50:34 itv-usvr-02 sshd[22534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.91  user=root
Aug  2 03:53:39 itv-usvr-02 sshd[22632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.91  user=root
2020-08-02 06:24:19
106.13.113.91 attack
Jul 10 05:42:27 Ubuntu-1404-trusty-64-minimal sshd\[6118\]: Invalid user abrahan from 106.13.113.91
Jul 10 05:42:27 Ubuntu-1404-trusty-64-minimal sshd\[6118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.91
Jul 10 05:42:29 Ubuntu-1404-trusty-64-minimal sshd\[6118\]: Failed password for invalid user abrahan from 106.13.113.91 port 33880 ssh2
Jul 10 05:55:13 Ubuntu-1404-trusty-64-minimal sshd\[12337\]: Invalid user hydra from 106.13.113.91
Jul 10 05:55:13 Ubuntu-1404-trusty-64-minimal sshd\[12337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.91
2020-07-10 14:10:24
106.13.113.91 attack
Jul  6 09:51:20 jane sshd[7577]: Failed password for root from 106.13.113.91 port 46276 ssh2
...
2020-07-06 16:36:43
106.13.113.204 attackbotsspam
Dec 26 17:54:31 MK-Soft-VM7 sshd[19843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.204 
Dec 26 17:54:33 MK-Soft-VM7 sshd[19843]: Failed password for invalid user operator from 106.13.113.204 port 55030 ssh2
...
2019-12-27 02:31:00
106.13.113.204 attackbotsspam
Dec 19 16:16:46 MK-Soft-VM7 sshd[24606]: Failed password for root from 106.13.113.204 port 50088 ssh2
...
2019-12-19 23:28:56
106.13.113.204 attackspam
Dec 14 10:54:41 php1 sshd\[18662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.204  user=root
Dec 14 10:54:44 php1 sshd\[18662\]: Failed password for root from 106.13.113.204 port 53098 ssh2
Dec 14 11:00:17 php1 sshd\[19219\]: Invalid user ggggggg from 106.13.113.204
Dec 14 11:00:17 php1 sshd\[19219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.204
Dec 14 11:00:18 php1 sshd\[19219\]: Failed password for invalid user ggggggg from 106.13.113.204 port 49728 ssh2
2019-12-15 05:10:51
106.13.113.204 attack
Dec 11 08:29:04 MK-Soft-VM7 sshd[19611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.113.204 
Dec 11 08:29:07 MK-Soft-VM7 sshd[19611]: Failed password for invalid user lantz from 106.13.113.204 port 51002 ssh2
...
2019-12-11 18:32:52
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.113.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35838
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.113.161.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019041902 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 20 05:26:34 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 161.113.13.106.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 161.113.13.106.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
49.234.96.210 attackspam
Jul  4 23:05:05 dignus sshd[8098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.96.210
Jul  4 23:05:06 dignus sshd[8098]: Failed password for invalid user git from 49.234.96.210 port 32820 ssh2
Jul  4 23:06:48 dignus sshd[8277]: Invalid user system from 49.234.96.210 port 50252
Jul  4 23:06:48 dignus sshd[8277]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.96.210
Jul  4 23:06:50 dignus sshd[8277]: Failed password for invalid user system from 49.234.96.210 port 50252 ssh2
...
2020-07-05 16:50:27
188.166.115.226 attackbotsspam
Invalid user tzhang from 188.166.115.226 port 54856
2020-07-05 16:48:32
182.61.170.211 attack
Jul  5 08:39:12 serwer sshd\[13099\]: Invalid user qswang from 182.61.170.211 port 38204
Jul  5 08:39:12 serwer sshd\[13099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.170.211
Jul  5 08:39:15 serwer sshd\[13099\]: Failed password for invalid user qswang from 182.61.170.211 port 38204 ssh2
...
2020-07-05 16:40:37
37.187.54.45 attack
2020-07-05T07:38:46.596948vps751288.ovh.net sshd\[25371\]: Invalid user amy from 37.187.54.45 port 35850
2020-07-05T07:38:46.602778vps751288.ovh.net sshd\[25371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-37-187-54.eu
2020-07-05T07:38:49.017361vps751288.ovh.net sshd\[25371\]: Failed password for invalid user amy from 37.187.54.45 port 35850 ssh2
2020-07-05T07:42:07.565400vps751288.ovh.net sshd\[25413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-37-187-54.eu  user=root
2020-07-05T07:42:09.573009vps751288.ovh.net sshd\[25413\]: Failed password for root from 37.187.54.45 port 34310 ssh2
2020-07-05 16:40:20
79.106.36.2 attackspambots
VNC brute force attack detected by fail2ban
2020-07-05 16:37:35
196.206.254.240 attackbotsspam
Jul  5 05:16:24 ws24vmsma01 sshd[55112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.206.254.240
Jul  5 05:16:26 ws24vmsma01 sshd[55112]: Failed password for invalid user dk from 196.206.254.240 port 34422 ssh2
...
2020-07-05 16:21:57
178.128.90.9 attackbots
178.128.90.9 - - [05/Jul/2020:05:52:05 +0200] "GET /wp-login.php HTTP/1.1" 200 6398 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.90.9 - - [05/Jul/2020:05:52:07 +0200] "POST /wp-login.php HTTP/1.1" 200 6649 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
178.128.90.9 - - [05/Jul/2020:05:52:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-07-05 16:20:20
85.108.252.188 attackbots
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-07-05 16:52:07
183.89.237.102 attackbotsspam
(imapd) Failed IMAP login from 183.89.237.102 (TH/Thailand/mx-ll-183.89.237-102.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul  5 08:21:56 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=183.89.237.102, lip=5.63.12.44, TLS: Connection closed, session=
2020-07-05 16:28:38
212.16.77.206 attackspambots
Jul  5 10:25:40 lnxmysql61 sshd[32076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.16.77.206
2020-07-05 17:00:46
190.248.150.138 attackbots
Jul  5 09:59:27 gestao sshd[28783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.248.150.138 
Jul  5 09:59:30 gestao sshd[28783]: Failed password for invalid user financeiro from 190.248.150.138 port 40344 ssh2
Jul  5 10:02:17 gestao sshd[28816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.248.150.138 
...
2020-07-05 17:02:44
122.51.67.249 attackbotsspam
Invalid user admin from 122.51.67.249 port 52706
2020-07-05 16:57:25
37.59.112.180 attack
Invalid user cti from 37.59.112.180 port 50480
2020-07-05 16:46:53
106.84.17.157 attackbotsspam
07/04/2020-23:51:44.058960 106.84.17.157 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2020-07-05 16:41:26
96.240.204.13 attackspam
Fail2Ban Ban Triggered
2020-07-05 17:01:35

最近上报的IP列表

112.122.13.206 62.210.29.135 113.173.138.210 86.124.185.83
62.210.89.222 14.186.42.119 60.169.251.154 187.137.69.15
96.47.231.27 13.232.221.68 49.76.102.66 5.188.86.251
206.189.190.250 37.215.133.229 179.85.15.211 196.219.96.108
181.143.53.227 134.209.126.219 2.84.91.134 153.149.141.162