106.13.123.1 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	1589630873 - 05/16/2020 19:07:53 Host: 106.13.123.1/106.13.123.1 Port: 6379 TCP Blocked ...	2020-05-17 04:07:31

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.123.29	attackbots	20 attempts against mh-ssh on cloud	2020-09-19 20:50:10
106.13.123.29	attackspam	2020-09-18T19:26:49.793700abusebot.cloudsearch.cf sshd[9165]: Invalid user testor from 106.13.123.29 port 36914 2020-09-18T19:26:49.801581abusebot.cloudsearch.cf sshd[9165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 2020-09-18T19:26:49.793700abusebot.cloudsearch.cf sshd[9165]: Invalid user testor from 106.13.123.29 port 36914 2020-09-18T19:26:51.962768abusebot.cloudsearch.cf sshd[9165]: Failed password for invalid user testor from 106.13.123.29 port 36914 ssh2 2020-09-18T19:31:31.070572abusebot.cloudsearch.cf sshd[9257]: Invalid user nagios from 106.13.123.29 port 42180 2020-09-18T19:31:31.075830abusebot.cloudsearch.cf sshd[9257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 2020-09-18T19:31:31.070572abusebot.cloudsearch.cf sshd[9257]: Invalid user nagios from 106.13.123.29 port 42180 2020-09-18T19:31:33.282481abusebot.cloudsearch.cf sshd[9257]: Failed password for inval ...	2020-09-19 04:23:47
106.13.123.73	attackspam	Sep 5 15:17:40 vps647732 sshd[978]: Failed password for root from 106.13.123.73 port 48846 ssh2 ...	2020-09-05 21:49:52
106.13.123.73	attackbots	Sep 5 02:01:22 vps46666688 sshd[20289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.73 Sep 5 02:01:24 vps46666688 sshd[20289]: Failed password for invalid user zihang from 106.13.123.73 port 40396 ssh2 ...	2020-09-05 13:26:50
106.13.123.73	attack	SSH Invalid Login	2020-09-05 06:12:38
106.13.123.29	attack	SSH auth scanning - multiple failed logins	2020-08-29 05:46:40
106.13.123.29	attack	Aug 14 20:51:24 pixelmemory sshd[1543103]: Failed password for root from 106.13.123.29 port 36652 ssh2 Aug 14 20:52:34 pixelmemory sshd[1545591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 user=root Aug 14 20:52:37 pixelmemory sshd[1545591]: Failed password for root from 106.13.123.29 port 50332 ssh2 Aug 14 20:53:47 pixelmemory sshd[1547207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 user=root Aug 14 20:53:50 pixelmemory sshd[1547207]: Failed password for root from 106.13.123.29 port 35792 ssh2 ...	2020-08-15 15:41:19
106.13.123.29	attackspambots	Aug 13 01:06:01 cosmoit sshd[32324]: Failed password for root from 106.13.123.29 port 50090 ssh2	2020-08-13 07:25:17
106.13.123.29	attackbotsspam	leo_www	2020-08-12 03:29:09
106.13.123.29	attackspambots	2020-08-02T05:57:22.017626amanda2.illicoweb.com sshd\[5697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 user=root 2020-08-02T05:57:24.222169amanda2.illicoweb.com sshd\[5697\]: Failed password for root from 106.13.123.29 port 44684 ssh2 2020-08-02T06:03:46.918614amanda2.illicoweb.com sshd\[5887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 user=root 2020-08-02T06:03:48.841955amanda2.illicoweb.com sshd\[5887\]: Failed password for root from 106.13.123.29 port 41292 ssh2 2020-08-02T06:06:58.596555amanda2.illicoweb.com sshd\[6308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 user=root ...	2020-08-02 14:14:30
106.13.123.73	attackspam	SSH brute-force attempt	2020-07-31 01:52:59
106.13.123.29	attackbotsspam	Jul 26 11:01:24 Invalid user alex from 106.13.123.29 port 46988	2020-07-30 01:31:14
106.13.123.148	attackbots	Jul 28 14:01:14 host proftpd[19509]: 0.0.0.0 (106.13.123.148[106.13.123.148]) - USER anonymous: no such user found from 106.13.123.148 [106.13.123.148] to 163.172.107.87:21 ...	2020-07-29 04:17:03
106.13.123.29	attackbots	2020-07-28T04:38:22.867383shield sshd\[26969\]: Invalid user wangnanhui from 106.13.123.29 port 41916 2020-07-28T04:38:22.876515shield sshd\[26969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29 2020-07-28T04:38:24.389865shield sshd\[26969\]: Failed password for invalid user wangnanhui from 106.13.123.29 port 41916 ssh2 2020-07-28T04:41:47.987442shield sshd\[27906\]: Invalid user oradev from 106.13.123.29 port 56964 2020-07-28T04:41:47.995775shield sshd\[27906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.123.29	2020-07-28 14:36:55
106.13.123.29	attackbotsspam	(sshd) Failed SSH login from 106.13.123.29 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 27 08:30:27 grace sshd[6555]: Invalid user csgoserver from 106.13.123.29 port 52470 Jul 27 08:30:29 grace sshd[6555]: Failed password for invalid user csgoserver from 106.13.123.29 port 52470 ssh2 Jul 27 08:35:08 grace sshd[7216]: Invalid user florian from 106.13.123.29 port 38486 Jul 27 08:35:11 grace sshd[7216]: Failed password for invalid user florian from 106.13.123.29 port 38486 ssh2 Jul 27 08:37:11 grace sshd[7545]: Invalid user hm from 106.13.123.29 port 60112	2020-07-27 17:53:57

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.123.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10304
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.123.1.			IN	A

;; AUTHORITY SECTION:
.			393	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051601 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 17 04:07:27 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 1.123.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.123.13.106.in-addr.arpa: NXDOMAIN

IP	类型	评论内容	时间
85.209.89.243	attackspambots	0,17-04/11 [bc01/m06] PostRequest-Spammer scoring: Lusaka01	2020-09-23 05:51:23
62.38.222.98	attackbots	Automatic report - Banned IP Access	2020-09-23 06:10:42
179.98.59.201	attackbotsspam	Firewall Dropped Connection	2020-09-23 05:35:59
202.53.15.131	attackspambots	Unauthorized connection attempt from IP address 202.53.15.131 on Port 445(SMB)	2020-09-23 05:35:37
81.68.209.225	attack	Sep 22 21:38:00 *** sshd[11793]: Invalid user pop from 81.68.209.225	2020-09-23 05:55:03
122.53.230.23	attackspam	[portscan] Port scan	2020-09-23 05:42:12
155.94.243.43	attackbots	Icarus honeypot on github	2020-09-23 06:04:23
139.155.38.57	attackbotsspam	Brute-force attempt banned	2020-09-23 06:06:23
122.51.246.97	attackbots	$f2bV_matches	2020-09-23 05:49:54
85.89.177.44	attackbotsspam	Sep 22 16:11:29 mx sshd[22502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.89.177.44	2020-09-23 05:37:10
69.63.68.194	attackbotsspam	Found on CINS badguys / proto=6 . srcport=41663 . dstport=60001 . (3084)	2020-09-23 05:45:52
191.97.13.15	attackbots	Unauthorized connection attempt from IP address 191.97.13.15 on Port 445(SMB)	2020-09-23 05:43:07
106.52.150.93	attackspam	20 attempts against mh-ssh on frost	2020-09-23 05:50:52
79.167.170.108	attackbots	TCP (SYN) 79.167.170.108:5076 -> port 23, len 40	2020-09-23 06:05:06
186.47.86.5	attack	Port Scan ...	2020-09-23 05:44:49

最近上报的IP列表

110.152.48.4	185.225.138.122	2a01:4f8:192:1472::2	103.200.21.242
118.89.115.45	179.43.145.232	37.145.105.60	45.95.168.124
186.7.30.13	201.206.173.78	200.166.1.52	67.70.56.215
174.46.253.88	78.198.7.192	11.60.10.57	17.42.130.95
34.82.91.206	16.161.103.131	140.126.119.247	58.203.245.208