必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attack
Nov  1 14:41:22 meumeu sshd[31869]: Failed password for root from 106.13.133.80 port 60510 ssh2
Nov  1 14:47:53 meumeu sshd[32733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80 
Nov  1 14:47:55 meumeu sshd[32733]: Failed password for invalid user president from 106.13.133.80 port 45382 ssh2
...
2019-11-02 00:03:22
attackspambots
Oct 18 08:13:08 vps647732 sshd[13884]: Failed password for root from 106.13.133.80 port 59766 ssh2
...
2019-10-18 15:45:08
attackbotsspam
*Port Scan* detected from 106.13.133.80 (CN/China/-). 4 hits in the last 270 seconds
2019-10-17 13:49:52
attackspambots
Oct 14 06:36:48 vps647732 sshd[6788]: Failed password for root from 106.13.133.80 port 59930 ssh2
...
2019-10-14 15:47:31
attackspambots
Oct 11 06:37:49 www sshd\[21401\]: Failed password for root from 106.13.133.80 port 56158 ssh2Oct 11 06:42:12 www sshd\[21737\]: Failed password for root from 106.13.133.80 port 35384 ssh2Oct 11 06:46:28 www sshd\[21934\]: Failed password for root from 106.13.133.80 port 42798 ssh2
...
2019-10-11 19:24:19
attackspam
Oct  8 19:21:42 *** sshd[8842]: User root from 106.13.133.80 not allowed because not listed in AllowUsers
2019-10-09 04:03:15
attackspam
Oct  5 10:28:05 MK-Soft-VM5 sshd[6941]: Failed password for root from 106.13.133.80 port 38082 ssh2
...
2019-10-05 17:06:13
attackspam
Oct  2 23:36:18 friendsofhawaii sshd\[1744\]: Invalid user mc from 106.13.133.80
Oct  2 23:36:18 friendsofhawaii sshd\[1744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
Oct  2 23:36:20 friendsofhawaii sshd\[1744\]: Failed password for invalid user mc from 106.13.133.80 port 49678 ssh2
Oct  2 23:42:06 friendsofhawaii sshd\[2372\]: Invalid user lotus from 106.13.133.80
Oct  2 23:42:06 friendsofhawaii sshd\[2372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
2019-10-03 17:49:53
attackspam
Oct  1 20:04:10 kapalua sshd\[16030\]: Invalid user alaimo from 106.13.133.80
Oct  1 20:04:10 kapalua sshd\[16030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
Oct  1 20:04:12 kapalua sshd\[16030\]: Failed password for invalid user alaimo from 106.13.133.80 port 54882 ssh2
Oct  1 20:09:45 kapalua sshd\[16751\]: Invalid user user from 106.13.133.80
Oct  1 20:09:45 kapalua sshd\[16751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
2019-10-02 14:23:43
attack
Sep  7 05:07:49 vps691689 sshd[29256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
Sep  7 05:07:52 vps691689 sshd[29256]: Failed password for invalid user letmein from 106.13.133.80 port 34034 ssh2
...
2019-09-07 11:17:26
attackspam
Sep  3 17:13:10 areeb-Workstation sshd[4363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
Sep  3 17:13:12 areeb-Workstation sshd[4363]: Failed password for invalid user temp from 106.13.133.80 port 54628 ssh2
...
2019-09-03 19:46:45
attackbotsspam
Aug 29 11:19:48 h2177944 sshd\[3250\]: Invalid user sangley_xmb1 from 106.13.133.80 port 49052
Aug 29 11:19:48 h2177944 sshd\[3250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
Aug 29 11:19:50 h2177944 sshd\[3250\]: Failed password for invalid user sangley_xmb1 from 106.13.133.80 port 49052 ssh2
Aug 29 11:25:13 h2177944 sshd\[3397\]: Invalid user null from 106.13.133.80 port 32884
...
2019-08-29 22:39:46
attack
Aug 29 10:09:48 h2177944 sshd\[929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80  user=root
Aug 29 10:09:50 h2177944 sshd\[929\]: Failed password for root from 106.13.133.80 port 33238 ssh2
Aug 29 10:15:17 h2177944 sshd\[1075\]: Invalid user xfs from 106.13.133.80 port 45312
Aug 29 10:15:17 h2177944 sshd\[1075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
...
2019-08-29 16:25:33
attackbotsspam
Aug 11 19:57:03 hosting sshd[6762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80  user=root
Aug 11 19:57:05 hosting sshd[6762]: Failed password for root from 106.13.133.80 port 46114 ssh2
...
2019-08-12 01:20:56
attack
Aug  4 09:16:33 v22019058497090703 sshd[14625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
Aug  4 09:16:35 v22019058497090703 sshd[14625]: Failed password for invalid user creis from 106.13.133.80 port 57376 ssh2
Aug  4 09:22:03 v22019058497090703 sshd[14967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80
...
2019-08-04 15:44:46
attack
Automated report - ssh fail2ban:
Jul 27 12:01:49 wrong password, user=team12345, port=34188, ssh2
Jul 27 12:33:52 authentication failure 
Jul 27 12:33:54 wrong password, user=daho, port=45552, ssh2
2019-07-27 18:39:33
attackbots
web-1 [ssh] SSH Attack
2019-07-18 19:17:10
attackspam
2019-07-16T12:20:57.714506abusebot-2.cloudsearch.cf sshd\[426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.80  user=root
2019-07-16 20:25:21
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.133.190 attack
(sshd) Failed SSH login from 106.13.133.190 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 21 16:29:29 server2 sshd[12768]: Invalid user test from 106.13.133.190 port 39790
Sep 21 16:29:31 server2 sshd[12768]: Failed password for invalid user test from 106.13.133.190 port 39790 ssh2
Sep 21 16:36:09 server2 sshd[14307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190  user=root
Sep 21 16:36:10 server2 sshd[14307]: Failed password for root from 106.13.133.190 port 51834 ssh2
Sep 21 16:45:58 server2 sshd[15653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190  user=nagios
2020-09-22 02:10:43
106.13.133.190 attack
Sep 21 16:21:31 localhost sshd[3145715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190  user=root
Sep 21 16:21:33 localhost sshd[3145715]: Failed password for root from 106.13.133.190 port 59962 ssh2
...
2020-09-21 17:55:06
106.13.133.190 attackspam
Aug 16 05:50:32 db sshd[20897]: User root from 106.13.133.190 not allowed because none of user's groups are listed in AllowGroups
...
2020-08-16 17:10:21
106.13.133.190 attackbotsspam
(sshd) Failed SSH login from 106.13.133.190 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug  5 14:09:51 amsweb01 sshd[19384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190  user=root
Aug  5 14:09:52 amsweb01 sshd[19384]: Failed password for root from 106.13.133.190 port 35206 ssh2
Aug  5 14:14:33 amsweb01 sshd[20206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190  user=root
Aug  5 14:14:34 amsweb01 sshd[20206]: Failed password for root from 106.13.133.190 port 52644 ssh2
Aug  5 14:16:56 amsweb01 sshd[20453]: Invalid user server#2008 from 106.13.133.190 port 50308
2020-08-05 23:36:10
106.13.133.190 attackspambots
Aug  2 23:31:21 vps647732 sshd[21860]: Failed password for root from 106.13.133.190 port 50430 ssh2
...
2020-08-03 07:02:46
106.13.133.190 attackspam
Aug  2 07:53:10 rancher-0 sshd[719795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190  user=root
Aug  2 07:53:12 rancher-0 sshd[719795]: Failed password for root from 106.13.133.190 port 53514 ssh2
...
2020-08-02 14:56:05
106.13.133.190 attackbots
(sshd) Failed SSH login from 106.13.133.190 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 17 13:52:46 grace sshd[28729]: Invalid user kelly from 106.13.133.190 port 50090
Jul 17 13:52:48 grace sshd[28729]: Failed password for invalid user kelly from 106.13.133.190 port 50090 ssh2
Jul 17 14:10:06 grace sshd[31353]: Invalid user josep from 106.13.133.190 port 56866
Jul 17 14:10:08 grace sshd[31353]: Failed password for invalid user josep from 106.13.133.190 port 56866 ssh2
Jul 17 14:16:08 grace sshd[32485]: Invalid user git from 106.13.133.190 port 38954
2020-07-17 21:13:32
106.13.133.190 attackspam
2020-07-06T16:57:51.559147xentho-1 sshd[905187]: Invalid user christa from 106.13.133.190 port 46630
2020-07-06T16:57:53.642106xentho-1 sshd[905187]: Failed password for invalid user christa from 106.13.133.190 port 46630 ssh2
2020-07-06T17:00:14.574513xentho-1 sshd[905211]: Invalid user testing1 from 106.13.133.190 port 52554
2020-07-06T17:00:14.584238xentho-1 sshd[905211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190
2020-07-06T17:00:14.574513xentho-1 sshd[905211]: Invalid user testing1 from 106.13.133.190 port 52554
2020-07-06T17:00:16.622768xentho-1 sshd[905211]: Failed password for invalid user testing1 from 106.13.133.190 port 52554 ssh2
2020-07-06T17:02:37.075430xentho-1 sshd[905256]: Invalid user teamspeak from 106.13.133.190 port 58458
2020-07-06T17:02:37.082114xentho-1 sshd[905256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.190
2020-07-06T17:02:37.075430xentho-1 
...
2020-07-07 05:43:06
106.13.133.190 attackbots
Jun 10 12:52:02 server sshd[8319]: Failed password for invalid user xn from 106.13.133.190 port 50306 ssh2
Jun 10 12:55:19 server sshd[10970]: Failed password for invalid user raffaele from 106.13.133.190 port 41320 ssh2
Jun 10 12:58:36 server sshd[13504]: Failed password for invalid user jzapata from 106.13.133.190 port 60562 ssh2
2020-06-11 01:01:33
106.13.133.124 attackbotsspam
Apr  3 22:34:36 server1 sshd\[1854\]: Invalid user kodi from 106.13.133.124
Apr  3 22:34:36 server1 sshd\[1854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.124 
Apr  3 22:34:38 server1 sshd\[1854\]: Failed password for invalid user kodi from 106.13.133.124 port 38130 ssh2
Apr  3 22:38:53 server1 sshd\[3035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.133.124  user=root
Apr  3 22:38:55 server1 sshd\[3035\]: Failed password for root from 106.13.133.124 port 58210 ssh2
...
2020-04-04 14:58:18
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.133.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33927
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.133.80.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052002 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue May 21 10:49:37 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:
Host 80.133.13.106.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 80.133.13.106.in-addr.arpa: SERVFAIL

相关IP信息:
最新评论:
IP 类型 评论内容 时间
5.56.98.132 attackbots
Unauthorized connection attempt from IP address 5.56.98.132 on Port 445(SMB)
2020-09-05 18:23:59
189.126.169.138 attack
Brute force attempt
2020-09-05 18:11:20
177.37.239.147 attack
Sep  4 18:46:32 mellenthin postfix/smtpd[32306]: NOQUEUE: reject: RCPT from unknown[177.37.239.147]: 554 5.7.1 Service unavailable; Client host [177.37.239.147] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/177.37.239.147; from= to= proto=ESMTP helo=<[177.37.239.147]>
2020-09-05 18:10:45
85.239.35.130 attackspambots
 TCP (SYN) 85.239.35.130:16894 -> port 1080, len 60
2020-09-05 18:45:10
190.206.164.64 attackbotsspam
Attempted connection to port 445.
2020-09-05 18:33:54
122.227.159.84 attackbotsspam
Sep 5 10:43:52 *hidden* sshd[12585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.227.159.84 Sep 5 10:43:54 *hidden* sshd[12585]: Failed password for invalid user mininet from 122.227.159.84 port 36495 ssh2 Sep 5 10:49:40 *hidden* sshd[13691]: Invalid user pos from 122.227.159.84 port 60783
2020-09-05 18:16:44
165.227.125.173 attack
165.227.125.173 - - [23/Jun/2020:08:39:15 +0000] "\x00\x0E8?\xB5" 400 166 "-" "-"
2020-09-05 18:19:50
182.61.40.227 attackspam
2020-09-05T14:54:43.398772billing sshd[19597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.40.227
2020-09-05T14:54:43.395487billing sshd[19597]: Invalid user wyse from 182.61.40.227 port 38766
2020-09-05T14:54:45.295973billing sshd[19597]: Failed password for invalid user wyse from 182.61.40.227 port 38766 ssh2
...
2020-09-05 18:02:31
78.46.61.245 attackspam
20 attempts against mh-misbehave-ban on pluto
2020-09-05 18:08:55
47.31.38.87 attackspambots
1599237970 - 09/04/2020 18:46:10 Host: 47.31.38.87/47.31.38.87 Port: 445 TCP Blocked
2020-09-05 18:32:41
187.252.200.79 attack
Sep  4 18:46:30 mellenthin postfix/smtpd[30890]: NOQUEUE: reject: RCPT from unknown[187.252.200.79]: 554 5.7.1 Service unavailable; Client host [187.252.200.79] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/187.252.200.79; from= to= proto=ESMTP helo=<187.252.200.79.cable.dyn.cableonline.com.mx>
2020-09-05 18:11:39
144.217.95.97 attackbotsspam
Sep  5 11:49:06 vps647732 sshd[29621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.95.97
Sep  5 11:49:08 vps647732 sshd[29621]: Failed password for invalid user min from 144.217.95.97 port 40134 ssh2
...
2020-09-05 18:05:30
116.129.254.132 attack
Sep  2 22:27:09 josie sshd[18558]: Invalid user support from 116.129.254.132
Sep  2 22:27:09 josie sshd[18559]: Invalid user support from 116.129.254.132
Sep  2 22:27:09 josie sshd[18562]: Invalid user support from 116.129.254.132
Sep  2 22:27:09 josie sshd[18554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.129.254.132  user=r.r
Sep  2 22:27:09 josie sshd[18555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.129.254.132  user=r.r
Sep  2 22:27:09 josie sshd[18558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.129.254.132 
Sep  2 22:27:09 josie sshd[18559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.129.254.132 
Sep  2 22:27:09 josie sshd[18562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.129.254.132 
Sep  2 22:27:11 josie sshd[18554]: ........
-------------------------------
2020-09-05 18:16:10
132.255.94.2 attackbots
Dovecot Invalid User Login Attempt.
2020-09-05 18:13:38
209.150.146.126 attackbotsspam
445/tcp 445/tcp 445/tcp...
[2020-07-14/09-05]9pkt,1pt.(tcp)
2020-09-05 18:40:32

最近上报的IP列表

219.146.62.233 172.105.89.70 45.166.33.143 163.172.90.175
91.159.152.67 173.54.220.62 37.187.72.67 219.80.18.131
188.250.163.22 215.7.6.75 77.220.178.163 194.254.148.183
102.165.35.141 193.188.22.47 185.53.88.242 119.29.166.174
212.114.59.106 218.92.170.245 103.99.113.89 192.241.165.27