必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attackspam
Unauthorized connection attempt detected from IP address 106.13.148.44 to port 2220 [J]
2020-02-01 14:09:19
attackspam
Unauthorized connection attempt detected from IP address 106.13.148.44 to port 2220 [J]
2020-02-01 07:52:08
attackspam
Unauthorized connection attempt detected from IP address 106.13.148.44 to port 2220 [J]
2020-01-30 03:29:40
attack
$f2bV_matches
2020-01-11 13:19:50
attackspam
Dec  7 13:39:19 MK-Soft-Root2 sshd[13805]: Failed password for root from 106.13.148.44 port 49136 ssh2
...
2019-12-07 21:56:24
attackspam
Dec  6 12:00:13 server sshd\[4100\]: Invalid user redis from 106.13.148.44
Dec  6 12:00:13 server sshd\[4100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
Dec  6 12:00:15 server sshd\[4100\]: Failed password for invalid user redis from 106.13.148.44 port 42566 ssh2
Dec  6 12:16:53 server sshd\[8563\]: Invalid user mouse from 106.13.148.44
Dec  6 12:16:53 server sshd\[8563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
...
2019-12-06 21:51:17
attackbotsspam
2019-11-29T19:51:25.034104abusebot-8.cloudsearch.cf sshd\[17676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44  user=root
2019-11-30 04:55:25
attackbotsspam
Nov 28 02:21:10 localhost sshd\[31810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44  user=lp
Nov 28 02:21:12 localhost sshd\[31810\]: Failed password for lp from 106.13.148.44 port 59068 ssh2
Nov 28 02:28:24 localhost sshd\[599\]: Invalid user iacopo from 106.13.148.44 port 37370
Nov 28 02:28:24 localhost sshd\[599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
2019-11-28 09:37:37
attackbotsspam
Nov 26 21:22:22 vps666546 sshd\[8285\]: Invalid user syversen from 106.13.148.44 port 53018
Nov 26 21:22:22 vps666546 sshd\[8285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Nov 26 21:22:25 vps666546 sshd\[8285\]: Failed password for invalid user syversen from 106.13.148.44 port 53018 ssh2
Nov 26 21:29:00 vps666546 sshd\[13091\]: Invalid user annadiane from 106.13.148.44 port 59112
Nov 26 21:29:00 vps666546 sshd\[13091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
...
2019-11-27 04:56:47
attackspambots
Nov 21 07:54:30 localhost sshd\[21620\]: Invalid user cream from 106.13.148.44 port 41652
Nov 21 07:54:30 localhost sshd\[21620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Nov 21 07:54:31 localhost sshd\[21620\]: Failed password for invalid user cream from 106.13.148.44 port 41652 ssh2
Nov 21 07:58:55 localhost sshd\[21711\]: Invalid user test1test from 106.13.148.44 port 47534
Nov 21 07:58:55 localhost sshd\[21711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
...
2019-11-21 16:08:38
attackbots
Nov 19 15:46:43 server sshd\[12685\]: Invalid user backup from 106.13.148.44
Nov 19 15:46:43 server sshd\[12685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
Nov 19 15:46:44 server sshd\[12685\]: Failed password for invalid user backup from 106.13.148.44 port 50356 ssh2
Nov 19 16:03:32 server sshd\[16730\]: Invalid user guest from 106.13.148.44
Nov 19 16:03:32 server sshd\[16730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
...
2019-11-19 22:57:59
attackbotsspam
Nov 19 06:50:37 meumeu sshd[28190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
Nov 19 06:50:40 meumeu sshd[28190]: Failed password for invalid user anabal from 106.13.148.44 port 55922 ssh2
Nov 19 06:55:20 meumeu sshd[28897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
...
2019-11-19 14:07:55
attack
Nov 16 10:36:47 MK-Soft-VM6 sshd[20817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
Nov 16 10:36:49 MK-Soft-VM6 sshd[20817]: Failed password for invalid user markland from 106.13.148.44 port 53936 ssh2
...
2019-11-16 17:47:32
attackspam
Nov 13 05:01:10 ws25vmsma01 sshd[20995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Nov 13 05:01:12 ws25vmsma01 sshd[20995]: Failed password for invalid user ubnt from 106.13.148.44 port 45390 ssh2
...
2019-11-13 13:01:56
attackspam
ssh failed login
2019-11-10 14:46:13
attackbotsspam
Nov  7 09:57:53 meumeu sshd[30817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
Nov  7 09:57:55 meumeu sshd[30817]: Failed password for invalid user qwertyui from 106.13.148.44 port 40370 ssh2
Nov  7 10:02:30 meumeu sshd[31579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44 
...
2019-11-07 22:18:18
attackspam
Invalid user 12345678 from 106.13.148.44 port 59822
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Failed password for invalid user 12345678 from 106.13.148.44 port 59822 ssh2
Invalid user t3st3 from 106.13.148.44 port 40396
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
2019-11-04 16:21:24
attackspambots
2019-10-28T06:41:45.307692abusebot-3.cloudsearch.cf sshd\[22131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44  user=root
2019-10-28 14:48:44
attackspam
Oct 19 02:51:30 hpm sshd\[10201\]: Invalid user Pa\$\$word from 106.13.148.44
Oct 19 02:51:30 hpm sshd\[10201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Oct 19 02:51:32 hpm sshd\[10201\]: Failed password for invalid user Pa\$\$word from 106.13.148.44 port 47528 ssh2
Oct 19 02:57:43 hpm sshd\[10690\]: Invalid user 123 from 106.13.148.44
Oct 19 02:57:43 hpm sshd\[10690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
2019-10-19 21:34:40
attackspambots
Oct 18 05:00:48 localhost sshd\[104046\]: Invalid user Xenia123 from 106.13.148.44 port 59880
Oct 18 05:00:48 localhost sshd\[104046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Oct 18 05:00:50 localhost sshd\[104046\]: Failed password for invalid user Xenia123 from 106.13.148.44 port 59880 ssh2
Oct 18 05:06:12 localhost sshd\[104160\]: Invalid user denbeigh from 106.13.148.44 port 42302
Oct 18 05:06:12 localhost sshd\[104160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
...
2019-10-18 14:11:02
attackbots
Oct 16 14:07:42 cp sshd[15154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
2019-10-16 21:04:42
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.148.104 attackbots
BF attempts
2020-07-14 18:12:56
106.13.148.104 attackbots
Jul  4 14:07:18 abendstille sshd\[8841\]: Invalid user all from 106.13.148.104
Jul  4 14:07:18 abendstille sshd\[8841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
Jul  4 14:07:20 abendstille sshd\[8841\]: Failed password for invalid user all from 106.13.148.104 port 54992 ssh2
Jul  4 14:10:31 abendstille sshd\[11777\]: Invalid user m1 from 106.13.148.104
Jul  4 14:10:31 abendstille sshd\[11777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
...
2020-07-05 00:45:30
106.13.148.104 attackbotsspam
2020-06-04T05:37:10.885791devel sshd[1833]: Failed password for root from 106.13.148.104 port 33708 ssh2
2020-06-04T05:38:29.418096devel sshd[1919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
2020-06-04T05:38:31.358581devel sshd[1919]: Failed password for root from 106.13.148.104 port 51124 ssh2
2020-06-04 18:33:49
106.13.148.104 attackspambots
Jun  3 15:03:23 [host] sshd[32082]: pam_unix(sshd:
Jun  3 15:03:25 [host] sshd[32082]: Failed passwor
Jun  3 15:06:21 [host] sshd[32205]: pam_unix(sshd:
2020-06-03 21:16:31
106.13.148.104 attackspambots
Invalid user admin from 106.13.148.104 port 59152
2020-05-28 07:39:31
106.13.148.104 attackbots
May 22 14:39:54 home sshd[31246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
May 22 14:39:56 home sshd[31246]: Failed password for invalid user ics from 106.13.148.104 port 51206 ssh2
May 22 14:44:25 home sshd[31918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
...
2020-05-22 23:58:57
106.13.148.104 attack
May  9 18:39:25 ns382633 sshd\[2624\]: Invalid user juliane from 106.13.148.104 port 48350
May  9 18:39:25 ns382633 sshd\[2624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
May  9 18:39:26 ns382633 sshd\[2624\]: Failed password for invalid user juliane from 106.13.148.104 port 48350 ssh2
May  9 18:44:48 ns382633 sshd\[3517\]: Invalid user spam from 106.13.148.104 port 40024
May  9 18:44:48 ns382633 sshd\[3517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
2020-05-10 04:07:46
106.13.148.104 attackbots
frenzy
2020-04-26 06:31:11
106.13.148.104 attackspambots
Apr 24 06:51:53 vps647732 sshd[5808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104
Apr 24 06:51:54 vps647732 sshd[5808]: Failed password for invalid user testserver from 106.13.148.104 port 42790 ssh2
...
2020-04-24 15:38:46
106.13.148.104 attack
$f2bV_matches
2020-04-16 23:58:19
106.13.148.104 attackspam
2020-04-10T17:18:50.260104rocketchat.forhosting.nl sshd[23953]: Invalid user oracle from 106.13.148.104 port 48606
2020-04-10T17:18:51.812820rocketchat.forhosting.nl sshd[23953]: Failed password for invalid user oracle from 106.13.148.104 port 48606 ssh2
2020-04-10T17:35:39.507475rocketchat.forhosting.nl sshd[24482]: Invalid user test from 106.13.148.104 port 44798
...
2020-04-10 23:38:38
106.13.148.104 attack
Apr  8 21:25:08 localhost sshd\[29831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
Apr  8 21:25:10 localhost sshd\[29831\]: Failed password for root from 106.13.148.104 port 56122 ssh2
Apr  8 21:46:37 localhost sshd\[30225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.104  user=root
...
2020-04-09 10:20:02
106.13.148.104 attack
ssh brute force
2020-04-08 13:43:55
106.13.148.75 attack
Feb  7 14:52:36 reporting1 sshd[13539]: Did not receive identification string from 106.13.148.75
Feb  7 14:55:46 reporting1 sshd[15143]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:46 reporting1 sshd[15143]: Failed password for invalid user r.r from 106.13.148.75 port 34612 ssh2
Feb  7 14:55:50 reporting1 sshd[15164]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:50 reporting1 sshd[15164]: Failed password for invalid user r.r from 106.13.148.75 port 40226 ssh2
Feb  7 14:55:55 reporting1 sshd[15221]: User r.r from 106.13.148.75 not allowed because not listed in AllowUsers
Feb  7 14:55:55 reporting1 sshd[15221]: Failed password for invalid user r.r from 106.13.148.75 port 45814 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.148.75
2020-02-08 05:52:19
106.13.148.52 attack
51.158.173.243 106.13.148.52 - - [12/Nov/2019:22:33:55 +0000] "GET /TP/public/index.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
51.158.173.243 106.13.148.52 - - [12/Nov/2019:22:33:56 +0000] "GET /TP/index.php HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)"
...
2019-11-13 08:35:51
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.148.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56187
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.148.44.			IN	A

;; AUTHORITY SECTION:
.			517	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101600 1800 900 604800 86400

;; Query time: 144 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 16 21:04:38 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 44.148.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.148.13.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
174.138.56.93 attack
Feb 15 09:22:58 ns382633 sshd\[4609\]: Invalid user pimp from 174.138.56.93 port 36614
Feb 15 09:22:58 ns382633 sshd\[4609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.56.93
Feb 15 09:23:00 ns382633 sshd\[4609\]: Failed password for invalid user pimp from 174.138.56.93 port 36614 ssh2
Feb 15 09:30:33 ns382633 sshd\[5966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.56.93  user=root
Feb 15 09:30:35 ns382633 sshd\[5966\]: Failed password for root from 174.138.56.93 port 50618 ssh2
2020-02-15 17:32:16
204.12.220.106 attack
20 attempts against mh-misbehave-ban on milky
2020-02-15 17:17:42
98.128.178.55 attackbotsspam
Portscan detected
2020-02-15 17:49:08
50.83.166.62 attackspam
DATE:2020-02-15 05:49:08, IP:50.83.166.62, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-02-15 17:40:17
182.72.104.106 attack
Feb 15 07:53:23 pornomens sshd\[723\]: Invalid user cactiuser from 182.72.104.106 port 53734
Feb 15 07:53:23 pornomens sshd\[723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.72.104.106
Feb 15 07:53:25 pornomens sshd\[723\]: Failed password for invalid user cactiuser from 182.72.104.106 port 53734 ssh2
...
2020-02-15 17:50:52
195.54.166.5 attackbots
02/15/2020-02:10:26.857206 195.54.166.5 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-02-15 17:27:19
139.219.15.178 attackspambots
Invalid user backups from 139.219.15.178 port 54850
2020-02-15 17:22:13
113.105.78.251 attackspambots
1581742283 - 02/15/2020 05:51:23 Host: 113.105.78.251/113.105.78.251 Port: 445 TCP Blocked
2020-02-15 17:03:32
89.208.229.22 attackbotsspam
2020-02-15 00:55:56,062 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:55:56
2020-02-15 00:55:58,000 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:55:57
2020-02-15 00:56:13,609 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:56:13
2020-02-15 00:56:15,219 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:56:15
2020-02-15 00:56:15,551 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:56:15
2020-02-15 00:56:33,603 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:56:33
2020-02-15 00:57:18,619 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:57:18
2020-02-15 00:57:20,772 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.22 - 2020-02-15 00:57:20
2020-02-15 00:57:21,331 fail2ban.filter         [1389]: INFO    [ssh] Found 89.208.229.2........
-------------------------------
2020-02-15 17:37:40
128.199.123.0 attackspambots
unauthorized connection attempt
2020-02-15 17:34:33
222.186.180.147 attackbotsspam
$f2bV_matches
2020-02-15 17:24:43
157.230.235.233 attackbotsspam
Automatic report - Banned IP Access
2020-02-15 17:27:40
112.169.152.105 attackbots
Automatic report - Banned IP Access
2020-02-15 17:39:03
111.249.76.35 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-15 17:49:59
189.121.85.106 attackbots
Automatic report - Port Scan Attack
2020-02-15 17:31:44

最近上报的IP列表

193.32.163.9 177.128.123.52 210.228.24.195 100.21.65.16
177.25.52.66 159.203.201.100 85.208.96.72 177.37.164.255
49.207.140.118 158.69.27.201 182.105.61.137 178.249.84.26
179.108.22.154 191.252.204.193 179.52.164.198 122.115.226.184
180.167.201.243 190.196.7.131 162.223.89.163 233.206.61.129