必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attack
Oct  5 15:48:43 lnxweb62 sshd[3282]: Failed password for root from 106.13.171.12 port 55236 ssh2
Oct  5 15:48:43 lnxweb62 sshd[3282]: Failed password for root from 106.13.171.12 port 55236 ssh2
2020-10-06 02:48:44
attackspambots
SSH Brute-Force reported by Fail2Ban
2020-10-05 18:38:35
attack
Sep 11 07:05:39 root sshd[9043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.12 
...
2020-09-11 16:31:13
attack
Sep 11 02:08:32 ns37 sshd[8989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.12
Sep 11 02:08:32 ns37 sshd[8989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.12
2020-09-11 08:41:22
attack
ssh brute force
2020-08-31 12:43:29
attackbots
21 attempts against mh-ssh on echoip
2020-08-29 14:20:57
attackbots
Aug 21 07:44:53 ip106 sshd[1641]: Failed password for root from 106.13.171.12 port 60980 ssh2
...
2020-08-21 17:31:34
attackspambots
frenzy
2020-08-15 18:30:13
attackbots
(sshd) Failed SSH login from 106.13.171.12 (CN/China/-): 5 in the last 3600 secs
2020-08-12 21:36:37
attackspam
[ssh] SSH attack
2020-08-08 14:12:17
attackspam
prod6
...
2020-08-05 06:02:12
attack
2020-07-24T10:31:17.8781401495-001 sshd[43670]: Invalid user anjan from 106.13.171.12 port 41884
2020-07-24T10:31:20.3621671495-001 sshd[43670]: Failed password for invalid user anjan from 106.13.171.12 port 41884 ssh2
2020-07-24T10:41:19.6042581495-001 sshd[44175]: Invalid user virl from 106.13.171.12 port 59270
2020-07-24T10:41:19.6073961495-001 sshd[44175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.12
2020-07-24T10:41:19.6042581495-001 sshd[44175]: Invalid user virl from 106.13.171.12 port 59270
2020-07-24T10:41:21.7316731495-001 sshd[44175]: Failed password for invalid user virl from 106.13.171.12 port 59270 ssh2
...
2020-07-24 23:36:50
attackbotsspam
Jul 23 01:55:35 root sshd[11710]: Invalid user gitlab-runner from 106.13.171.12
...
2020-07-23 07:02:46
attack
prod8
...
2020-07-22 12:46:07
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.171.34 attackbots
Mar 17 07:01:57 server sshd\[15800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.34  user=root
Mar 17 07:01:59 server sshd\[15800\]: Failed password for root from 106.13.171.34 port 48204 ssh2
Mar 17 07:33:42 server sshd\[22462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.34  user=root
Mar 17 07:33:44 server sshd\[22462\]: Failed password for root from 106.13.171.34 port 41484 ssh2
Mar 17 07:47:38 server sshd\[25560\]: Invalid user sdtdserver from 106.13.171.34
Mar 17 07:47:38 server sshd\[25560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.34 
...
2020-03-17 13:01:19
106.13.171.34 attackspam
Feb 11 00:30:18 legacy sshd[29048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.34
Feb 11 00:30:20 legacy sshd[29048]: Failed password for invalid user mxh from 106.13.171.34 port 47506 ssh2
Feb 11 00:37:14 legacy sshd[29594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.34
...
2020-02-11 07:50:09
106.13.171.34 attackspam
Feb  8 18:29:13 MK-Soft-VM3 sshd[16953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.171.34 
Feb  8 18:29:15 MK-Soft-VM3 sshd[16953]: Failed password for invalid user mup from 106.13.171.34 port 33886 ssh2
...
2020-02-09 06:25:09
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.171.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64645
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.171.12.			IN	A

;; AUTHORITY SECTION:
.			296	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072102 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 22 12:46:02 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 12.171.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.171.13.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
64.227.11.43 attackspam
64.227.11.43 - - [11/Sep/2020:11:45:18 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.227.11.43 - - [11/Sep/2020:11:45:24 +0200] "POST /wp-login.php HTTP/1.1" 200 9113 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
64.227.11.43 - - [11/Sep/2020:11:45:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-11 22:59:41
222.175.223.74 attackbots
Failed password for invalid user ubuntu from 222.175.223.74 port 33682 ssh2
2020-09-11 23:18:20
121.181.222.12 attack
Sep 10 18:55:46 andromeda sshd\[5746\]: Invalid user nagios from 121.181.222.12 port 58770
Sep 10 18:55:47 andromeda sshd\[5746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.181.222.12
Sep 10 18:55:48 andromeda sshd\[5746\]: Failed password for invalid user nagios from 121.181.222.12 port 58770 ssh2
2020-09-11 23:13:44
37.187.21.81 attackspam
(sshd) Failed SSH login from 37.187.21.81 (FR/France/ks3354949.kimsufi.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 11 02:54:33 server sshd[19458]: Failed password for root from 37.187.21.81 port 37497 ssh2
Sep 11 03:04:48 server sshd[22003]: Invalid user teamspeak from 37.187.21.81 port 44450
Sep 11 03:04:50 server sshd[22003]: Failed password for invalid user teamspeak from 37.187.21.81 port 44450 ssh2
Sep 11 03:10:53 server sshd[23720]: Failed password for root from 37.187.21.81 port 45469 ssh2
Sep 11 03:16:27 server sshd[25857]: Failed password for root from 37.187.21.81 port 46481 ssh2
2020-09-11 23:16:18
191.223.18.45 attackbots
(sshd) Failed SSH login from 191.223.18.45 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 18:55:23 grace sshd[24623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.223.18.45  user=root
Sep 10 18:55:25 grace sshd[24623]: Failed password for root from 191.223.18.45 port 45312 ssh2
Sep 10 18:55:39 grace sshd[24712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.223.18.45  user=root
Sep 10 18:55:41 grace sshd[24712]: Failed password for root from 191.223.18.45 port 45393 ssh2
Sep 10 18:55:43 grace sshd[24715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.223.18.45  user=root
2020-09-11 23:15:20
201.69.116.242 attackspambots
Sep 10 18:56:03 andromeda sshd\[6119\]: Invalid user ubuntu from 201.69.116.242 port 54526
Sep 10 18:56:05 andromeda sshd\[6119\]: Failed password for invalid user ubuntu from 201.69.116.242 port 54526 ssh2
Sep 10 18:56:08 andromeda sshd\[6209\]: Failed password for root from 201.69.116.242 port 52148 ssh2
2020-09-11 22:58:11
139.162.16.60 attack
 TCP (SYN) 139.162.16.60:42288 -> port 53, len 44
2020-09-11 22:48:49
200.89.154.99 attackbotsspam
fail2ban -- 200.89.154.99
...
2020-09-11 23:13:20
58.214.36.86 attackspambots
2020-09-10 UTC: (40x) - admin(3x),asiforis,automak,build_nms,debian,freeswitch,media,root(29x),rudy,smbread
2020-09-11 22:44:19
178.62.12.192 attackspam
Time:     Fri Sep 11 14:42:03 2020 +0000
IP:       178.62.12.192 (GB/United Kingdom/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 11 14:38:58 hosting sshd[16893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.12.192  user=root
Sep 11 14:39:00 hosting sshd[16893]: Failed password for root from 178.62.12.192 port 52878 ssh2
Sep 11 14:40:54 hosting sshd[17031]: Invalid user ubnt from 178.62.12.192 port 48410
Sep 11 14:40:56 hosting sshd[17031]: Failed password for invalid user ubnt from 178.62.12.192 port 48410 ssh2
Sep 11 14:42:01 hosting sshd[17108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.12.192  user=root
2020-09-11 22:51:47
51.91.157.101 attackbotsspam
fail2ban -- 51.91.157.101
...
2020-09-11 23:06:08
14.117.238.146 attackbotsspam
 TCP (SYN) 14.117.238.146:29086 -> port 23, len 40
2020-09-11 23:25:39
97.74.237.196 attackbots
sshd: Failed password for .... from 97.74.237.196 port 38810 ssh2 (4 attempts)
2020-09-11 22:59:22
138.197.180.29 attackbotsspam
Sep 11 22:47:49 web1 sshd[28980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.29  user=root
Sep 11 22:47:51 web1 sshd[28980]: Failed password for root from 138.197.180.29 port 44968 ssh2
Sep 11 22:58:12 web1 sshd[770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.29  user=root
Sep 11 22:58:14 web1 sshd[770]: Failed password for root from 138.197.180.29 port 46198 ssh2
Sep 11 23:02:58 web1 sshd[2781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.29  user=root
Sep 11 23:03:00 web1 sshd[2781]: Failed password for root from 138.197.180.29 port 53050 ssh2
Sep 11 23:07:28 web1 sshd[4576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.29  user=root
Sep 11 23:07:30 web1 sshd[4576]: Failed password for root from 138.197.180.29 port 59878 ssh2
Sep 11 23:11:43 web1 sshd[6482]: pam
...
2020-09-11 23:22:49
149.202.160.188 attackspam
...
2020-09-11 23:20:43

最近上报的IP列表

23.96.45.241 194.87.138.32 212.156.87.194 106.75.231.250
207.191.163.241 112.134.12.163 120.79.180.193 228.162.96.189
187.178.70.223 159.198.3.131 54.163.81.148 161.132.142.100
181.247.204.142 209.232.155.71 81.31.248.122 185.72.253.230
223.125.29.94 43.217.45.21 88.77.165.250 90.243.216.155