106.13.196.80 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Nov 8 03:52:50 plusreed sshd[24952]: Invalid user mongod from 106.13.196.80 ...	2019-11-08 19:32:29
attackspambots	Oct 20 11:34:14 * sshd[29959]: Invalid user anhostnamea from 106.13.196.80 Oct 20 11:34:14 * sshd[29959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.80 Oct 20 11:34:16 * sshd[29959]: Failed password for invalid user anhostnamea from 106.13.196.80 port 43134 ssh2 Oct 20 11:34:16 * sshd[29959]: Received disconnect from 106.13.196.80: 11: Bye Bye [preauth] Oct 20 11:56:59 * sshd[1002]: Invalid user andy from 106.13.196.80 Oct 20 11:56:59 * sshd[1002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.80 Oct 20 11:57:01 * sshd[1002]: Failed password for invalid user andy from 106.13.196.80 port 53376 ssh2 Oct 20 11:57:01 * sshd[1002]: Received disconnect from 106.13.196.80: 11: Bye Bye [preauth] Oct 20 12:02:06 *** sshd[1845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.80 user=r.r Oct 20 12:02:08 ........ -------------------------------	2019-10-21 08:28:37

类型

评论内容

时间

attack

Nov  8 03:52:50 plusreed sshd[24952]: Invalid user mongod from 106.13.196.80
...

2019-11-08 19:32:29

attackspambots

Oct 20 11:34:14 *** sshd[29959]: Invalid user anhostnamea from 106.13.196.80
Oct 20 11:34:14 *** sshd[29959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.80 
Oct 20 11:34:16 *** sshd[29959]: Failed password for invalid user anhostnamea from 106.13.196.80 port 43134 ssh2
Oct 20 11:34:16 *** sshd[29959]: Received disconnect from 106.13.196.80: 11: Bye Bye [preauth]
Oct 20 11:56:59 *** sshd[1002]: Invalid user andy from 106.13.196.80
Oct 20 11:56:59 *** sshd[1002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.80 
Oct 20 11:57:01 *** sshd[1002]: Failed password for invalid user andy from 106.13.196.80 port 53376 ssh2
Oct 20 11:57:01 *** sshd[1002]: Received disconnect from 106.13.196.80: 11: Bye Bye [preauth]
Oct 20 12:02:06 *** sshd[1845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.80  user=r.r
Oct 20 12:02:08 ........
-------------------------------

2019-10-21 08:28:37

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.196.51	attackspambots	Oct 13 06:59:41 host2 sshd[95972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51 user=root Oct 13 06:59:42 host2 sshd[95972]: Failed password for root from 106.13.196.51 port 45412 ssh2 Oct 13 07:03:10 host2 sshd[96589]: Invalid user sorin from 106.13.196.51 port 58764 Oct 13 07:03:10 host2 sshd[96589]: Invalid user sorin from 106.13.196.51 port 58764 ...	2020-10-13 13:28:56
106.13.196.51	attackbots	Oct 13 02:53:59 gw1 sshd[5855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51 Oct 13 02:54:01 gw1 sshd[5855]: Failed password for invalid user johanna from 106.13.196.51 port 53818 ssh2 ...	2020-10-13 06:13:38
106.13.196.190	attackbotsspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-25 04:46:11
106.13.196.51	attackbotsspam	Invalid user midgear from 106.13.196.51 port 41462	2020-08-20 15:17:42
106.13.196.51	attackspambots	Aug 16 08:21:27 lanister sshd[1316]: Failed password for invalid user jayrock from 106.13.196.51 port 48160 ssh2 Aug 16 08:21:24 lanister sshd[1316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51 Aug 16 08:21:24 lanister sshd[1316]: Invalid user jayrock from 106.13.196.51 Aug 16 08:21:27 lanister sshd[1316]: Failed password for invalid user jayrock from 106.13.196.51 port 48160 ssh2	2020-08-17 02:29:31
106.13.196.51	attackbots	2020-08-14 14:18:47,147 fail2ban.actions: WARNING [ssh] Ban 106.13.196.51	2020-08-15 04:13:52
106.13.196.51	attackbotsspam	Aug 2 08:06:13 * sshd[22262]: Failed password for root from 106.13.196.51 port 33918 ssh2	2020-08-02 14:42:20
106.13.196.51	attackbotsspam	Jul 28 07:18:11 ns392434 sshd[30945]: Invalid user wxg from 106.13.196.51 port 39224 Jul 28 07:18:11 ns392434 sshd[30945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51 Jul 28 07:18:11 ns392434 sshd[30945]: Invalid user wxg from 106.13.196.51 port 39224 Jul 28 07:18:13 ns392434 sshd[30945]: Failed password for invalid user wxg from 106.13.196.51 port 39224 ssh2 Jul 28 07:19:20 ns392434 sshd[30972]: Invalid user sampson from 106.13.196.51 port 48598 Jul 28 07:19:20 ns392434 sshd[30972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51 Jul 28 07:19:20 ns392434 sshd[30972]: Invalid user sampson from 106.13.196.51 port 48598 Jul 28 07:19:22 ns392434 sshd[30972]: Failed password for invalid user sampson from 106.13.196.51 port 48598 ssh2 Jul 28 07:19:54 ns392434 sshd[30982]: Invalid user v from 106.13.196.51 port 53806	2020-07-28 18:25:57
106.13.196.212	attack	Attempted connection to port 445.	2020-07-17 02:31:21
106.13.196.51	attackbots	Jul 6 07:11:48 server sshd[3367]: Failed password for root from 106.13.196.51 port 54024 ssh2 Jul 6 07:14:07 server sshd[6030]: Failed password for invalid user lpf from 106.13.196.51 port 52612 ssh2 Jul 6 07:16:25 server sshd[8258]: Failed password for invalid user testuser from 106.13.196.51 port 51186 ssh2	2020-07-06 16:17:29
106.13.196.51	attackbots	SSH invalid-user multiple login attempts	2020-06-07 12:37:46
106.13.196.51	attackspam	Jun 5 08:04:40 server sshd[31156]: Failed password for root from 106.13.196.51 port 49220 ssh2 Jun 5 08:08:02 server sshd[1871]: Failed password for root from 106.13.196.51 port 37718 ssh2 Jun 5 08:11:37 server sshd[5989]: Failed password for root from 106.13.196.51 port 54450 ssh2	2020-06-05 15:38:33
106.13.196.51	attackbots	2020-05-30T17:18:52.0816951495-001 sshd[18520]: Failed password for invalid user campbell from 106.13.196.51 port 47410 ssh2 2020-05-30T17:20:37.0595701495-001 sshd[18573]: Invalid user test_app from 106.13.196.51 port 40054 2020-05-30T17:20:37.0668851495-001 sshd[18573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.196.51 2020-05-30T17:20:37.0595701495-001 sshd[18573]: Invalid user test_app from 106.13.196.51 port 40054 2020-05-30T17:20:39.3740991495-001 sshd[18573]: Failed password for invalid user test_app from 106.13.196.51 port 40054 ssh2 2020-05-30T17:22:17.5714271495-001 sshd[18639]: Invalid user teamspeak from 106.13.196.51 port 60928 ...	2020-05-31 06:29:27
106.13.196.51	attackbotsspam	Bruteforce detected by fail2ban	2020-05-09 12:59:05
106.13.196.51	attack	May 2 13:07:16 vps58358 sshd\[28901\]: Invalid user administrator from 106.13.196.51May 2 13:07:17 vps58358 sshd\[28901\]: Failed password for invalid user administrator from 106.13.196.51 port 51308 ssh2May 2 13:09:28 vps58358 sshd\[29000\]: Invalid user noreply from 106.13.196.51May 2 13:09:30 vps58358 sshd\[29000\]: Failed password for invalid user noreply from 106.13.196.51 port 53070 ssh2May 2 13:11:36 vps58358 sshd\[29043\]: Failed password for root from 106.13.196.51 port 54820 ssh2May 2 13:13:46 vps58358 sshd\[29072\]: Invalid user user01 from 106.13.196.51 ...	2020-05-02 22:19:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.196.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47365
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.196.80.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102001 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 21 08:28:34 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 80.196.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 80.196.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
104.248.117.70	attackbots	SS5,WP GET /wp-login.php	2020-05-17 00:50:07
183.82.48.34	attack	Attempted connection to ports 22, 8291, 8728.	2020-05-17 00:31:39
14.17.110.58	attackspam	May 16 00:50:38 web1 sshd\[1685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.17.110.58 user=root May 16 00:50:39 web1 sshd\[1685\]: Failed password for root from 14.17.110.58 port 53094 ssh2 May 16 00:52:18 web1 sshd\[1848\]: Invalid user fede from 14.17.110.58 May 16 00:52:18 web1 sshd\[1848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.17.110.58 May 16 00:52:20 web1 sshd\[1848\]: Failed password for invalid user fede from 14.17.110.58 port 43638 ssh2	2020-05-17 01:25:23
61.133.232.248	attack	DATE:2020-05-16 11:20:14, IP:61.133.232.248, PORT:ssh SSH brute force auth (docker-dc)	2020-05-17 01:21:28
115.84.91.94	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-05-17 01:02:21
196.52.43.61	attack	May 16 08:31:13 debian-2gb-nbg1-2 kernel: \[11869519.186890\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=196.52.43.61 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=10978 DPT=8444 WINDOW=65535 RES=0x00 SYN URGP=0	2020-05-17 00:48:03
37.1.246.245	attackbots	May 16 08:29:10 clarabelen sshd[25345]: reveeclipse mapping checking getaddrinfo for rev-245-246-20.isp3.alsatis.net [37.1.246.245] failed - POSSIBLE BREAK-IN ATTEMPT! May 16 08:29:10 clarabelen sshd[25345]: Invalid user pi from 37.1.246.245 May 16 08:29:10 clarabelen sshd[25346]: reveeclipse mapping checking getaddrinfo for rev-245-246-20.isp3.alsatis.net [37.1.246.245] failed - POSSIBLE BREAK-IN ATTEMPT! May 16 08:29:10 clarabelen sshd[25346]: Invalid user pi from 37.1.246.245 May 16 08:29:10 clarabelen sshd[25345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.1.246.245 May 16 08:29:10 clarabelen sshd[25346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.1.246.245 May 16 08:29:12 clarabelen sshd[25345]: Failed password for invalid user pi from 37.1.246.245 port 60638 ssh2 May 16 08:29:12 clarabelen sshd[25346]: Failed password for invalid user pi from 37.1.246.245 port 60640 s........ -------------------------------	2020-05-17 00:57:15
151.0.144.162	attack	Unauthorized connection attempt detected from IP address 151.0.144.162 to port 81	2020-05-17 01:08:24
77.204.16.131	attackspambots	Apr 25 21:35:50 hermescis postfix/smtpd[29901]: NOQUEUE: reject: RCPT from 131.16.204.77.rev.sfr.net[77.204.16.131]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=<123.143.205.77.rev.sfr.net>	2020-05-17 00:49:37
125.141.139.9	attack	May 16 05:24:00 PorscheCustomer sshd[23827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.9 May 16 05:24:02 PorscheCustomer sshd[23827]: Failed password for invalid user bagios from 125.141.139.9 port 33912 ssh2 May 16 05:26:58 PorscheCustomer sshd[23927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.9 ...	2020-05-17 00:47:05
195.54.167.15	attackbots	May 16 11:35:13 debian-2gb-nbg1-2 kernel: \[11880558.053254\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.167.15 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=47843 PROTO=TCP SPT=40293 DPT=20575 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-17 01:13:52
81.16.10.158	attack	MYH,DEF GET /wp-login.php	2020-05-17 00:37:16
64.64.104.10	attackbots	Unauthorized connection attempt detected from IP address 64.64.104.10 to port 2375	2020-05-17 00:51:17
101.127.25.210	attackbotsspam	Port 22 Scan, PTR: PTR record not found	2020-05-17 01:04:10
103.255.224.170	attack	Unauthorized connection attempt from IP address 103.255.224.170 on Port 445(SMB)	2020-05-17 00:54:51

最近上报的IP列表

14.226.54.35	71.6.233.178	27.154.20.222	182.123.159.126
181.210.13.246	153.157.86.106	45.82.34.153	197.25.228.235
190.181.40.156	103.92.28.175	41.206.34.205	114.46.82.62
115.77.155.227	208.93.153.177	188.131.144.30	91.200.114.243
189.209.248.103	46.1.154.108	183.253.20.170	108.21.206.169