106.13.200.140

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Aug 30 00:10:33 meumeu sshd[17454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.140 Aug 30 00:10:36 meumeu sshd[17454]: Failed password for invalid user toto from 106.13.200.140 port 39850 ssh2 Aug 30 00:14:29 meumeu sshd[18061]: Failed password for git from 106.13.200.140 port 43750 ssh2 ...	2019-08-30 06:21:32
attack	Aug 28 11:37:43 srv206 sshd[11535]: Invalid user mhlee from 106.13.200.140 ...	2019-08-28 18:09:16

类型

评论内容

时间

attack

Aug 30 00:10:33 meumeu sshd[17454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.140 
Aug 30 00:10:36 meumeu sshd[17454]: Failed password for invalid user toto from 106.13.200.140 port 39850 ssh2
Aug 30 00:14:29 meumeu sshd[18061]: Failed password for git from 106.13.200.140 port 43750 ssh2
...

2019-08-30 06:21:32

attack

Aug 28 11:37:43 srv206 sshd[11535]: Invalid user mhlee from 106.13.200.140
...

2019-08-28 18:09:16

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.200.198	attackspambots	firewall-block, port(s): 445/tcp	2020-07-09 19:50:19
106.13.200.50	attackbotsspam	Apr 27 22:09:50 mail sshd\[31036\]: Invalid user demo from 106.13.200.50 Apr 27 22:09:50 mail sshd\[31036\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 Apr 27 22:09:52 mail sshd\[31036\]: Failed password for invalid user demo from 106.13.200.50 port 56622 ssh2 ...	2020-04-28 07:31:52
106.13.200.175	attack	Brute-force attempt banned	2020-04-19 01:13:41
106.13.200.175	attackspam	Apr 16 09:49:20 ws22vmsma01 sshd[126933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.175 Apr 16 09:49:21 ws22vmsma01 sshd[126933]: Failed password for invalid user ol from 106.13.200.175 port 49824 ssh2 ...	2020-04-16 22:25:05
106.13.200.50	attack	Apr 12 23:45:50 silence02 sshd[1171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 Apr 12 23:45:53 silence02 sshd[1171]: Failed password for invalid user john from 106.13.200.50 port 59296 ssh2 Apr 12 23:47:42 silence02 sshd[1403]: Failed password for root from 106.13.200.50 port 41828 ssh2	2020-04-13 08:26:18
106.13.200.50	attackbots	Apr 5 00:48:35 vps sshd[601221]: Failed password for root from 106.13.200.50 port 33232 ssh2 Apr 5 00:49:32 vps sshd[605413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 user=root Apr 5 00:49:35 vps sshd[605413]: Failed password for root from 106.13.200.50 port 41778 ssh2 Apr 5 00:50:33 vps sshd[614153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 user=root Apr 5 00:50:35 vps sshd[614153]: Failed password for root from 106.13.200.50 port 50308 ssh2 ...	2020-04-05 08:55:46
106.13.200.50	attack	2019-11-11T06:29:44.523402suse-nuc sshd[1660]: Invalid user traska from 106.13.200.50 port 48400 ...	2020-02-18 04:55:54
106.13.200.50	attack	Feb 15 23:18:25 mout sshd[13656]: Invalid user rhodecode from 106.13.200.50 port 39182	2020-02-16 08:35:54
106.13.200.50	attack	Feb 12 15:54:31 h1745522 sshd[5086]: Invalid user 123456 from 106.13.200.50 port 37824 Feb 12 15:54:31 h1745522 sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 Feb 12 15:54:31 h1745522 sshd[5086]: Invalid user 123456 from 106.13.200.50 port 37824 Feb 12 15:54:33 h1745522 sshd[5086]: Failed password for invalid user 123456 from 106.13.200.50 port 37824 ssh2 Feb 12 15:58:26 h1745522 sshd[5228]: Invalid user ship from 106.13.200.50 port 59264 Feb 12 15:58:26 h1745522 sshd[5228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 Feb 12 15:58:26 h1745522 sshd[5228]: Invalid user ship from 106.13.200.50 port 59264 Feb 12 15:58:29 h1745522 sshd[5228]: Failed password for invalid user ship from 106.13.200.50 port 59264 ssh2 Feb 12 16:02:22 h1745522 sshd[5357]: Invalid user zen123 from 106.13.200.50 port 52526 ...	2020-02-13 09:36:38
106.13.200.50	attack	Unauthorized connection attempt detected from IP address 106.13.200.50 to port 2220 [J]	2020-02-01 09:45:41
106.13.200.7	attackbots	ssh intrusion attempt	2020-01-11 23:32:20
106.13.200.50	attack	Jan 8 14:03:13 ArkNodeAT sshd\[22487\]: Invalid user sre from 106.13.200.50 Jan 8 14:03:13 ArkNodeAT sshd\[22487\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 Jan 8 14:03:15 ArkNodeAT sshd\[22487\]: Failed password for invalid user sre from 106.13.200.50 port 52086 ssh2	2020-01-09 05:07:04
106.13.200.7	attackbots	Dec 24 06:28:37 game-panel sshd[29208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.7 Dec 24 06:28:38 game-panel sshd[29208]: Failed password for invalid user dorothy from 106.13.200.7 port 44902 ssh2 Dec 24 06:30:17 game-panel sshd[29280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.7	2019-12-24 14:58:17
106.13.200.50	attackbots	Dec 19 18:47:53 MK-Soft-Root2 sshd[31845]: Failed password for bin from 106.13.200.50 port 45536 ssh2 ...	2019-12-20 02:05:03
106.13.200.50	attackspam	Dec 4 05:13:23 venus sshd\[29976\]: Invalid user admin from 106.13.200.50 port 36986 Dec 4 05:13:23 venus sshd\[29976\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.200.50 Dec 4 05:13:25 venus sshd\[29976\]: Failed password for invalid user admin from 106.13.200.50 port 36986 ssh2 ...	2019-12-04 13:31:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.200.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42576
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.200.140.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 28 18:09:08 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 140.200.13.106.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 140.200.13.106.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
110.52.145.240	attackbots	Jul 9 05:12:00 ns3042688 proftpd\[5474\]: 127.0.0.1 $110.52.145.240\[110.52.145.240\]$ - USER anonymous: no such user found from 110.52.145.240 \[110.52.145.240\] to 51.254.197.112:21 Jul 9 05:12:05 ns3042688 proftpd\[5555\]: 127.0.0.1 $110.52.145.240\[110.52.145.240\]$ - USER www: no such user found from 110.52.145.240 \[110.52.145.240\] to 51.254.197.112:21 Jul 9 05:12:13 ns3042688 proftpd\[5582\]: 127.0.0.1 $110.52.145.240\[110.52.145.240\]$ - USER www: no such user found from 110.52.145.240 \[110.52.145.240\] to 51.254.197.112:21 Jul 9 05:12:25 ns3042688 proftpd\[5637\]: 127.0.0.1 $110.52.145.240\[110.52.145.240\]$ - USER cesumin $Login failed$: Incorrect password Jul 9 05:12:30 ns3042688 proftpd\[5670\]: 127.0.0.1 $110.52.145.240\[110.52.145.240\]$ - USER cesumin $Login failed$: Incorrect password ...	2019-07-09 20:34:32
77.247.109.72	attack	\[2019-07-09 08:08:53\] NOTICE\[13443\] chan_sip.c: Registration from '"1000" \' failed for '77.247.109.72:5416' - Wrong password \[2019-07-09 08:08:53\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T08:08:53.478-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7f02f835fad8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5416",Challenge="1502e83b",ReceivedChallenge="1502e83b",ReceivedHash="f162c3d1579440fab96784431b2cba79" \[2019-07-09 08:08:53\] NOTICE\[13443\] chan_sip.c: Registration from '"1000" \' failed for '77.247.109.72:5416' - Wrong password \[2019-07-09 08:08:53\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T08:08:53.740-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7f02f88cef08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV	2019-07-09 20:14:58
95.156.102.34	attack	email spam	2019-07-09 20:07:52
177.21.57.252	attackspambots	Brute force attempt	2019-07-09 20:35:39
170.210.214.50	attackspambots	Jul 7 07:52:07 josie sshd[32518]: Invalid user postgres from 170.210.214.50 Jul 7 07:52:07 josie sshd[32518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50 Jul 7 07:52:09 josie sshd[32518]: Failed password for invalid user postgres from 170.210.214.50 port 42134 ssh2 Jul 7 07:52:09 josie sshd[32519]: Received disconnect from 170.210.214.50: 11: Bye Bye Jul 7 07:56:02 josie sshd[2020]: Invalid user tom from 170.210.214.50 Jul 7 07:56:02 josie sshd[2020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50 Jul 7 07:56:04 josie sshd[2020]: Failed password for invalid user tom from 170.210.214.50 port 48994 ssh2 Jul 7 07:56:04 josie sshd[2023]: Received disconnect from 170.210.214.50: 11: Bye Bye Jul 7 07:58:23 josie sshd[3395]: Invalid user simon from 170.210.214.50 Jul 7 07:58:23 josie sshd[3395]: pam_unix(sshd:auth): authentication failure; logname= uid........ -------------------------------	2019-07-09 20:37:44
148.235.57.184	attackbots	$f2bV_matches	2019-07-09 20:44:00
141.98.80.115	attackspambots	" "	2019-07-09 20:13:42
36.90.223.40	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 12:36:26,929 INFO [shellcode_manager] (36.90.223.40) no match, writing hexdump (affa51567e3929e80bd5cb7d6c6fb898 :17026) - SMB (Unknown)	2019-07-09 20:20:01
222.186.52.123	attackbotsspam	2019-07-09T19:12:14.952183enmeeting.mahidol.ac.th sshd\[20736\]: User root from 222.186.52.123 not allowed because not listed in AllowUsers 2019-07-09T19:12:15.406846enmeeting.mahidol.ac.th sshd\[20736\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.123 user=root 2019-07-09T19:12:17.351942enmeeting.mahidol.ac.th sshd\[20736\]: Failed password for invalid user root from 222.186.52.123 port 52967 ssh2 ...	2019-07-09 20:27:31
195.54.43.27	attackbots	[portscan] Port scan	2019-07-09 20:26:17
109.195.160.133	attackspambots	SMB Server BruteForce Attack	2019-07-09 20:16:29
134.209.196.169	attack	Automatic report - Web App Attack	2019-07-09 20:30:27
201.238.172.126	attackbots	Jul 9 06:28:40 herz-der-gamer sshd[18722]: Failed password for invalid user drop from 201.238.172.126 port 40786 ssh2 ...	2019-07-09 20:34:50
217.182.136.202	attackspambots	Wordpress Admin Login attack	2019-07-09 20:35:15
203.150.94.65	attackspambots	Jul 9 14:32:25 cvbmail sshd\[21417\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.150.94.65 user=backup Jul 9 14:32:26 cvbmail sshd\[21417\]: Failed password for backup from 203.150.94.65 port 51142 ssh2 Jul 9 14:34:49 cvbmail sshd\[21424\]: Invalid user user from 203.150.94.65	2019-07-09 20:50:55

最近上报的IP列表

167.71.3.163	142.93.109.153	88.129.208.35	165.22.209.133
86.254.12.212	191.96.43.46	151.56.37.192	104.227.162.109
138.68.128.80	117.60.134.249	217.67.21.68	103.94.120.66
182.112.75.90	62.102.220.136	252.138.10.182	18.225.91.5
183.97.41.248	107.174.61.118	94.152.193.12	104.238.73.112