106.13.201.63 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Nov 23 15:51:12 meumeu sshd[10398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.63 Nov 23 15:51:14 meumeu sshd[10398]: Failed password for invalid user home from 106.13.201.63 port 37282 ssh2 Nov 23 15:56:58 meumeu sshd[11118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.63 ...	2019-11-24 01:28:16
attack	Oct 27 21:25:33 vps691689 sshd[7426]: Failed password for root from 106.13.201.63 port 40434 ssh2 Oct 27 21:29:41 vps691689 sshd[7493]: Failed password for root from 106.13.201.63 port 48280 ssh2 ...	2019-10-28 04:46:55
attack	Oct 16 16:49:38 marvibiene sshd[33468]: Invalid user osborn from 106.13.201.63 port 60808 Oct 16 16:49:38 marvibiene sshd[33468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.63 Oct 16 16:49:38 marvibiene sshd[33468]: Invalid user osborn from 106.13.201.63 port 60808 Oct 16 16:49:40 marvibiene sshd[33468]: Failed password for invalid user osborn from 106.13.201.63 port 60808 ssh2 ...	2019-10-17 01:54:30

类型

评论内容

时间

attackspam

Nov 23 15:51:12 meumeu sshd[10398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.63 
Nov 23 15:51:14 meumeu sshd[10398]: Failed password for invalid user home from 106.13.201.63 port 37282 ssh2
Nov 23 15:56:58 meumeu sshd[11118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.63 
...

2019-11-24 01:28:16

attack

Oct 27 21:25:33 vps691689 sshd[7426]: Failed password for root from 106.13.201.63 port 40434 ssh2
Oct 27 21:29:41 vps691689 sshd[7493]: Failed password for root from 106.13.201.63 port 48280 ssh2
...

2019-10-28 04:46:55

attack

Oct 16 16:49:38 marvibiene sshd[33468]: Invalid user osborn from 106.13.201.63 port 60808
Oct 16 16:49:38 marvibiene sshd[33468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.63
Oct 16 16:49:38 marvibiene sshd[33468]: Invalid user osborn from 106.13.201.63 port 60808
Oct 16 16:49:40 marvibiene sshd[33468]: Failed password for invalid user osborn from 106.13.201.63 port 60808 ssh2
...

2019-10-17 01:54:30

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.201.44	attack	" "	2020-10-05 00:30:43
106.13.201.44	attackbots	TCP (SYN) 106.13.201.44:57229 -> port 12048, len 44	2020-10-04 16:13:04
106.13.201.158	attackbotsspam	(sshd) Failed SSH login from 106.13.201.158 (CN/China/-): 5 in the last 3600 secs	2020-08-28 03:28:03
106.13.201.158	attackbots	k+ssh-bruteforce	2020-08-27 04:58:44
106.13.201.85	attackspam	$f2bV_matches	2020-08-27 04:38:36
106.13.201.44	attackbots	$f2bV_matches	2020-08-25 07:32:47
106.13.201.44	attackbots	2020-08-24T14:36:42.231757shield sshd\[27371\]: Invalid user zx from 106.13.201.44 port 52142 2020-08-24T14:36:42.260335shield sshd\[27371\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.44 2020-08-24T14:36:44.362653shield sshd\[27371\]: Failed password for invalid user zx from 106.13.201.44 port 52142 ssh2 2020-08-24T14:40:35.724652shield sshd\[27788\]: Invalid user qadmin from 106.13.201.44 port 35946 2020-08-24T14:40:35.745242shield sshd\[27788\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.44	2020-08-24 22:52:53
106.13.201.158	attackbotsspam	Automatic Fail2ban report - Trying login SSH	2020-08-23 15:36:59
106.13.201.85	attackbotsspam	Aug 19 23:49:23 home sshd[1868157]: Invalid user mongo from 106.13.201.85 port 33620 Aug 19 23:49:23 home sshd[1868157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.85 Aug 19 23:49:23 home sshd[1868157]: Invalid user mongo from 106.13.201.85 port 33620 Aug 19 23:49:25 home sshd[1868157]: Failed password for invalid user mongo from 106.13.201.85 port 33620 ssh2 Aug 19 23:54:21 home sshd[1869932]: Invalid user zzw from 106.13.201.85 port 40506 ...	2020-08-20 06:04:34
106.13.201.158	attackspam	Ssh brute force	2020-08-19 08:44:06
106.13.201.158	attack	Aug 18 09:35:53 vps46666688 sshd[13028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.201.158 Aug 18 09:35:55 vps46666688 sshd[13028]: Failed password for invalid user jhonatan from 106.13.201.158 port 58110 ssh2 ...	2020-08-18 20:41:42
106.13.201.85	attackbots	Invalid user aiden from 106.13.201.85 port 47830	2020-08-18 07:02:54
106.13.201.85	attack	Invalid user aiden from 106.13.201.85 port 47830	2020-08-17 08:04:25
106.13.201.44	attack	Aug 16 08:53:09 vps647732 sshd[5145]: Failed password for root from 106.13.201.44 port 56560 ssh2 ...	2020-08-16 15:43:06
106.13.201.158	attackbots	bruteforce detected	2020-08-15 22:06:18

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.201.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12333
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.201.63.			IN	A

;; AUTHORITY SECTION:
.			422	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101600 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 17 01:54:26 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 63.201.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 63.201.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
61.148.194.162	attackbots	SSH bruteforce (Triggered fail2ban)	2019-10-31 20:58:13
66.207.68.117	attack	WordPress login Brute force / Web App Attack on client site.	2019-10-31 21:19:48
118.24.99.161	attackbots	2019-10-31T12:56:44.518108abusebot-5.cloudsearch.cf sshd\[32345\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.99.161 user=root	2019-10-31 20:59:28
85.37.151.102	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/85.37.151.102/ IT - 1H : (127) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IT NAME ASN : ASN3269 IP : 85.37.151.102 CIDR : 85.37.128.0/17 PREFIX COUNT : 550 UNIQUE IP COUNT : 19507712 ATTACKS DETECTED ASN3269 : 1H - 2 3H - 9 6H - 20 12H - 35 24H - 74 DateTime : 2019-10-31 13:07:25 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery	2019-10-31 21:07:49
118.89.237.20	attack	Oct 31 14:55:42 w sshd[2570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.237.20 user=r.r Oct 31 14:55:44 w sshd[2570]: Failed password for r.r from 118.89.237.20 port 60498 ssh2 Oct 31 14:55:44 w sshd[2570]: Received disconnect from 118.89.237.20: 11: Bye Bye [preauth] Oct 31 15:10:27 w sshd[2800]: Invalid user ue from 118.89.237.20 Oct 31 15:10:27 w sshd[2800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.237.20 Oct 31 15:10:29 w sshd[2800]: Failed password for invalid user ue from 118.89.237.20 port 59016 ssh2 Oct 31 15:10:29 w sshd[2800]: Received disconnect from 118.89.237.20: 11: Bye Bye [preauth] Oct 31 15:15:51 w sshd[2844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.237.20 user=r.r Oct 31 15:15:54 w sshd[2844]: Failed password for r.r from 118.89.237.20 port 43134 ssh2 Oct 31 15:15:54 w sshd[2844]: Received ........ -------------------------------	2019-10-31 21:10:02
47.90.78.139	attack	WordPress login Brute force / Web App Attack on client site.	2019-10-31 21:20:20
62.210.252.184	attack	Oct 31 01:11:20 server sshd\[14112\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-252-184.rev.poneytelecom.eu user=root Oct 31 01:11:22 server sshd\[14112\]: Failed password for root from 62.210.252.184 port 60226 ssh2 Oct 31 15:07:36 server sshd\[13757\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-252-184.rev.poneytelecom.eu user=root Oct 31 15:07:38 server sshd\[13757\]: Failed password for root from 62.210.252.184 port 58316 ssh2 Oct 31 15:07:38 server sshd\[13762\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-252-184.rev.poneytelecom.eu user=root ...	2019-10-31 21:00:01
129.204.219.180	attackbotsspam	Invalid user jira from 129.204.219.180 port 52922	2019-10-31 21:16:18
185.53.88.33	attack	\[2019-10-31 09:33:02\] NOTICE\[2601\] chan_sip.c: Registration from '"1008" \' failed for '185.53.88.33:5144' - Wrong password \[2019-10-31 09:33:02\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-31T09:33:02.345-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1008",SessionID="0x7fdf2ca2e638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.33/5144",Challenge="2e0de3cb",ReceivedChallenge="2e0de3cb",ReceivedHash="992e95fd044ee4e1c4a9cee2c614a7ec" \[2019-10-31 09:33:02\] NOTICE\[2601\] chan_sip.c: Registration from '"1008" \' failed for '185.53.88.33:5144' - Wrong password \[2019-10-31 09:33:02\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-31T09:33:02.461-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1008",SessionID="0x7fdf2c7144f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1	2019-10-31 21:35:32
36.152.65.201	attack	10/31/2019-13:07:36.798515 36.152.65.201 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 25	2019-10-31 21:02:13
68.183.46.173	attackbotsspam	Automatic report - XMLRPC Attack	2019-10-31 21:14:00
106.13.108.213	attack	Oct 31 12:53:52 venus sshd\[10453\]: Invalid user 1234 from 106.13.108.213 port 51801 Oct 31 12:53:52 venus sshd\[10453\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.108.213 Oct 31 12:53:54 venus sshd\[10453\]: Failed password for invalid user 1234 from 106.13.108.213 port 51801 ssh2 ...	2019-10-31 21:00:32
111.223.73.20	attackbotsspam	Oct 31 13:26:31 vps666546 sshd\[1658\]: Invalid user coeval from 111.223.73.20 port 48191 Oct 31 13:26:31 vps666546 sshd\[1658\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.223.73.20 Oct 31 13:26:33 vps666546 sshd\[1658\]: Failed password for invalid user coeval from 111.223.73.20 port 48191 ssh2 Oct 31 13:31:24 vps666546 sshd\[1745\]: Invalid user 12 from 111.223.73.20 port 39642 Oct 31 13:31:24 vps666546 sshd\[1745\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.223.73.20 ...	2019-10-31 21:24:09
103.130.218.125	attack	Oct 31 14:14:01 ns381471 sshd[1392]: Failed password for root from 103.130.218.125 port 51080 ssh2	2019-10-31 21:39:21
222.186.180.6	attackbots	Oct 31 08:55:01 plusreed sshd[15387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Oct 31 08:55:03 plusreed sshd[15387]: Failed password for root from 222.186.180.6 port 60390 ssh2 ...	2019-10-31 21:02:34

最近上报的IP列表

187.159.242.161	99.2.149.237	117.85.116.107	142.167.47.25
98.88.86.99	92.98.69.115	14.22.66.229	218.132.35.107
77.138.98.111	3.249.229.115	220.89.228.138	194.61.24.51
165.3.157.174	132.232.174.171	91.45.14.9	125.16.5.198
165.108.208.146	62.83.197.11	185.205.228.119	47.33.229.201