106.13.219.148

基本信息:

城市(city): unknown

省份(region): Beijing

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Jun 6 05:12:10 webhost01 sshd[16179]: Failed password for root from 106.13.219.148 port 55044 ssh2 ...	2020-06-06 06:30:44
attackspambots	Jun 4 06:42:25 ns382633 sshd\[13482\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 user=root Jun 4 06:42:27 ns382633 sshd\[13482\]: Failed password for root from 106.13.219.148 port 38296 ssh2 Jun 4 06:57:59 ns382633 sshd\[15919\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 user=root Jun 4 06:58:01 ns382633 sshd\[15919\]: Failed password for root from 106.13.219.148 port 53158 ssh2 Jun 4 07:00:26 ns382633 sshd\[16598\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 user=root	2020-06-04 20:06:47
attackbots	$f2bV_matches	2020-05-14 17:08:58
attackspambots	Mar 29 16:03:03 ns381471 sshd[18088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 Mar 29 16:03:05 ns381471 sshd[18088]: Failed password for invalid user uy from 106.13.219.148 port 51504 ssh2	2020-03-30 03:23:51
attackspambots	2020-02-11T18:16:31.9973581495-001 sshd[16395]: Invalid user insight from 106.13.219.148 port 33638 2020-02-11T18:16:32.0049591495-001 sshd[16395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 2020-02-11T18:16:31.9973581495-001 sshd[16395]: Invalid user insight from 106.13.219.148 port 33638 2020-02-11T18:16:33.6542681495-001 sshd[16395]: Failed password for invalid user insight from 106.13.219.148 port 33638 ssh2 2020-02-11T18:20:18.4287751495-001 sshd[16656]: Invalid user sori from 106.13.219.148 port 53824 2020-02-11T18:20:18.4322981495-001 sshd[16656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 2020-02-11T18:20:18.4287751495-001 sshd[16656]: Invalid user sori from 106.13.219.148 port 53824 2020-02-11T18:20:20.1064571495-001 sshd[16656]: Failed password for invalid user sori from 106.13.219.148 port 53824 ssh2 2020-02-11T18:23:59.9108361495-001 sshd[16791]: Invalid u ...	2020-02-12 08:13:23
attackbotsspam	Unauthorized connection attempt detected from IP address 106.13.219.148 to port 2220 [J]	2020-01-28 23:46:51
attackbotsspam	Unauthorized connection attempt detected from IP address 106.13.219.148 to port 2220 [J]	2020-01-22 23:30:44
attack	Jan 10 21:09:29 IngegnereFirenze sshd[13432]: Failed password for invalid user testuser01 from 106.13.219.148 port 46584 ssh2 ...	2020-01-11 07:36:02
attackbotsspam	Jan 9 14:23:01 meumeu sshd[11433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 Jan 9 14:23:03 meumeu sshd[11433]: Failed password for invalid user deu from 106.13.219.148 port 60452 ssh2 Jan 9 14:26:43 meumeu sshd[12019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 ...	2020-01-09 21:47:22
attackspambots	Dec 8 15:29:15 Ubuntu-1404-trusty-64-minimal sshd\[6577\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 user=root Dec 8 15:29:17 Ubuntu-1404-trusty-64-minimal sshd\[6577\]: Failed password for root from 106.13.219.148 port 35568 ssh2 Dec 8 15:45:36 Ubuntu-1404-trusty-64-minimal sshd\[20420\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 user=root Dec 8 15:45:38 Ubuntu-1404-trusty-64-minimal sshd\[20420\]: Failed password for root from 106.13.219.148 port 41502 ssh2 Dec 8 15:52:58 Ubuntu-1404-trusty-64-minimal sshd\[24394\]: Invalid user info from 106.13.219.148	2019-12-09 03:35:15
attack	Dec 8 12:41:47 cp sshd[32720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148	2019-12-08 22:16:38
attackbotsspam	Nov 7 14:28:07 ns381471 sshd[14491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.148 Nov 7 14:28:09 ns381471 sshd[14491]: Failed password for invalid user pawan from 106.13.219.148 port 59122 ssh2	2019-11-07 21:35:39

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.219.219	attackbotsspam	Automatic Fail2ban report - Trying login SSH	2020-09-28 07:19:26
106.13.219.219	attack	2020-09-27T10:31:44.771860morrigan.ad5gb.com sshd[1312660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 user=root 2020-09-27T10:31:46.829501morrigan.ad5gb.com sshd[1312660]: Failed password for root from 106.13.219.219 port 56626 ssh2	2020-09-27 23:50:23
106.13.219.219	attackbots	Sep 27 04:44:15 vps208890 sshd[81236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219	2020-09-27 15:50:56
106.13.219.219	attackspambots	$f2bV_matches	2020-08-24 05:12:59
106.13.219.219	attackbotsspam	Invalid user tms from 106.13.219.219 port 43730	2020-07-29 07:39:29
106.13.219.219	attackspambots	Jul 19 18:42:43 fhem-rasp sshd[24827]: Invalid user operatore from 106.13.219.219 port 36540 ...	2020-07-20 00:44:19
106.13.219.219	attackspam	Invalid user eon from 106.13.219.219 port 41476	2020-07-18 23:58:03
106.13.219.219	attackspambots	Jul 15 19:49:26 firewall sshd[15008]: Invalid user hj from 106.13.219.219 Jul 15 19:49:28 firewall sshd[15008]: Failed password for invalid user hj from 106.13.219.219 port 53026 ssh2 Jul 15 19:58:26 firewall sshd[15189]: Invalid user info from 106.13.219.219 ...	2020-07-16 07:15:34
106.13.219.219	attack	Jun 26 06:38:37 vps1 sshd[1928500]: Invalid user admin from 106.13.219.219 port 51934 Jun 26 06:38:39 vps1 sshd[1928500]: Failed password for invalid user admin from 106.13.219.219 port 51934 ssh2 ...	2020-06-26 16:20:54
106.13.219.219	attackbotsspam	Jun 13 09:30:42 ns382633 sshd\[2449\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 user=root Jun 13 09:30:44 ns382633 sshd\[2449\]: Failed password for root from 106.13.219.219 port 33562 ssh2 Jun 13 09:42:20 ns382633 sshd\[4878\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 user=root Jun 13 09:42:22 ns382633 sshd\[4878\]: Failed password for root from 106.13.219.219 port 45568 ssh2 Jun 13 09:45:18 ns382633 sshd\[5632\]: Invalid user guolijun from 106.13.219.219 port 52860 Jun 13 09:45:18 ns382633 sshd\[5632\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219	2020-06-13 19:03:32
106.13.219.218	attackspambots	Icarus honeypot on github	2020-06-11 18:20:42
106.13.219.219	attack	2020-06-10T13:58:41.602713snf-827550 sshd[21300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 2020-06-10T13:58:41.587447snf-827550 sshd[21300]: Invalid user html from 106.13.219.219 port 52456 2020-06-10T13:58:43.774015snf-827550 sshd[21300]: Failed password for invalid user html from 106.13.219.219 port 52456 ssh2 ...	2020-06-11 00:51:19
106.13.219.219	attack	2020-06-08T17:19:27.334831+02:00 sshd[11807]: Failed password for root from 106.13.219.219 port 35874 ssh2	2020-06-08 23:28:58
106.13.219.219	attackspam	Jun 4 22:17:43 MainVPS sshd[19372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 user=root Jun 4 22:17:44 MainVPS sshd[19372]: Failed password for root from 106.13.219.219 port 37074 ssh2 Jun 4 22:20:44 MainVPS sshd[21827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 user=root Jun 4 22:20:46 MainVPS sshd[21827]: Failed password for root from 106.13.219.219 port 44536 ssh2 Jun 4 22:23:23 MainVPS sshd[24053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 user=root Jun 4 22:23:25 MainVPS sshd[24053]: Failed password for root from 106.13.219.219 port 49500 ssh2 ...	2020-06-05 05:27:08
106.13.219.219	attackbotsspam	May 25 11:36:03 v2202003116398111542 sshd[20476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.219.219 user=root	2020-06-03 01:53:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.219.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54107
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.219.148.			IN	A

;; AUTHORITY SECTION:
.			376	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110700 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 07 21:35:35 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 148.219.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.219.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
189.114.7.115	attack	(smtpauth) Failed SMTP AUTH login from 189.114.7.115 (BR/-/189.114.7.115.static.host.gvt.net.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-07-18 00:11:29 dovecot_login authenticator failed for (ADMIN) [189.114.7.115]:56828: 535 Incorrect authentication data (set_id=compras@studio187.com.br) 2020-07-18 00:34:24 dovecot_login authenticator failed for (ADMIN) [189.114.7.115]:64813: 535 Incorrect authentication data (set_id=sindilojasfw@sindilojasfw.com.br) 2020-07-18 00:42:10 dovecot_login authenticator failed for (ADMIN) [189.114.7.115]:53772: 535 Incorrect authentication data (set_id=sindilojasfw@sindilojasfw.com.br) 2020-07-18 00:46:41 dovecot_login authenticator failed for (ADMIN) [189.114.7.115]:53647: 535 Incorrect authentication data (set_id=sindilojasfw@sindilojasfw.com.br) 2020-07-18 00:50:43 dovecot_login authenticator failed for (ADMIN) [189.114.7.115]:64956: 535 Incorrect authentication data (set_id=sindilojasfw@sindilojasfw.com.br)	2020-07-18 18:24:23
40.83.94.188	attackbotsspam	sshd: Failed password for invalid user .... from 40.83.94.188 port 27398 ssh2	2020-07-18 17:51:18
89.107.154.90	attackspam	Jul 18 05:12:09 mail.srvfarm.net postfix/smtps/smtpd[2111753]: warning: unknown[89.107.154.90]: SASL PLAIN authentication failed: Jul 18 05:12:09 mail.srvfarm.net postfix/smtps/smtpd[2111753]: lost connection after AUTH from unknown[89.107.154.90] Jul 18 05:13:10 mail.srvfarm.net postfix/smtps/smtpd[2111753]: warning: unknown[89.107.154.90]: SASL PLAIN authentication failed: Jul 18 05:13:11 mail.srvfarm.net postfix/smtps/smtpd[2111753]: lost connection after AUTH from unknown[89.107.154.90] Jul 18 05:14:23 mail.srvfarm.net postfix/smtpd[2111977]: warning: unknown[89.107.154.90]: SASL PLAIN authentication failed:	2020-07-18 18:03:11
14.63.174.149	attack	Invalid user taylor from 14.63.174.149 port 58653	2020-07-18 18:26:01
80.82.64.98	attackspambots	Jul 18 11:36:50 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session=<5TY5A7SqesBQUkBi> Jul 18 11:38:32 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 18 11:39:37 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session=<6X4yDbSq7FJQUkBi> Jul 18 11:40:55 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.64.98, lip=185.118.197.126, session= Jul 18 11:42:20 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=	2020-07-18 18:03:59
222.252.16.236	attackspambots	Brute forcing RDP port 3389	2020-07-18 18:12:47
218.92.0.173	attack	odoo8 ...	2020-07-18 17:49:15
40.113.89.249	attackspam	sshd: Failed password for invalid user .... from 40.113.89.249 port 60035 ssh2 (2 attempts)	2020-07-18 18:16:06
85.95.150.143	attack	Invalid user tcn from 85.95.150.143 port 55878	2020-07-18 18:10:04
54.37.68.33	attack	Invalid user jb from 54.37.68.33 port 54030	2020-07-18 18:20:36
13.72.82.152	attackbotsspam	Jul 18 13:42:12 gw1 sshd[15663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.82.152 Jul 18 13:42:14 gw1 sshd[15663]: Failed password for invalid user admin from 13.72.82.152 port 48457 ssh2 ...	2020-07-18 17:58:11
20.184.48.24	attackbots	sshd: Failed password for invalid user .... from 20.184.48.24 port 59799 ssh2 (3 attempts)	2020-07-18 17:57:56
45.181.108.34	attack	Automatic report - Port Scan Attack	2020-07-18 17:50:07
177.10.241.111	attackbotsspam	Jul 18 05:42:35 mail.srvfarm.net postfix/smtps/smtpd[2115378]: warning: unknown[177.10.241.111]: SASL PLAIN authentication failed: Jul 18 05:42:35 mail.srvfarm.net postfix/smtps/smtpd[2115378]: lost connection after AUTH from unknown[177.10.241.111] Jul 18 05:44:17 mail.srvfarm.net postfix/smtps/smtpd[2116510]: warning: unknown[177.10.241.111]: SASL PLAIN authentication failed: Jul 18 05:44:18 mail.srvfarm.net postfix/smtps/smtpd[2116510]: lost connection after AUTH from unknown[177.10.241.111] Jul 18 05:45:07 mail.srvfarm.net postfix/smtps/smtpd[2116460]: warning: unknown[177.10.241.111]: SASL PLAIN authentication failed:	2020-07-18 18:01:25
161.97.84.123	attack	SSH brute-force attempt	2020-07-18 18:26:35

最近上报的IP列表

186.54.111.160	173.212.200.13	79.107.138.74	94.23.31.12
138.68.222.78	51.38.49.17	118.24.238.238	219.134.115.114
103.31.109.247	181.196.137.82	90.188.249.22	45.230.7.76
49.79.67.110	1.48.251.183	5.189.186.191	3.13.78.50
46.151.151.211	49.146.1.53	154.85.39.58	37.124.59.33