必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): Beijing

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attackspam
Jul 21 06:04:01 firewall sshd[14588]: Invalid user test1 from 106.13.24.164
Jul 21 06:04:03 firewall sshd[14588]: Failed password for invalid user test1 from 106.13.24.164 port 33444 ssh2
Jul 21 06:07:20 firewall sshd[14765]: Invalid user webmaster from 106.13.24.164
...
2020-07-21 17:25:30
attack
Invalid user amavisd from 106.13.24.164 port 34056
2020-07-12 02:04:11
attackspambots
Jun  9 17:04:28 gw1 sshd[24554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164
Jun  9 17:04:30 gw1 sshd[24554]: Failed password for invalid user ftpuser from 106.13.24.164 port 60438 ssh2
...
2020-06-10 01:05:02
attack
Jun  7 13:38:08 Ubuntu-1404-trusty-64-minimal sshd\[29539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
Jun  7 13:38:10 Ubuntu-1404-trusty-64-minimal sshd\[29539\]: Failed password for root from 106.13.24.164 port 47248 ssh2
Jun  7 14:01:01 Ubuntu-1404-trusty-64-minimal sshd\[11483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
Jun  7 14:01:03 Ubuntu-1404-trusty-64-minimal sshd\[11483\]: Failed password for root from 106.13.24.164 port 48684 ssh2
Jun  7 14:05:11 Ubuntu-1404-trusty-64-minimal sshd\[13332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
2020-06-08 01:18:53
attackspam
SSH login attempts.
2020-05-28 19:23:15
attackbots
May  5 10:15:43 lock-38 sshd[1958951]: Disconnected from authenticating user root 106.13.24.164 port 41054 [preauth]
May  5 11:18:51 lock-38 sshd[1960694]: Invalid user developer from 106.13.24.164 port 38378
May  5 11:18:51 lock-38 sshd[1960694]: Invalid user developer from 106.13.24.164 port 38378
May  5 11:18:51 lock-38 sshd[1960694]: Failed password for invalid user developer from 106.13.24.164 port 38378 ssh2
May  5 11:18:51 lock-38 sshd[1960694]: Disconnected from invalid user developer 106.13.24.164 port 38378 [preauth]
...
2020-05-05 20:07:25
attack
2020-04-29T16:56:42.006348struts4.enskede.local sshd\[30812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
2020-04-29T16:56:45.293872struts4.enskede.local sshd\[30812\]: Failed password for root from 106.13.24.164 port 46474 ssh2
2020-04-29T17:02:35.063634struts4.enskede.local sshd\[30862\]: Invalid user evv from 106.13.24.164 port 43634
2020-04-29T17:02:35.074472struts4.enskede.local sshd\[30862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164
2020-04-29T17:02:37.759596struts4.enskede.local sshd\[30862\]: Failed password for invalid user evv from 106.13.24.164 port 43634 ssh2
...
2020-04-30 01:40:40
attackspambots
[ssh] SSH attack
2020-04-18 14:54:03
attackbotsspam
Apr  5 14:36:03 DAAP sshd[6905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
Apr  5 14:36:05 DAAP sshd[6905]: Failed password for root from 106.13.24.164 port 48244 ssh2
Apr  5 14:39:32 DAAP sshd[6990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
Apr  5 14:39:34 DAAP sshd[6990]: Failed password for root from 106.13.24.164 port 57600 ssh2
Apr  5 14:43:20 DAAP sshd[7122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
Apr  5 14:43:22 DAAP sshd[7122]: Failed password for root from 106.13.24.164 port 38724 ssh2
...
2020-04-05 23:33:59
attackspambots
$f2bV_matches
2020-03-12 16:30:23
attack
Feb  9 01:54:33 firewall sshd[29026]: Invalid user aoh from 106.13.24.164
Feb  9 01:54:34 firewall sshd[29026]: Failed password for invalid user aoh from 106.13.24.164 port 50064 ssh2
Feb  9 01:57:02 firewall sshd[29178]: Invalid user jpx from 106.13.24.164
...
2020-02-09 14:29:52
attackbotsspam
Jan  8 14:37:53 ns381471 sshd[22680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164
Jan  8 14:37:55 ns381471 sshd[22680]: Failed password for invalid user openHabian from 106.13.24.164 port 45294 ssh2
2020-01-08 21:42:01
attackspam
Dec 24 04:15:07 firewall sshd[6689]: Invalid user idc!@#$ from 106.13.24.164
Dec 24 04:15:09 firewall sshd[6689]: Failed password for invalid user idc!@#$ from 106.13.24.164 port 44424 ssh2
Dec 24 04:19:06 firewall sshd[6797]: Invalid user gwendolyne from 106.13.24.164
...
2019-12-24 17:04:15
attackspam
Invalid user adornato from 106.13.24.164 port 56618
2019-12-14 21:19:20
attackbots
Dec  4 19:36:30 MK-Soft-VM6 sshd[5345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164 
Dec  4 19:36:32 MK-Soft-VM6 sshd[5345]: Failed password for invalid user malam from 106.13.24.164 port 58504 ssh2
...
2019-12-05 02:41:10
attackspam
Nov  9 06:05:02 venus sshd\[31703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164  user=root
Nov  9 06:05:04 venus sshd\[31703\]: Failed password for root from 106.13.24.164 port 37928 ssh2
Nov  9 06:10:31 venus sshd\[31826\]: Invalid user minecraft from 106.13.24.164 port 47190
...
2019-11-09 14:16:28
attackspambots
Nov  7 22:05:41 hanapaa sshd\[8194\]: Invalid user odoo from 106.13.24.164
Nov  7 22:05:41 hanapaa sshd\[8194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164
Nov  7 22:05:43 hanapaa sshd\[8194\]: Failed password for invalid user odoo from 106.13.24.164 port 51992 ssh2
Nov  7 22:10:14 hanapaa sshd\[8682\]: Invalid user seedbox from 106.13.24.164
Nov  7 22:10:14 hanapaa sshd\[8682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.24.164
2019-11-08 16:18:44
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.242.35 attackspam
Jan 23 21:02:26 tuotantolaitos sshd[9031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.242.35
Jan 23 21:02:28 tuotantolaitos sshd[9031]: Failed password for invalid user oracle from 106.13.242.35 port 58000 ssh2
...
2020-01-24 03:22:17
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.24.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6720
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.24.164.			IN	A

;; AUTHORITY SECTION:
.			566	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110800 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 16:18:41 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 164.24.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 164.24.13.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
142.93.60.53 attack
Aug 17 23:18:01 OPSO sshd\[18387\]: Invalid user teamspeak from 142.93.60.53 port 37940
Aug 17 23:18:01 OPSO sshd\[18387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.60.53
Aug 17 23:18:03 OPSO sshd\[18387\]: Failed password for invalid user teamspeak from 142.93.60.53 port 37940 ssh2
Aug 17 23:20:01 OPSO sshd\[18887\]: Invalid user ubuntu from 142.93.60.53 port 44192
Aug 17 23:20:01 OPSO sshd\[18887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.60.53
2020-08-18 07:48:30
94.243.219.122 attackspam
2020-08-17T22:24:22+02:00  exim[18880]: [1\48] 1k7lg4-0004uW-0Q H=(host219-122.avianetwork.ru) [94.243.219.122] F= rejected after DATA: This message scored 12.7 spam points.
2020-08-18 07:31:47
93.243.224.73 attackspam
Invalid user tcpdump from 93.243.224.73 port 49186
2020-08-18 07:57:40
122.51.225.107 attack
fail2ban
2020-08-18 07:55:13
41.254.66.91 attackbotsspam
srvr1: (mod_security) mod_security (id:920350) triggered by 41.254.66.91 (LY/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/17 20:24:30 [error] 184717#0: *373212 [client 41.254.66.91] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host'  [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159769587081.834578"] [ref "o0,16v21,16"], client: 41.254.66.91, [redacted] request: "GET / HTTP/1.1" [redacted]
2020-08-18 07:56:53
140.143.61.200 attack
Aug 18 04:26:14 webhost01 sshd[11532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.61.200
Aug 18 04:26:16 webhost01 sshd[11532]: Failed password for invalid user jennie from 140.143.61.200 port 52942 ssh2
...
2020-08-18 08:03:52
198.50.138.228 attackspambots
SSH Invalid Login
2020-08-18 07:41:38
2.139.220.30 attackbots
Aug 17 21:39:14 ip-172-31-16-56 sshd\[10242\]: Invalid user lxr from 2.139.220.30\
Aug 17 21:39:16 ip-172-31-16-56 sshd\[10242\]: Failed password for invalid user lxr from 2.139.220.30 port 59304 ssh2\
Aug 17 21:42:14 ip-172-31-16-56 sshd\[10293\]: Invalid user admin from 2.139.220.30\
Aug 17 21:42:16 ip-172-31-16-56 sshd\[10293\]: Failed password for invalid user admin from 2.139.220.30 port 54398 ssh2\
Aug 17 21:45:18 ip-172-31-16-56 sshd\[10342\]: Invalid user rails from 2.139.220.30\
2020-08-18 07:39:35
34.82.254.168 attack
prod8
...
2020-08-18 07:58:47
222.186.30.57 attack
Aug 18 01:27:12 dev0-dcde-rnet sshd[2916]: Failed password for root from 222.186.30.57 port 34951 ssh2
Aug 18 01:27:20 dev0-dcde-rnet sshd[2918]: Failed password for root from 222.186.30.57 port 15241 ssh2
2020-08-18 07:30:08
103.61.37.88 attack
Aug 18 00:59:12 serwer sshd\[8332\]: Invalid user carmen from 103.61.37.88 port 55766
Aug 18 00:59:12 serwer sshd\[8332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.88
Aug 18 00:59:14 serwer sshd\[8332\]: Failed password for invalid user carmen from 103.61.37.88 port 55766 ssh2
...
2020-08-18 07:39:20
128.199.92.187 attackbotsspam
Aug 17 22:56:28 *hidden* sshd[9711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.92.187 Aug 17 22:56:30 *hidden* sshd[9711]: Failed password for invalid user backups from 128.199.92.187 port 33642 ssh2 Aug 17 23:07:13 *hidden* sshd[11725]: Invalid user jts3 from 128.199.92.187 port 55260
2020-08-18 07:40:23
89.169.77.199 attack
Unauthorised access (Aug 17) SRC=89.169.77.199 LEN=52 TTL=121 ID=17123 DF TCP DPT=445 WINDOW=8192 SYN
2020-08-18 07:42:04
45.71.124.126 attackbots
Aug 17 17:09:21 Host-KEWR-E sshd[8730]: Invalid user postgres from 45.71.124.126 port 32938
...
2020-08-18 08:06:15
150.109.100.65 attack
Ssh brute force
2020-08-18 08:07:11

最近上报的IP列表

120.42.158.32 103.31.109.194 50.70.229.239 91.228.96.156
115.84.76.5 165.227.80.35 31.163.3.227 103.122.12.106
123.26.206.168 157.167.52.180 86.12.128.253 152.231.240.4
180.183.182.106 37.195.197.107 42.54.115.205 209.126.127.229
121.149.176.143 61.1.231.235 115.84.95.133 185.23.200.231