106.13.4.117 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Dec 2 17:45:09 webhost01 sshd[3551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 Dec 2 17:45:12 webhost01 sshd[3551]: Failed password for invalid user http from 106.13.4.117 port 33418 ssh2 ...	2019-12-02 18:46:12
attack	Nov 29 08:22:24 pkdns2 sshd\[17118\]: Invalid user romeuf from 106.13.4.117Nov 29 08:22:26 pkdns2 sshd\[17118\]: Failed password for invalid user romeuf from 106.13.4.117 port 43980 ssh2Nov 29 08:26:15 pkdns2 sshd\[17330\]: Invalid user upload from 106.13.4.117Nov 29 08:26:17 pkdns2 sshd\[17330\]: Failed password for invalid user upload from 106.13.4.117 port 51522 ssh2Nov 29 08:30:22 pkdns2 sshd\[17504\]: Invalid user asterisk from 106.13.4.117Nov 29 08:30:25 pkdns2 sshd\[17504\]: Failed password for invalid user asterisk from 106.13.4.117 port 59074 ssh2 ...	2019-11-29 14:46:09
attack	Nov 23 09:49:46 ny01 sshd[11735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 Nov 23 09:49:48 ny01 sshd[11735]: Failed password for invalid user nedir from 106.13.4.117 port 33102 ssh2 Nov 23 09:56:24 ny01 sshd[12716]: Failed password for root from 106.13.4.117 port 41368 ssh2	2019-11-24 04:26:13
attackbots	Nov 21 16:54:12 vmanager6029 sshd\[26718\]: Invalid user 888888 from 106.13.4.117 port 49738 Nov 21 16:54:12 vmanager6029 sshd\[26718\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 Nov 21 16:54:13 vmanager6029 sshd\[26718\]: Failed password for invalid user 888888 from 106.13.4.117 port 49738 ssh2	2019-11-22 02:25:06
attackspam	2019-11-21T00:31:04.6659681240 sshd\[26277\]: Invalid user othella from 106.13.4.117 port 42228 2019-11-21T00:31:04.6685931240 sshd\[26277\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 2019-11-21T00:31:07.1662511240 sshd\[26277\]: Failed password for invalid user othella from 106.13.4.117 port 42228 ssh2 ...	2019-11-21 07:58:31
attackspambots	sshd jail - ssh hack attempt	2019-11-14 15:44:10
attack	Fail2Ban Ban Triggered	2019-11-11 04:08:46
attackspam	2019-11-04T18:44:45.637371abusebot-5.cloudsearch.cf sshd\[17573\]: Invalid user ionut123 from 106.13.4.117 port 41260 2019-11-04T18:44:45.642313abusebot-5.cloudsearch.cf sshd\[17573\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117	2019-11-05 06:07:37
attackbots	Oct 21 00:26:14 ny01 sshd[22341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 Oct 21 00:26:16 ny01 sshd[22341]: Failed password for invalid user aa123445 from 106.13.4.117 port 49750 ssh2 Oct 21 00:31:33 ny01 sshd[22975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117	2019-10-21 18:09:14
attackspam	Oct 18 07:52:12 MK-Soft-VM6 sshd[29265]: Failed password for root from 106.13.4.117 port 55148 ssh2 ...	2019-10-18 14:26:32
attackspambots	Oct 16 05:31:29 bouncer sshd\[20781\]: Invalid user mybase from 106.13.4.117 port 38946 Oct 16 05:31:29 bouncer sshd\[20781\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 Oct 16 05:31:31 bouncer sshd\[20781\]: Failed password for invalid user mybase from 106.13.4.117 port 38946 ssh2 ...	2019-10-16 12:17:39
attackbotsspam	Oct 10 22:53:31 php1 sshd\[1853\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 user=root Oct 10 22:53:33 php1 sshd\[1853\]: Failed password for root from 106.13.4.117 port 56040 ssh2 Oct 10 22:57:33 php1 sshd\[2203\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 user=root Oct 10 22:57:35 php1 sshd\[2203\]: Failed password for root from 106.13.4.117 port 59072 ssh2 Oct 10 23:01:23 php1 sshd\[2542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 user=root	2019-10-11 19:00:02
attackbotsspam	Oct 10 07:48:37 OPSO sshd\[28932\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 user=root Oct 10 07:48:38 OPSO sshd\[28932\]: Failed password for root from 106.13.4.117 port 50950 ssh2 Oct 10 07:53:28 OPSO sshd\[29920\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 user=root Oct 10 07:53:30 OPSO sshd\[29920\]: Failed password for root from 106.13.4.117 port 57142 ssh2 Oct 10 07:58:23 OPSO sshd\[30679\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.117 user=root	2019-10-10 14:19:37
attackspam	$f2bV_matches	2019-09-30 15:39:53

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.46.123	attackspam	Oct 12 17:40:14 buvik sshd[7813]: Failed password for invalid user velarde from 106.13.46.123 port 54450 ssh2 Oct 12 17:44:39 buvik sshd[8406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.46.123 user=root Oct 12 17:44:41 buvik sshd[8406]: Failed password for root from 106.13.46.123 port 44970 ssh2 ...	2020-10-12 23:48:43
106.13.4.132	attackbots	2020-10-12T13:35:54+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-10-12 22:34:30
106.13.46.123	attack	Repeated brute force against a port	2020-10-12 15:13:26
106.13.4.132	attackbotsspam	$f2bV_matches	2020-10-12 14:01:58
106.13.42.140	attack	Oct 11 22:12:43 ip-172-31-16-56 sshd\[26755\]: Invalid user ion from 106.13.42.140\ Oct 11 22:12:45 ip-172-31-16-56 sshd\[26755\]: Failed password for invalid user ion from 106.13.42.140 port 59816 ssh2\ Oct 11 22:15:55 ip-172-31-16-56 sshd\[26810\]: Invalid user oracle from 106.13.42.140\ Oct 11 22:15:57 ip-172-31-16-56 sshd\[26810\]: Failed password for invalid user oracle from 106.13.42.140 port 57116 ssh2\ Oct 11 22:19:12 ip-172-31-16-56 sshd\[26875\]: Invalid user jjonglee from 106.13.42.140\	2020-10-12 07:26:45
106.13.42.140	attack	Oct 11 15:24:05 serwer sshd\[24282\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 user=root Oct 11 15:24:08 serwer sshd\[24282\]: Failed password for root from 106.13.42.140 port 35530 ssh2 Oct 11 15:29:06 serwer sshd\[24929\]: Invalid user ellen from 106.13.42.140 port 58314 Oct 11 15:29:06 serwer sshd\[24929\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 ...	2020-10-11 23:41:38
106.13.42.140	attackbots	leo_www	2020-10-11 15:40:49
106.13.42.140	attack	5x Failed Password	2020-10-11 08:58:30
106.13.41.87	attack	2020-10-10T21:33:05.633586hostname sshd[29936]: Failed password for invalid user ark from 106.13.41.87 port 39526 ssh2 2020-10-10T21:36:13.475247hostname sshd[31217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.41.87 user=root 2020-10-10T21:36:15.718396hostname sshd[31217]: Failed password for root from 106.13.41.87 port 38682 ssh2 ...	2020-10-10 23:09:58
106.13.41.87	attackspam	$f2bV_matches	2020-10-10 15:00:24
106.13.48.9	attackbotsspam	Oct 8 21:59:31 hidden sshd[4418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.9 Oct 8 21:59:33 hidden sshd[4418]: Failed password for invalid user kevin from 106.13.48.9 port 40514 ssh2 Oct 8 22:16:27 hidden sshd[11400]: Invalid user info from 106.13.48.9 port 38028	2020-10-10 04:46:19
106.13.48.9	attack	SSH bruteforce	2020-10-09 20:45:22
106.13.48.9	attackspam	2020-10-09T04:48:40+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)	2020-10-09 12:31:36
106.13.47.78	attackbots	2020-10-07T18:58:06.178811abusebot-4.cloudsearch.cf sshd[29305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.78 user=root 2020-10-07T18:58:07.888553abusebot-4.cloudsearch.cf sshd[29305]: Failed password for root from 106.13.47.78 port 59938 ssh2 2020-10-07T19:00:56.752007abusebot-4.cloudsearch.cf sshd[29323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.78 user=root 2020-10-07T19:00:58.466828abusebot-4.cloudsearch.cf sshd[29323]: Failed password for root from 106.13.47.78 port 41708 ssh2 2020-10-07T19:03:53.790334abusebot-4.cloudsearch.cf sshd[29440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.78 user=root 2020-10-07T19:03:56.135880abusebot-4.cloudsearch.cf sshd[29440]: Failed password for root from 106.13.47.78 port 51712 ssh2 2020-10-07T19:06:14.010121abusebot-4.cloudsearch.cf sshd[29458]: pam_unix(sshd:auth): authenticat ...	2020-10-08 03:31:04
106.13.47.78	attackspambots	5x Failed Password	2020-10-07 19:46:55

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.4.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6946
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.4.117.			IN	A

;; AUTHORITY SECTION:
.			412	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019093000 1800 900 604800 86400

;; Query time: 269 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 30 15:39:49 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 117.4.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 117.4.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
93.89.225.115	attackbotsspam	Automatic report - XMLRPC Attack	2019-11-15 01:01:32
123.125.71.16	attackbots	Bad bot/spoofed identity	2019-11-15 01:03:13
106.12.222.252	attackspam	Nov 14 18:05:30 pornomens sshd\[13666\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.222.252 user=root Nov 14 18:05:33 pornomens sshd\[13666\]: Failed password for root from 106.12.222.252 port 45502 ssh2 Nov 14 18:14:30 pornomens sshd\[13737\]: Invalid user eckers from 106.12.222.252 port 42158 Nov 14 18:14:30 pornomens sshd\[13737\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.222.252 ...	2019-11-15 01:18:15
112.198.126.36	attack	Lagging net connection	2019-11-15 01:36:05
107.175.92.26	attackbots	Nov 11 23:34:53 zimbra sshd[18494]: Invalid user javiar from 107.175.92.26 Nov 11 23:34:53 zimbra sshd[18494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.92.26 Nov 11 23:34:55 zimbra sshd[18494]: Failed password for invalid user javiar from 107.175.92.26 port 33334 ssh2 Nov 11 23:34:55 zimbra sshd[18494]: Received disconnect from 107.175.92.26 port 33334:11: Bye Bye [preauth] Nov 11 23:34:55 zimbra sshd[18494]: Disconnected from 107.175.92.26 port 33334 [preauth] Nov 12 02:07:47 zimbra sshd[2528]: Invalid user hakkaku from 107.175.92.26 Nov 12 02:07:47 zimbra sshd[2528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.92.26 Nov 12 02:07:49 zimbra sshd[2528]: Failed password for invalid user hakkaku from 107.175.92.26 port 35062 ssh2 Nov 12 02:07:49 zimbra sshd[2528]: Received disconnect from 107.175.92.26 port 35062:11: Bye Bye [preauth] Nov 12 02:07:49 zimbra sshd[2528]........ -------------------------------	2019-11-15 01:42:46
5.2.72.100	attackspam	Nov 14 16:49:16 vps647732 sshd[27204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.2.72.100 Nov 14 16:49:18 vps647732 sshd[27204]: Failed password for invalid user oracle from 5.2.72.100 port 42590 ssh2 ...	2019-11-15 01:37:02
41.79.65.214	attackbotsspam	Unauthorized IMAP connection attempt	2019-11-15 01:11:28
184.185.2.213	attackbotsspam	(imapd) Failed IMAP login from 184.185.2.213 (US/United States/-): 1 in the last 3600 secs	2019-11-15 01:16:57
185.43.209.215	attackspam	Nov 14 18:00:29 andromeda postfix/smtpd\[27514\]: warning: unknown\[185.43.209.215\]: SASL LOGIN authentication failed: authentication failure Nov 14 18:00:29 andromeda postfix/smtpd\[27514\]: warning: unknown\[185.43.209.215\]: SASL LOGIN authentication failed: authentication failure Nov 14 18:00:29 andromeda postfix/smtpd\[27514\]: warning: unknown\[185.43.209.215\]: SASL LOGIN authentication failed: authentication failure Nov 14 18:00:29 andromeda postfix/smtpd\[27514\]: warning: unknown\[185.43.209.215\]: SASL LOGIN authentication failed: authentication failure Nov 14 18:00:29 andromeda postfix/smtpd\[27514\]: warning: unknown\[185.43.209.215\]: SASL LOGIN authentication failed: authentication failure	2019-11-15 01:10:07
85.208.96.18	attackspam	Automatic report - Banned IP Access	2019-11-15 01:26:28
5.188.86.22	attackspam	Portscan or hack attempt detected by psad/fwsnort	2019-11-15 01:27:01
93.84.84.54	attackspam	(imapd) Failed IMAP login from 93.84.84.54 (BY/Belarus/static12.byfly.gomel.by): 1 in the last 3600 secs	2019-11-15 01:46:18
45.143.221.15	attackspam	\[2019-11-14 11:49:22\] NOTICE\[2601\] chan_sip.c: Registration from '"7001" \' failed for '45.143.221.15:5263' - Wrong password \[2019-11-14 11:49:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-14T11:49:22.700-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7001",SessionID="0x7fdf2c2ef6a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.15/5263",Challenge="45a8ccbe",ReceivedChallenge="45a8ccbe",ReceivedHash="250b502a83630247a69ff74fa8059d1c" \[2019-11-14 11:49:22\] NOTICE\[2601\] chan_sip.c: Registration from '"7001" \' failed for '45.143.221.15:5263' - Wrong password \[2019-11-14 11:49:22\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-14T11:49:22.833-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7001",SessionID="0x7fdf2c53e5e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-11-15 01:00:42
212.64.94.157	attackbots	Nov 14 17:18:23 srv206 sshd[29518]: Invalid user admin from 212.64.94.157 ...	2019-11-15 01:25:34
101.230.238.32	attack	Nov 14 15:33:59 vserver sshd\[18903\]: Invalid user broucke from 101.230.238.32Nov 14 15:34:01 vserver sshd\[18903\]: Failed password for invalid user broucke from 101.230.238.32 port 52216 ssh2Nov 14 15:37:47 vserver sshd\[18918\]: Invalid user orley from 101.230.238.32Nov 14 15:37:49 vserver sshd\[18918\]: Failed password for invalid user orley from 101.230.238.32 port 59682 ssh2 ...	2019-11-15 01:34:36

最近上报的IP列表

117.54.234.35	123.18.164.241	64.228.7.87	14.190.155.56
208.187.167.63	27.76.165.92	159.192.217.237	202.21.192.240
116.12.90.51	210.111.185.86	177.87.230.3	155.12.58.126
112.112.151.100	113.178.67.63	59.115.201.223	64.45.237.72
13.113.48.208	1.64.217.181	95.58.23.225	2400:6180:0:d1::87a:7001