城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Search Engine Spider
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackbotsspam | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-07-13 15:02:53 |
| attackspambots | Multiple SSH authentication failures from 106.13.42.52 |
2020-07-10 19:43:09 |
| attack | 2020-07-06T18:42:20.777779ns386461 sshd\[14817\]: Invalid user ghost from 106.13.42.52 port 54106 2020-07-06T18:42:20.782550ns386461 sshd\[14817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 2020-07-06T18:42:22.509478ns386461 sshd\[14817\]: Failed password for invalid user ghost from 106.13.42.52 port 54106 ssh2 2020-07-06T18:43:24.652386ns386461 sshd\[15723\]: Invalid user students from 106.13.42.52 port 33896 2020-07-06T18:43:24.657199ns386461 sshd\[15723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 ... |
2020-07-07 02:11:56 |
| attackspambots | $f2bV_matches |
2020-06-28 13:52:36 |
| attack | SSH Invalid Login |
2020-06-28 07:38:48 |
| attackbotsspam | Dec 30 07:27:26 Invalid user sabina from 106.13.42.52 port 59014 |
2019-12-30 15:26:45 |
| attackspam | 20 attempts against mh-ssh on cloud.magehost.pro |
2019-12-05 19:54:08 |
| attackspam | Nov 18 19:48:47 SilenceServices sshd[21298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 Nov 18 19:48:49 SilenceServices sshd[21298]: Failed password for invalid user web12 from 106.13.42.52 port 60144 ssh2 Nov 18 19:52:43 SilenceServices sshd[23936]: Failed password for mysql from 106.13.42.52 port 37928 ssh2 |
2019-11-19 03:19:44 |
| attack | 2019-11-15T14:40:09.849068hub.schaetter.us sshd\[17307\]: Invalid user alister from 106.13.42.52 port 47044 2019-11-15T14:40:09.857020hub.schaetter.us sshd\[17307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 2019-11-15T14:40:12.140927hub.schaetter.us sshd\[17307\]: Failed password for invalid user alister from 106.13.42.52 port 47044 ssh2 2019-11-15T14:45:51.406183hub.schaetter.us sshd\[17323\]: Invalid user ddorsey from 106.13.42.52 port 52196 2019-11-15T14:45:51.414487hub.schaetter.us sshd\[17323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 ... |
2019-11-15 23:01:27 |
| attackspam | Nov 8 09:09:05 server sshd\[1068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 user=root Nov 8 09:09:06 server sshd\[1068\]: Failed password for root from 106.13.42.52 port 44426 ssh2 Nov 8 09:21:51 server sshd\[4503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 user=root Nov 8 09:21:53 server sshd\[4503\]: Failed password for root from 106.13.42.52 port 55762 ssh2 Nov 8 09:27:13 server sshd\[5884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.52 user=root ... |
2019-11-08 17:36:11 |
| attack | 3x Failed Password |
2019-10-30 13:41:03 |
| attack | Oct 29 07:15:57 *** sshd[11539]: Failed password for invalid user johnny from 106.13.42.52 port 42770 ssh2 Oct 29 07:41:23 *** sshd[11976]: Failed password for invalid user ADMIN from 106.13.42.52 port 44318 ssh2 Oct 29 08:08:01 *** sshd[12419]: Failed password for invalid user liane from 106.13.42.52 port 41450 ssh2 Oct 29 08:12:22 *** sshd[12535]: Failed password for invalid user demo from 106.13.42.52 port 50386 ssh2 Oct 29 08:16:46 *** sshd[12591]: Failed password for invalid user xena from 106.13.42.52 port 59316 ssh2 Oct 29 08:25:51 *** sshd[19182]: Failed password for invalid user ky from 106.13.42.52 port 48940 ssh2 Oct 29 08:30:17 *** sshd[27398]: Failed password for invalid user adelaide from 106.13.42.52 port 57868 ssh2 Oct 29 09:02:04 *** sshd[27970]: Failed password for invalid user cmdi from 106.13.42.52 port 35704 ssh2 Oct 29 09:15:38 *** sshd[28267]: Failed password for invalid user jboss from 106.13.42.52 port 34258 ssh2 Oct 29 09:43:53 *** sshd[28792]: Failed password for invalid user from |
2019-10-30 07:32:22 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.42.140 | attack | Oct 11 22:12:43 ip-172-31-16-56 sshd\[26755\]: Invalid user ion from 106.13.42.140\ Oct 11 22:12:45 ip-172-31-16-56 sshd\[26755\]: Failed password for invalid user ion from 106.13.42.140 port 59816 ssh2\ Oct 11 22:15:55 ip-172-31-16-56 sshd\[26810\]: Invalid user oracle from 106.13.42.140\ Oct 11 22:15:57 ip-172-31-16-56 sshd\[26810\]: Failed password for invalid user oracle from 106.13.42.140 port 57116 ssh2\ Oct 11 22:19:12 ip-172-31-16-56 sshd\[26875\]: Invalid user jjonglee from 106.13.42.140\ |
2020-10-12 07:26:45 |
| 106.13.42.140 | attack | Oct 11 15:24:05 serwer sshd\[24282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 user=root Oct 11 15:24:08 serwer sshd\[24282\]: Failed password for root from 106.13.42.140 port 35530 ssh2 Oct 11 15:29:06 serwer sshd\[24929\]: Invalid user ellen from 106.13.42.140 port 58314 Oct 11 15:29:06 serwer sshd\[24929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 ... |
2020-10-11 23:41:38 |
| 106.13.42.140 | attackbots | leo_www |
2020-10-11 15:40:49 |
| 106.13.42.140 | attack | 5x Failed Password |
2020-10-11 08:58:30 |
| 106.13.42.140 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2020-08-07 06:41:45 |
| 106.13.42.140 | attackbots | Jul 17 12:54:32 plex-server sshd[2612471]: Invalid user webmaster from 106.13.42.140 port 40552 Jul 17 12:54:32 plex-server sshd[2612471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 Jul 17 12:54:32 plex-server sshd[2612471]: Invalid user webmaster from 106.13.42.140 port 40552 Jul 17 12:54:34 plex-server sshd[2612471]: Failed password for invalid user webmaster from 106.13.42.140 port 40552 ssh2 Jul 17 12:59:02 plex-server sshd[2613970]: Invalid user wrk from 106.13.42.140 port 38494 ... |
2020-07-17 21:15:09 |
| 106.13.42.140 | attack | Jul 13 16:03:06 home sshd[32643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 Jul 13 16:03:08 home sshd[32643]: Failed password for invalid user milani from 106.13.42.140 port 53904 ssh2 Jul 13 16:06:20 home sshd[539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 ... |
2020-07-13 22:13:44 |
| 106.13.42.140 | attackbots | Invalid user deploy from 106.13.42.140 port 55010 |
2020-07-02 01:55:27 |
| 106.13.42.140 | attackspambots | 2020-06-04T00:44:00.8701101495-001 sshd[38708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 user=root 2020-06-04T00:44:03.4981121495-001 sshd[38708]: Failed password for root from 106.13.42.140 port 42664 ssh2 2020-06-04T00:47:50.1308451495-001 sshd[38839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 user=root 2020-06-04T00:47:52.0009451495-001 sshd[38839]: Failed password for root from 106.13.42.140 port 37100 ssh2 2020-06-04T00:51:33.8793131495-001 sshd[38953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 user=root 2020-06-04T00:51:35.6945201495-001 sshd[38953]: Failed password for root from 106.13.42.140 port 59770 ssh2 ... |
2020-06-04 17:55:35 |
| 106.13.42.140 | attack | Apr 7 12:05:02 lanister sshd[22929]: Invalid user secretaria from 106.13.42.140 Apr 7 12:05:02 lanister sshd[22929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.140 Apr 7 12:05:02 lanister sshd[22929]: Invalid user secretaria from 106.13.42.140 Apr 7 12:05:04 lanister sshd[22929]: Failed password for invalid user secretaria from 106.13.42.140 port 60358 ssh2 |
2020-04-08 04:38:58 |
| 106.13.42.147 | attackbotsspam | Mar 13 04:43:31 ns382633 sshd\[16022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.147 user=root Mar 13 04:43:33 ns382633 sshd\[16022\]: Failed password for root from 106.13.42.147 port 38378 ssh2 Mar 13 04:50:17 ns382633 sshd\[17472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.147 user=root Mar 13 04:50:18 ns382633 sshd\[17472\]: Failed password for root from 106.13.42.147 port 56876 ssh2 Mar 13 04:51:55 ns382633 sshd\[17654\]: Invalid user yangweifei from 106.13.42.147 port 47024 Mar 13 04:51:55 ns382633 sshd\[17654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.147 |
2020-03-13 16:32:18 |
| 106.13.42.147 | attack | Mar 10 17:23:56 ws24vmsma01 sshd[64168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.42.147 Mar 10 17:23:58 ws24vmsma01 sshd[64168]: Failed password for invalid user user1 from 106.13.42.147 port 41008 ssh2 ... |
2020-03-11 05:40:51 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.42.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40204
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.42.52. IN A
;; AUTHORITY SECTION:
. 391 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019102901 1800 900 604800 86400
;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 30 07:32:19 CST 2019
;; MSG SIZE rcvd: 116
Host 52.42.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.42.13.106.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.38.150.105 | attackbots | GET /forum/ HTTP/1.0 302 - Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.87 Safari/537.36 OPR/54.0.2952.71 |
2019-07-21 15:44:22 |
| 49.48.83.144 | attackspambots | Sat, 20 Jul 2019 21:53:46 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:14:47 |
| 110.78.148.173 | attackbotsspam | Sat, 20 Jul 2019 21:53:40 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:36:53 |
| 182.18.251.10 | attack | Sat, 20 Jul 2019 21:53:45 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:16:18 |
| 180.244.223.47 | attack | 8728/tcp 22/tcp 8291/tcp [2019-07-21]3pkt |
2019-07-21 16:08:30 |
| 49.88.112.69 | attackbots | Failed password for root from 49.88.112.69 port 21166 ssh2 Failed password for root from 49.88.112.69 port 21166 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.69 user=root Failed password for root from 49.88.112.69 port 49369 ssh2 Failed password for root from 49.88.112.69 port 49369 ssh2 |
2019-07-21 15:42:08 |
| 183.80.21.60 | attack | 445/tcp [2019-07-21]1pkt |
2019-07-21 15:44:38 |
| 101.95.188.178 | attack | 19/7/20@17:53:46: FAIL: Alarm-Intrusion address from=101.95.188.178 ... |
2019-07-21 15:12:17 |
| 188.120.241.104 | attackspambots | Jul 19 10:20:38 nbi10516-7 sshd[4981]: Did not receive identification string from 188.120.241.104 port 40374 Jul 19 10:20:39 nbi10516-7 sshd[4982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.120.241.104 user=r.r Jul 19 10:20:40 nbi10516-7 sshd[4982]: Failed password for r.r from 188.120.241.104 port 40390 ssh2 Jul 19 10:20:40 nbi10516-7 sshd[4982]: error: Received disconnect from 188.120.241.104 port 40390:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jul 19 10:20:40 nbi10516-7 sshd[4982]: Disconnected from 188.120.241.104 port 40390 [preauth] Jul 19 10:20:41 nbi10516-7 sshd[5003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.120.241.104 user=r.r Jul 19 10:20:43 nbi10516-7 sshd[5003]: Failed password for r.r from 188.120.241.104 port 40628 ssh2 Jul 19 10:20:43 nbi10516-7 sshd[5003]: error: Received disconnect from 188.120.241.104 port 40628:3: com.jcraft.jsch.JSchEx........ ------------------------------- |
2019-07-21 15:25:45 |
| 172.108.154.2 | attackspam | Jul 21 10:40:50 srv-4 sshd\[23703\]: Invalid user mickey from 172.108.154.2 Jul 21 10:40:50 srv-4 sshd\[23703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.108.154.2 Jul 21 10:40:52 srv-4 sshd\[23703\]: Failed password for invalid user mickey from 172.108.154.2 port 47509 ssh2 ... |
2019-07-21 15:45:43 |
| 14.231.245.186 | attackbotsspam | Sat, 20 Jul 2019 21:53:43 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-21 15:24:44 |
| 138.204.186.27 | attackspam | SMB Server BruteForce Attack |
2019-07-21 16:00:40 |
| 132.247.192.249 | attackspambots | 445/tcp [2019-07-21]1pkt |
2019-07-21 15:47:59 |
| 118.168.12.185 | attackspambots | 37215/tcp [2019-07-21]1pkt |
2019-07-21 15:57:42 |
| 77.88.87.74 | attackspambots | xmlrpc attack |
2019-07-21 15:55:33 |