106.13.44.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Jul 22 17:32:18 NG-HHDC-SVS-001 sshd[2047]: Invalid user dump from 106.13.44.20 ...	2020-07-22 15:57:26
attackbotsspam	odoo8 ...	2020-07-21 18:54:09
attackbots	2020-07-19T16:41:25.209068shield sshd\[10389\]: Invalid user webadmin from 106.13.44.20 port 35420 2020-07-19T16:41:25.221186shield sshd\[10389\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20 2020-07-19T16:41:27.192339shield sshd\[10389\]: Failed password for invalid user webadmin from 106.13.44.20 port 35420 ssh2 2020-07-19T16:42:24.926570shield sshd\[10481\]: Invalid user orchid from 106.13.44.20 port 44430 2020-07-19T16:42:24.934936shield sshd\[10481\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20	2020-07-20 01:52:17
attack	Invalid user confluence from 106.13.44.20 port 57356	2020-03-28 00:08:39
attack	Mar 22 09:23:42 mail sshd[4651]: Invalid user ac from 106.13.44.20 Mar 22 09:23:42 mail sshd[4651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20 Mar 22 09:23:42 mail sshd[4651]: Invalid user ac from 106.13.44.20 Mar 22 09:23:44 mail sshd[4651]: Failed password for invalid user ac from 106.13.44.20 port 55382 ssh2 Mar 22 09:34:28 mail sshd[6075]: Invalid user ubuntu from 106.13.44.20 ...	2020-03-22 16:47:40
attackbotsspam	Mar 21 18:41:42 Ubuntu-1404-trusty-64-minimal sshd\[436\]: Invalid user tenisha from 106.13.44.20 Mar 21 18:41:42 Ubuntu-1404-trusty-64-minimal sshd\[436\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20 Mar 21 18:41:44 Ubuntu-1404-trusty-64-minimal sshd\[436\]: Failed password for invalid user tenisha from 106.13.44.20 port 57180 ssh2 Mar 21 18:47:23 Ubuntu-1404-trusty-64-minimal sshd\[2443\]: Invalid user nh from 106.13.44.20 Mar 21 18:47:23 Ubuntu-1404-trusty-64-minimal sshd\[2443\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20	2020-03-22 01:58:36
attackspam	Mar 20 22:12:25 santamaria sshd\[11842\]: Invalid user teamspeak from 106.13.44.20 Mar 20 22:12:25 santamaria sshd\[11842\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.20 Mar 20 22:12:27 santamaria sshd\[11842\]: Failed password for invalid user teamspeak from 106.13.44.20 port 43808 ssh2 ...	2020-03-21 05:32:39

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.44.60	attack	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-25 06:39:36
106.13.44.83	attack	Sep 18 13:11:33 gospond sshd[11080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 user=root Sep 18 13:11:36 gospond sshd[11080]: Failed password for root from 106.13.44.83 port 36152 ssh2 ...	2020-09-19 00:06:10
106.13.44.83	attackspambots	$f2bV_matches	2020-09-18 16:12:49
106.13.44.83	attackspam	Sep 18 06:14:54 localhost sshd[1586925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 user=root Sep 18 06:14:55 localhost sshd[1586925]: Failed password for root from 106.13.44.83 port 38356 ssh2 ...	2020-09-18 06:27:33
106.13.44.83	attack	SSH Brute Force	2020-09-12 21:38:19
106.13.44.83	attackbotsspam	Sep 12 07:11:27 root sshd[1113]: Failed password for root from 106.13.44.83 port 48102 ssh2 ...	2020-09-12 13:40:21
106.13.44.83	attackspambots	Sep 11 22:21:31 sshgateway sshd\[22707\]: Invalid user gratia from 106.13.44.83 Sep 11 22:21:31 sshgateway sshd\[22707\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 Sep 11 22:21:32 sshgateway sshd\[22707\]: Failed password for invalid user gratia from 106.13.44.83 port 32792 ssh2	2020-09-12 05:28:30
106.13.44.100	attackspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-26 03:52:03
106.13.44.83	attackspambots	Aug 18 15:17:12 abendstille sshd\[20365\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 user=root Aug 18 15:17:14 abendstille sshd\[20365\]: Failed password for root from 106.13.44.83 port 57678 ssh2 Aug 18 15:20:51 abendstille sshd\[23607\]: Invalid user cathy from 106.13.44.83 Aug 18 15:20:51 abendstille sshd\[23607\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 Aug 18 15:20:54 abendstille sshd\[23607\]: Failed password for invalid user cathy from 106.13.44.83 port 40894 ssh2 ...	2020-08-18 23:31:28
106.13.44.60	attackspambots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-18 22:44:32
106.13.44.60	attackspam	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-08-18 18:11:26
106.13.44.100	attackspam	2020-08-17T12:17:20.925651shield sshd\[30013\]: Invalid user jeronimo from 106.13.44.100 port 46514 2020-08-17T12:17:20.932830shield sshd\[30013\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.100 2020-08-17T12:17:22.904522shield sshd\[30013\]: Failed password for invalid user jeronimo from 106.13.44.100 port 46514 ssh2 2020-08-17T12:23:53.887233shield sshd\[30647\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.100 user=root 2020-08-17T12:23:55.809093shield sshd\[30647\]: Failed password for root from 106.13.44.100 port 52032 ssh2	2020-08-17 22:41:09
106.13.44.100	attack	2020-08-16T23:19:23.714653randservbullet-proofcloud-66.localdomain sshd[25320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.100 user=root 2020-08-16T23:19:25.747090randservbullet-proofcloud-66.localdomain sshd[25320]: Failed password for root from 106.13.44.100 port 53758 ssh2 2020-08-16T23:34:08.715531randservbullet-proofcloud-66.localdomain sshd[25362]: Invalid user carlos from 106.13.44.100 port 48512 ...	2020-08-17 07:52:56
106.13.44.100	attackspam	2020-08-16T19:56:53.381818ns386461 sshd\[17192\]: Invalid user hacker from 106.13.44.100 port 43304 2020-08-16T19:56:53.386682ns386461 sshd\[17192\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.100 2020-08-16T19:56:55.334548ns386461 sshd\[17192\]: Failed password for invalid user hacker from 106.13.44.100 port 43304 ssh2 2020-08-16T20:09:03.077891ns386461 sshd\[29015\]: Invalid user li from 106.13.44.100 port 47124 2020-08-16T20:09:03.081999ns386461 sshd\[29015\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.100 ...	2020-08-17 02:18:05
106.13.44.83	attack	Aug 15 07:54:53 sso sshd[17432]: Failed password for root from 106.13.44.83 port 58238 ssh2 ...	2020-08-15 20:24:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.44.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62518
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.44.20.			IN	A

;; AUTHORITY SECTION:
.			208	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032001 1800 900 604800 86400

;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 21 05:32:35 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 20.44.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.44.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.175.151	attackbotsspam	May 11 19:04:05 sso sshd[19632]: Failed password for root from 222.186.175.151 port 3958 ssh2 May 11 19:04:08 sso sshd[19632]: Failed password for root from 222.186.175.151 port 3958 ssh2 ...	2020-05-12 01:29:53
218.98.26.102	attackspambots	(sshd) Failed SSH login from 218.98.26.102 (CN/China/-): 5 in the last 3600 secs	2020-05-12 01:32:03
185.22.142.197	attack	May 11 18:48:28 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ May 11 18:48:30 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ May 11 18:48:52 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ May 11 18:54:03 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 181 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ May 11 18:54:05 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-05-12 01:18:07
188.162.49.94	attackbots	1589198695 - 05/11/2020 14:04:55 Host: 188.162.49.94/188.162.49.94 Port: 445 TCP Blocked	2020-05-12 00:57:28
91.132.139.195	attackbotsspam	Invalid user moon from 91.132.139.195 port 51504	2020-05-12 00:47:35
187.41.193.245	attackbots	Lines containing failures of 187.41.193.245 May 11 19:44:50 g sshd[26820]: Invalid user uriel from 187.41.193.245 port 53497 May 11 19:44:50 g sshd[26820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.41.193.245 May 11 19:44:52 g sshd[26820]: Failed password for invalid user uriel from 187.41.193.245 port 53497 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.41.193.245	2020-05-12 01:03:50
117.102.102.98	attack	1589198685 - 05/11/2020 14:04:45 Host: 117.102.102.98/117.102.102.98 Port: 445 TCP Blocked	2020-05-12 01:08:20
103.106.137.101	attackspam	Lines containing failures of 103.106.137.101 May 11 13:45:49 nexus sshd[8677]: Did not receive identification string from 103.106.137.101 port 54425 May 11 13:45:49 nexus sshd[8678]: Did not receive identification string from 103.106.137.101 port 54501 May 11 13:45:53 nexus sshd[8681]: Invalid user 666666 from 103.106.137.101 port 54904 May 11 13:45:53 nexus sshd[8680]: Invalid user 666666 from 103.106.137.101 port 54897 May 11 13:45:53 nexus sshd[8681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.106.137.101 May 11 13:45:53 nexus sshd[8680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.106.137.101 May 11 13:45:55 nexus sshd[8681]: Failed password for invalid user 666666 from 103.106.137.101 port 54904 ssh2 May 11 13:45:55 nexus sshd[8680]: Failed password for invalid user 666666 from 103.106.137.101 port 54897 ssh2 May 11 13:45:55 nexus sshd[8681]: Connection closed by 103.106........ ------------------------------	2020-05-12 01:10:19
162.243.137.241	attackspam	[Mon May 11 14:07:39.067285 2020] [:error] [pid 86279] [client 162.243.137.241:40834] [client 162.243.137.241] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "200.132.59.214"] [uri "/portal/redlion"] [unique_id "XrmGW@4d7Dlz0lbJ@xwWRQAAAAU"] ...	2020-05-12 01:16:33
162.241.70.34	attackspam	Attempts to probe web pages for vulnerable PHP or other applications	2020-05-12 01:31:11
94.176.159.135	attackbots	Unauthorised access (May 11) SRC=94.176.159.135 LEN=52 TTL=115 ID=15305 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (May 11) SRC=94.176.159.135 LEN=52 TTL=115 ID=1647 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (May 11) SRC=94.176.159.135 LEN=52 TTL=115 ID=20804 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (May 10) SRC=94.176.159.135 LEN=48 TTL=115 ID=5755 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (May 10) SRC=94.176.159.135 LEN=52 TTL=115 ID=15563 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (May 10) SRC=94.176.159.135 LEN=52 TTL=115 ID=29950 DF TCP DPT=445 WINDOW=8192 SYN	2020-05-12 00:54:23
106.75.157.90	attackbotsspam	May 11 14:04:53 sxvn sshd[686883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.157.90	2020-05-12 00:59:28
171.80.97.227	attackspam	May 11 08:04:18 esmtp postfix/smtpd[3875]: lost connection after AUTH from unknown[171.80.97.227] May 11 08:04:20 esmtp postfix/smtpd[3831]: lost connection after AUTH from unknown[171.80.97.227] May 11 08:04:40 esmtp postfix/smtpd[3875]: lost connection after AUTH from unknown[171.80.97.227] May 11 08:04:41 esmtp postfix/smtpd[3831]: lost connection after AUTH from unknown[171.80.97.227] May 11 08:05:02 esmtp postfix/smtpd[3875]: lost connection after AUTH from unknown[171.80.97.227] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=171.80.97.227	2020-05-12 00:43:51
180.167.195.167	attack	SSH brutforce	2020-05-12 00:58:14
141.98.81.37	attackbotsspam	May 11 16:47:58 vpn01 sshd[8881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.37 May 11 16:48:00 vpn01 sshd[8881]: Failed password for invalid user ubnt from 141.98.81.37 port 59281 ssh2 ...	2020-05-12 00:52:27

最近上报的IP列表

213.190.136.107	115.238.107.211	1.240.81.244	178.246.33.55
46.5.64.196	131.220.190.183	89.132.23.221	217.82.94.37
35.198.138.59	124.149.76.231	85.6.144.59	176.110.250.142
128.193.72.213	82.104.78.13	152.136.129.19	172.74.157.15
113.77.210.45	217.46.160.68	75.234.58.205	197.182.11.227