106.13.48.9 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Oct 8 21:59:31 hidden sshd[4418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.9 Oct 8 21:59:33 hidden sshd[4418]: Failed password for invalid user kevin from 106.13.48.9 port 40514 ssh2 Oct 8 22:16:27 hidden sshd[11400]: Invalid user info from 106.13.48.9 port 38028	2020-10-10 04:46:19
attack	SSH bruteforce	2020-10-09 20:45:22
attackspam	2020-10-09T04:48:40+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)	2020-10-09 12:31:36

类型

评论内容

时间

attackbotsspam

Oct 8 21:59:31 *hidden* sshd[4418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.9 Oct 8 21:59:33 *hidden* sshd[4418]: Failed password for invalid user kevin from 106.13.48.9 port 40514 ssh2 Oct 8 22:16:27 *hidden* sshd[11400]: Invalid user info from 106.13.48.9 port 38028

2020-10-10 04:46:19

attack

SSH bruteforce

2020-10-09 20:45:22

attackspam

2020-10-09T04:48:40+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)

2020-10-09 12:31:36

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.48.122	attack	firewall-block, port(s): 14602/tcp	2020-09-06 20:34:34
106.13.48.122	attackspam	TCP (SYN) 106.13.48.122:47133 -> port 27055, len 44	2020-09-06 12:14:05
106.13.48.122	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-06 04:36:40
106.13.48.122	attack	Aug 11 22:32:14 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 user=root Aug 11 22:32:16 Ubuntu-1404-trusty-64-minimal sshd\[13632\]: Failed password for root from 106.13.48.122 port 42005 ssh2 Aug 11 22:35:19 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 user=root Aug 11 22:35:21 Ubuntu-1404-trusty-64-minimal sshd\[14456\]: Failed password for root from 106.13.48.122 port 61109 ssh2 Aug 11 22:36:39 Ubuntu-1404-trusty-64-minimal sshd\[14851\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 user=root	2020-08-12 05:44:27
106.13.48.122	attack	Unauthorized connection attempt detected from IP address 106.13.48.122 to port 8812	2020-07-25 16:06:07
106.13.48.122	attack	Unauthorized connection attempt detected from IP address 106.13.48.122 to port 768 [T]	2020-07-08 02:06:02
106.13.48.122	attackbots	Jul 6 16:56:18 ift sshd\[32718\]: Invalid user zxc from 106.13.48.122Jul 6 16:56:19 ift sshd\[32718\]: Failed password for invalid user zxc from 106.13.48.122 port 29093 ssh2Jul 6 16:59:16 ift sshd\[33111\]: Failed password for invalid user admin from 106.13.48.122 port 50249 ssh2Jul 6 17:02:02 ift sshd\[34103\]: Invalid user zhangfeng from 106.13.48.122Jul 6 17:02:04 ift sshd\[34103\]: Failed password for invalid user zhangfeng from 106.13.48.122 port 14912 ssh2 ...	2020-07-07 01:17:17
106.13.48.122	attackspam	Jul 5 05:48:37 meumeu sshd[538171]: Invalid user wor from 106.13.48.122 port 40808 Jul 5 05:48:37 meumeu sshd[538171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 Jul 5 05:48:37 meumeu sshd[538171]: Invalid user wor from 106.13.48.122 port 40808 Jul 5 05:48:39 meumeu sshd[538171]: Failed password for invalid user wor from 106.13.48.122 port 40808 ssh2 Jul 5 05:54:07 meumeu sshd[538299]: Invalid user cloud from 106.13.48.122 port 25505 Jul 5 05:54:07 meumeu sshd[538299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 Jul 5 05:54:07 meumeu sshd[538299]: Invalid user cloud from 106.13.48.122 port 25505 Jul 5 05:54:09 meumeu sshd[538299]: Failed password for invalid user cloud from 106.13.48.122 port 25505 ssh2 Jul 5 05:55:56 meumeu sshd[538334]: Invalid user crb from 106.13.48.122 port 39249 ...	2020-07-05 12:46:16
106.13.48.122	attack	Jul 4 03:27:17 PorscheCustomer sshd[13634]: Failed password for root from 106.13.48.122 port 10034 ssh2 Jul 4 03:28:58 PorscheCustomer sshd[13646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 Jul 4 03:29:00 PorscheCustomer sshd[13646]: Failed password for invalid user vegeta from 106.13.48.122 port 24280 ssh2 ...	2020-07-04 10:26:34
106.13.48.122	attackbots	(sshd) Failed SSH login from 106.13.48.122 (CN/China/-): 5 in the last 3600 secs	2020-06-30 14:19:30
106.13.48.122	attackbotsspam	Unauthorized connection attempt detected from IP address 106.13.48.122 to port 1741	2020-06-29 03:37:13
106.13.48.122	attackspambots	TCP (SYN) 106.13.48.122:44166 -> port 9066, len 44	2020-06-25 19:55:48
106.13.48.122	attackspam	Invalid user foo from 106.13.48.122 port 21601	2020-06-20 06:32:26
106.13.48.122	attackbots	Jun 14 13:16:34 debian-2gb-nbg1-2 kernel: \[14392106.448999\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.13.48.122 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=44233 PROTO=TCP SPT=59760 DPT=15235 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-14 19:24:13
106.13.48.122	attackspam	May 29 18:43:45 web1 sshd\[5339\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 user=root May 29 18:43:47 web1 sshd\[5339\]: Failed password for root from 106.13.48.122 port 29128 ssh2 May 29 18:46:57 web1 sshd\[5675\]: Invalid user webmin from 106.13.48.122 May 29 18:46:57 web1 sshd\[5675\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.48.122 May 29 18:47:00 web1 sshd\[5675\]: Failed password for invalid user webmin from 106.13.48.122 port 56198 ssh2	2020-05-30 13:09:42

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.48.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18568
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.48.9.			IN	A

;; AUTHORITY SECTION:
.			490	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100802 1800 900 604800 86400

;; Query time: 257 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 09 12:31:31 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 9.48.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 9.48.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
200.72.142.197	attackspambots	Unauthorized connection attempt from IP address 200.72.142.197 on Port 445(SMB)	2019-12-17 05:25:23
82.127.51.48	attackbots	$f2bV_matches	2019-12-17 05:03:10
60.167.103.3	attackbots	MAIL: User Login Brute Force Attempt	2019-12-17 05:31:46
125.22.10.130	attack	Dec 16 19:05:42 * sshd[3793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.22.10.130 Dec 16 19:05:44 * sshd[3793]: Failed password for invalid user universitaetsrechenzentrum from 125.22.10.130 port 37664 ssh2	2019-12-17 05:00:06
51.15.149.58	attackspambots	\[2019-12-16 16:14:55\] NOTICE\[2839\] chan_sip.c: Registration from '"187"\' failed for '51.15.149.58:5930' - Wrong password \[2019-12-16 16:14:55\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-16T16:14:55.277-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="187",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.15.149.58/5930",Challenge="0a2b5789",ReceivedChallenge="0a2b5789",ReceivedHash="74e8abeb0988101bd06f92f6950cbf11" \[2019-12-16 16:15:15\] NOTICE\[2839\] chan_sip.c: Registration from '"188"\' failed for '51.15.149.58:5985' - Wrong password \[2019-12-16 16:15:15\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-16T16:15:15.817-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="188",SessionID="0x7f0fb47c90d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.15.149	2019-12-17 05:30:14
152.249.226.153	attack	Unauthorized connection attempt from IP address 152.249.226.153 on Port 445(SMB)	2019-12-17 05:22:41
82.212.60.75	attackbotsspam	2019-12-16T21:31:49.117592struts4.enskede.local sshd\[28153\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hsi-kbw-082-212-060-075.hsi.kabelbw.de user=root 2019-12-16T21:31:52.580014struts4.enskede.local sshd\[28153\]: Failed password for root from 82.212.60.75 port 52000 ssh2 2019-12-16T21:31:55.099386struts4.enskede.local sshd\[28155\]: Invalid user 22 from 82.212.60.75 port 52056 2019-12-16T21:31:55.105590struts4.enskede.local sshd\[28155\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=hsi-kbw-082-212-060-075.hsi.kabelbw.de 2019-12-16T21:31:57.268492struts4.enskede.local sshd\[28155\]: Failed password for invalid user 22 from 82.212.60.75 port 52056 ssh2 ...	2019-12-17 05:12:50
111.67.202.86	attack	Dec 16 21:10:10 zeus sshd[25294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.202.86 Dec 16 21:10:12 zeus sshd[25294]: Failed password for invalid user admin from 111.67.202.86 port 48116 ssh2 Dec 16 21:15:18 zeus sshd[25443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.202.86 Dec 16 21:15:20 zeus sshd[25443]: Failed password for invalid user yoyo from 111.67.202.86 port 33060 ssh2	2019-12-17 05:27:26
106.54.220.178	attackspambots	Dec 16 21:35:56 ArkNodeAT sshd\[24170\]: Invalid user server from 106.54.220.178 Dec 16 21:35:56 ArkNodeAT sshd\[24170\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.220.178 Dec 16 21:35:58 ArkNodeAT sshd\[24170\]: Failed password for invalid user server from 106.54.220.178 port 46270 ssh2	2019-12-17 04:58:53
92.46.40.110	attack	Dec 16 05:34:57 hpm sshd\[3743\]: Invalid user jahanshi from 92.46.40.110 Dec 16 05:34:57 hpm sshd\[3743\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.46.40.110 Dec 16 05:34:59 hpm sshd\[3743\]: Failed password for invalid user jahanshi from 92.46.40.110 port 53436 ssh2 Dec 16 05:41:39 hpm sshd\[4492\]: Invalid user hamm from 92.46.40.110 Dec 16 05:41:39 hpm sshd\[4492\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.46.40.110	2019-12-17 05:06:22
87.119.114.15	attack	Netgear DGN Device Remote Command Execution Vulnerability	2019-12-17 05:28:47
60.167.21.163	attackspam	MAIL: User Login Brute Force Attempt	2019-12-17 05:29:53
14.162.144.248	attack	Unauthorized connection attempt from IP address 14.162.144.248 on Port 445(SMB)	2019-12-17 05:18:16
222.186.173.142	attackbots	Dec 16 22:15:11 vpn01 sshd[20957]: Failed password for root from 222.186.173.142 port 6378 ssh2 Dec 16 22:15:24 vpn01 sshd[20957]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 6378 ssh2 [preauth] ...	2019-12-17 05:21:47
190.216.171.196	attackbotsspam	Unauthorized connection attempt from IP address 190.216.171.196 on Port 445(SMB)	2019-12-17 05:22:29

最近上报的IP列表

125.18.250.237	254.95.227.31	42.180.206.192	140.120.101.158
97.1.182.54	137.239.103.227	181.64.129.78	101.83.65.173
125.240.116.27	114.245.183.176	99.158.33.106	151.51.62.250
191.187.144.190	115.203.161.214	82.92.117.254	54.148.139.100
15.105.150.61	158.1.130.90	67.227.167.12	28.242.176.121