必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attackspam
Jan 31 12:23:53 sd-53420 sshd\[22969\]: Invalid user sajay from 106.13.55.5
Jan 31 12:23:53 sd-53420 sshd\[22969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.5
Jan 31 12:23:55 sd-53420 sshd\[22969\]: Failed password for invalid user sajay from 106.13.55.5 port 36832 ssh2
Jan 31 12:26:59 sd-53420 sshd\[23283\]: Invalid user project from 106.13.55.5
Jan 31 12:26:59 sd-53420 sshd\[23283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.5
...
2020-01-31 19:37:28
attackspambots
Unauthorized connection attempt detected from IP address 106.13.55.5 to port 2220 [J]
2020-01-27 08:59:32
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.55.178 attackspam
May 24 12:08:25 onepixel sshd[1255772]: Invalid user wad from 106.13.55.178 port 48412
May 24 12:08:25 onepixel sshd[1255772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.178 
May 24 12:08:25 onepixel sshd[1255772]: Invalid user wad from 106.13.55.178 port 48412
May 24 12:08:27 onepixel sshd[1255772]: Failed password for invalid user wad from 106.13.55.178 port 48412 ssh2
May 24 12:12:39 onepixel sshd[1256423]: Invalid user rus from 106.13.55.178 port 43450
2020-05-24 23:32:12
106.13.55.178 attackbots
Invalid user deploy from 106.13.55.178 port 52696
2020-05-16 08:11:18
106.13.55.50 attack
Invalid user wps from 106.13.55.50 port 39974
2020-05-15 15:26:29
106.13.55.178 attack
fail2ban -- 106.13.55.178
...
2020-05-14 12:55:37
106.13.55.178 attackbotsspam
5x Failed Password
2020-04-27 03:16:21
106.13.55.50 attackspambots
Apr 18 13:59:00 meumeu sshd[17527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 
Apr 18 13:59:02 meumeu sshd[17527]: Failed password for invalid user tc from 106.13.55.50 port 44918 ssh2
Apr 18 14:03:04 meumeu sshd[18435]: Failed password for root from 106.13.55.50 port 34274 ssh2
...
2020-04-18 20:14:58
106.13.55.50 attackbotsspam
Invalid user history from 106.13.55.50 port 35670
2020-04-03 16:27:32
106.13.55.50 attackbots
k+ssh-bruteforce
2020-04-03 09:46:55
106.13.55.50 attackbots
(sshd) Failed SSH login from 106.13.55.50 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 20 00:08:59 amsweb01 sshd[6462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50  user=root
Mar 20 00:09:00 amsweb01 sshd[6462]: Failed password for root from 106.13.55.50 port 33622 ssh2
Mar 20 00:13:08 amsweb01 sshd[9919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50  user=root
Mar 20 00:13:10 amsweb01 sshd[9919]: Failed password for root from 106.13.55.50 port 33966 ssh2
Mar 20 00:15:01 amsweb01 sshd[10173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50  user=root
2020-03-20 07:36:19
106.13.55.50 attackbotsspam
Mar 12 09:19:03 server sshd\[32466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50  user=root
Mar 12 09:19:06 server sshd\[32466\]: Failed password for root from 106.13.55.50 port 42288 ssh2
Mar 12 09:29:59 server sshd\[2062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50  user=root
Mar 12 09:30:01 server sshd\[2062\]: Failed password for root from 106.13.55.50 port 59570 ssh2
Mar 12 09:34:23 server sshd\[2925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50  user=root
...
2020-03-12 14:35:21
106.13.55.50 attackbots
Lines containing failures of 106.13.55.50 (max 1000)
Mar  9 11:51:59 localhost sshd[16763]: User r.r from 106.13.55.50 not allowed because listed in DenyUsers
Mar  9 11:51:59 localhost sshd[16763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50  user=r.r
Mar  9 11:52:00 localhost sshd[16763]: Failed password for invalid user r.r from 106.13.55.50 port 57864 ssh2
Mar  9 11:52:01 localhost sshd[16763]: Received disconnect from 106.13.55.50 port 57864:11: Bye Bye [preauth]
Mar  9 11:52:01 localhost sshd[16763]: Disconnected from invalid user r.r 106.13.55.50 port 57864 [preauth]
Mar  9 12:16:32 localhost sshd[21274]: Invalid user wangdc from 106.13.55.50 port 58388
Mar  9 12:16:32 localhost sshd[21274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.50 
Mar  9 12:16:34 localhost sshd[21274]: Failed password for invalid user wangdc from 106.13.55.50 port 58388 ssh2
Mar  9........
------------------------------
2020-03-10 03:34:57
106.13.55.24 attackspambots
Feb 20 06:30:04 gw1 sshd[11938]: Failed password for lp from 106.13.55.24 port 41860 ssh2
...
2020-02-20 09:49:08
106.13.55.24 attackbotsspam
Feb 10 15:46:04 MK-Soft-Root2 sshd[23726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.55.24 
Feb 10 15:46:06 MK-Soft-Root2 sshd[23726]: Failed password for invalid user ydr from 106.13.55.24 port 47238 ssh2
...
2020-02-10 23:06:48
106.13.55.24 attack
Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J]
2020-01-22 01:42:52
106.13.55.24 attack
Unauthorized connection attempt detected from IP address 106.13.55.24 to port 2220 [J]
2020-01-20 17:40:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.55.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12605
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.55.5.			IN	A

;; AUTHORITY SECTION:
.			309	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012601 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 08:59:27 CST 2020
;; MSG SIZE  rcvd: 115
HOST信息:
Host 5.55.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 5.55.13.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
114.224.47.0 attackbots
SASL broute force
2019-10-03 05:02:53
85.174.227.52 attackbots
Autoban   85.174.227.52 AUTH/CONNECT
2019-10-03 05:00:18
139.59.41.6 attackspam
Oct  2 14:23:53 OPSO sshd\[27178\]: Invalid user 123123 from 139.59.41.6 port 49498
Oct  2 14:23:53 OPSO sshd\[27178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.6
Oct  2 14:23:55 OPSO sshd\[27178\]: Failed password for invalid user 123123 from 139.59.41.6 port 49498 ssh2
Oct  2 14:28:22 OPSO sshd\[28044\]: Invalid user 1111 from 139.59.41.6 port 32866
Oct  2 14:28:22 OPSO sshd\[28044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.6
2019-10-03 04:43:07
41.208.74.36 attack
REQUESTED PAGE: /xmlrpc.php
2019-10-03 04:46:16
1.54.196.32 attackspambots
SSH Bruteforce attack
2019-10-03 05:20:13
218.92.0.188 attack
" "
2019-10-03 04:50:56
77.247.110.211 attackbotsspam
\[2019-10-02 17:14:45\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-02T17:14:45.921-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048422069068",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.211/55492",ACLName="no_extension_match"
\[2019-10-02 17:14:48\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-02T17:14:48.328-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0048422069071",SessionID="0x7f1e1c2f44f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.211/49346",ACLName="no_extension_match"
\[2019-10-02 17:15:06\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-02T17:15:06.102-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="48422069070",SessionID="0x7f1e1c1e96b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.211/59458",ACLName="no_extensio
2019-10-03 05:17:13
164.132.193.27 attack
Oct  2 22:37:33 SilenceServices sshd[19141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.193.27
Oct  2 22:37:33 SilenceServices sshd[19142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.193.27
Oct  2 22:37:33 SilenceServices sshd[19145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.193.27
2019-10-03 04:45:04
1.179.182.82 attackbotsspam
Oct  2 21:00:30 dedicated sshd[11222]: Invalid user ansible@123 from 1.179.182.82 port 37512
2019-10-03 05:10:48
77.247.110.201 attackspam
\[2019-10-02 13:10:00\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.201:64982' - Wrong password
\[2019-10-02 13:10:00\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-02T13:10:00.594-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="58000036",SessionID="0x7f1e1c10d4f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.201/64982",Challenge="7a999b87",ReceivedChallenge="7a999b87",ReceivedHash="905e9f3323ac6def6796a5ff095a32ea"
\[2019-10-02 13:10:34\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.201:55228' - Wrong password
\[2019-10-02 13:10:34\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-02T13:10:34.365-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="58000039",SessionID="0x7f1e1c10d4f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247
2019-10-03 04:40:08
188.166.226.209 attackbots
SSH Brute-Force reported by Fail2Ban
2019-10-03 04:42:27
123.206.76.184 attackspam
Oct  2 17:27:50 gw1 sshd[18526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.76.184
Oct  2 17:27:53 gw1 sshd[18526]: Failed password for invalid user support from 123.206.76.184 port 32972 ssh2
...
2019-10-03 05:04:43
221.214.236.250 attackbotsspam
Unauthorised access (Oct  2) SRC=221.214.236.250 LEN=40 TTL=49 ID=39639 TCP DPT=8080 WINDOW=6000 SYN 
Unauthorised access (Oct  2) SRC=221.214.236.250 LEN=40 TTL=49 ID=57966 TCP DPT=8080 WINDOW=32343 SYN 
Unauthorised access (Oct  2) SRC=221.214.236.250 LEN=40 TTL=49 ID=49823 TCP DPT=8080 WINDOW=33325 SYN
2019-10-03 04:48:10
185.175.93.105 attack
Port scan: Attack repeated for 24 hours
2019-10-03 04:55:15
222.186.180.223 attackbots
Oct  2 22:40:57 root sshd[18453]: Failed password for root from 222.186.180.223 port 24634 ssh2
Oct  2 22:41:01 root sshd[18453]: Failed password for root from 222.186.180.223 port 24634 ssh2
Oct  2 22:41:06 root sshd[18453]: Failed password for root from 222.186.180.223 port 24634 ssh2
Oct  2 22:41:11 root sshd[18453]: Failed password for root from 222.186.180.223 port 24634 ssh2
...
2019-10-03 04:41:45

最近上报的IP列表

142.44.247.190 217.87.148.109 163.25.177.154 182.4.136.89
103.85.156.130 31.155.234.65 76.241.180.114 171.251.237.80
15.242.170.146 100.13.30.98 91.160.3.96 45.109.7.252
52.114.124.239 159.191.50.191 70.245.113.112 42.22.106.101
155.255.206.206 52.237.8.15 103.102.238.103 90.165.117.74