必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:
类型 评论内容 时间
attackspam
Dec 25 04:50:31 plusreed sshd[24415]: Invalid user yuehwern from 106.13.56.12
...
2019-12-25 22:03:08
attackspambots
Dec 18 17:53:14 ArkNodeAT sshd\[1131\]: Invalid user guest from 106.13.56.12
Dec 18 17:53:14 ArkNodeAT sshd\[1131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
Dec 18 17:53:15 ArkNodeAT sshd\[1131\]: Failed password for invalid user guest from 106.13.56.12 port 56476 ssh2
2019-12-19 05:14:15
attackspam
Dec 15 19:19:52 linuxvps sshd\[47745\]: Invalid user chem from 106.13.56.12
Dec 15 19:19:52 linuxvps sshd\[47745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
Dec 15 19:19:54 linuxvps sshd\[47745\]: Failed password for invalid user chem from 106.13.56.12 port 37632 ssh2
Dec 15 19:27:33 linuxvps sshd\[52818\]: Invalid user yunyu from 106.13.56.12
Dec 15 19:27:33 linuxvps sshd\[52818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
2019-12-16 08:44:03
attack
Dec  7 20:25:00 areeb-Workstation sshd[8699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12 
Dec  7 20:25:02 areeb-Workstation sshd[8699]: Failed password for invalid user fidelity from 106.13.56.12 port 45958 ssh2
...
2019-12-07 23:00:20
attackspambots
Dec  6 11:52:40 lcl-usvr-02 sshd[25739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12  user=root
Dec  6 11:52:42 lcl-usvr-02 sshd[25739]: Failed password for root from 106.13.56.12 port 43368 ssh2
Dec  6 12:00:00 lcl-usvr-02 sshd[27364]: Invalid user attack from 106.13.56.12 port 42972
Dec  6 12:00:00 lcl-usvr-02 sshd[27364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
Dec  6 12:00:00 lcl-usvr-02 sshd[27364]: Invalid user attack from 106.13.56.12 port 42972
Dec  6 12:00:03 lcl-usvr-02 sshd[27364]: Failed password for invalid user attack from 106.13.56.12 port 42972 ssh2
...
2019-12-06 13:04:43
attackbotsspam
Nov 23 17:31:11 SilenceServices sshd[16906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
Nov 23 17:31:13 SilenceServices sshd[16906]: Failed password for invalid user vest from 106.13.56.12 port 48286 ssh2
Nov 23 17:36:18 SilenceServices sshd[18437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
2019-11-24 04:09:18
attack
Nov 20 07:21:14 mockhub sshd[11729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
Nov 20 07:21:16 mockhub sshd[11729]: Failed password for invalid user abbie from 106.13.56.12 port 58406 ssh2
...
2019-11-21 02:59:48
attackbots
Invalid user admin from 106.13.56.12 port 53998
2019-11-13 04:22:37
attackbots
$f2bV_matches
2019-11-12 05:44:03
attackspam
Oct 17 07:49:14 MK-Soft-VM3 sshd[14548]: Failed password for root from 106.13.56.12 port 52668 ssh2
Oct 17 07:54:26 MK-Soft-VM3 sshd[14764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12 
...
2019-10-17 19:41:32
attack
Oct 15 11:05:51 eddieflores sshd\[10867\]: Invalid user QAZ@wsx from 106.13.56.12
Oct 15 11:05:51 eddieflores sshd\[10867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
Oct 15 11:05:53 eddieflores sshd\[10867\]: Failed password for invalid user QAZ@wsx from 106.13.56.12 port 50162 ssh2
Oct 15 11:10:12 eddieflores sshd\[11274\]: Invalid user 123hadoop from 106.13.56.12
Oct 15 11:10:12 eddieflores sshd\[11274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.12
2019-10-16 05:12:38
相同子网IP讨论:
IP 类型 评论内容 时间
106.13.56.204 attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-05 05:33:41
106.13.56.204 attack
" "
2020-10-04 21:28:25
106.13.56.204 attackspambots
24241/tcp 17910/tcp 7001/tcp...
[2020-08-04/10-03]22pkt,22pt.(tcp)
2020-10-04 13:15:53
106.13.56.204 attackspambots
Aug  4 21:06:12 santamaria sshd\[764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204  user=root
Aug  4 21:06:14 santamaria sshd\[764\]: Failed password for root from 106.13.56.204 port 50248 ssh2
Aug  4 21:09:51 santamaria sshd\[853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204  user=root
...
2020-08-05 04:50:57
106.13.56.204 attackspambots
Jul 21 07:39:32 pkdns2 sshd\[36133\]: Invalid user test from 106.13.56.204Jul 21 07:39:34 pkdns2 sshd\[36133\]: Failed password for invalid user test from 106.13.56.204 port 41556 ssh2Jul 21 07:44:17 pkdns2 sshd\[36340\]: Invalid user devuser from 106.13.56.204Jul 21 07:44:19 pkdns2 sshd\[36340\]: Failed password for invalid user devuser from 106.13.56.204 port 44634 ssh2Jul 21 07:48:49 pkdns2 sshd\[36533\]: Invalid user mirna from 106.13.56.204Jul 21 07:48:51 pkdns2 sshd\[36533\]: Failed password for invalid user mirna from 106.13.56.204 port 47720 ssh2
...
2020-07-21 13:07:26
106.13.56.204 attackbots
Jun  8 07:48:16 zimbra sshd[7190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204  user=r.r
Jun  8 07:48:18 zimbra sshd[7190]: Failed password for r.r from 106.13.56.204 port 53976 ssh2
Jun  8 08:03:01 zimbra sshd[19915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204  user=r.r
Jun  8 08:03:02 zimbra sshd[19915]: Failed password for r.r from 106.13.56.204 port 47040 ssh2
Jun  8 08:03:02 zimbra sshd[19915]: Received disconnect from 106.13.56.204 port 47040:11: Bye Bye [preauth]
Jun  8 08:03:02 zimbra sshd[19915]: Disconnected from 106.13.56.204 port 47040 [preauth]
Jun  8 08:07:15 zimbra sshd[23624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204  user=r.r
Jun  8 08:07:18 zimbra sshd[23624]: Failed password for r.r from 106.13.56.204 port 38802 ssh2
Jun  8 08:07:18 zimbra sshd[23624]: Received disconnect from........
-------------------------------
2020-06-08 21:38:32
106.13.56.249 attack
May 31 23:50:28 abendstille sshd\[20201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.249  user=root
May 31 23:50:30 abendstille sshd\[20201\]: Failed password for root from 106.13.56.249 port 58176 ssh2
May 31 23:54:07 abendstille sshd\[24255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.249  user=root
May 31 23:54:09 abendstille sshd\[24255\]: Failed password for root from 106.13.56.249 port 56448 ssh2
May 31 23:57:48 abendstille sshd\[28007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.249  user=root
...
2020-06-01 06:14:08
106.13.56.249 attack
May 27 02:08:58 prox sshd[25720]: Failed password for root from 106.13.56.249 port 44818 ssh2
2020-05-27 17:45:49
106.13.56.204 attackbotsspam
May 23 13:59:30 ws22vmsma01 sshd[220874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204
May 23 13:59:32 ws22vmsma01 sshd[220874]: Failed password for invalid user uwt from 106.13.56.204 port 35952 ssh2
...
2020-05-24 01:58:32
106.13.56.249 attackspam
May 10 14:53:03 server1 sshd\[14116\]: Failed password for invalid user jc2 from 106.13.56.249 port 54906 ssh2
May 10 14:56:41 server1 sshd\[15451\]: Invalid user kd from 106.13.56.249
May 10 14:56:41 server1 sshd\[15451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.249 
May 10 14:56:43 server1 sshd\[15451\]: Failed password for invalid user kd from 106.13.56.249 port 52844 ssh2
May 10 15:00:15 server1 sshd\[16894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.249  user=root
...
2020-05-11 06:58:46
106.13.56.204 attack
2020-05-10T06:31:57.777667v22018076590370373 sshd[26964]: Invalid user atendimento from 106.13.56.204 port 43492
2020-05-10T06:31:57.784828v22018076590370373 sshd[26964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204
2020-05-10T06:31:57.777667v22018076590370373 sshd[26964]: Invalid user atendimento from 106.13.56.204 port 43492
2020-05-10T06:32:00.110976v22018076590370373 sshd[26964]: Failed password for invalid user atendimento from 106.13.56.204 port 43492 ssh2
2020-05-10T06:36:30.897254v22018076590370373 sshd[5215]: Invalid user net from 106.13.56.204 port 40956
...
2020-05-10 18:45:49
106.13.56.204 attack
May  2 05:12:26 cumulus sshd[3894]: Invalid user zym from 106.13.56.204 port 39782
May  2 05:12:26 cumulus sshd[3894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204
May  2 05:12:28 cumulus sshd[3894]: Failed password for invalid user zym from 106.13.56.204 port 39782 ssh2
May  2 05:12:28 cumulus sshd[3894]: Received disconnect from 106.13.56.204 port 39782:11: Bye Bye [preauth]
May  2 05:12:28 cumulus sshd[3894]: Disconnected from 106.13.56.204 port 39782 [preauth]
May  2 05:30:17 cumulus sshd[5008]: Invalid user bcs from 106.13.56.204 port 50808
May  2 05:30:17 cumulus sshd[5008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.204
May  2 05:30:18 cumulus sshd[5008]: Failed password for invalid user bcs from 106.13.56.204 port 50808 ssh2
May  2 05:30:18 cumulus sshd[5008]: Received disconnect from 106.13.56.204 port 50808:11: Bye Bye [preauth]
May  2 05:30:18 cumul........
-------------------------------
2020-05-04 02:46:23
106.13.56.249 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-04-11 19:57:24
106.13.56.249 attack
Apr  7 23:57:23 ns382633 sshd\[22091\]: Invalid user yatri from 106.13.56.249 port 49400
Apr  7 23:57:23 ns382633 sshd\[22091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.249
Apr  7 23:57:24 ns382633 sshd\[22091\]: Failed password for invalid user yatri from 106.13.56.249 port 49400 ssh2
Apr  8 00:17:36 ns382633 sshd\[25902\]: Invalid user ts3bot from 106.13.56.249 port 41418
Apr  8 00:17:36 ns382633 sshd\[25902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.249
2020-04-08 08:10:55
106.13.56.17 attack
Invalid user sysadmin from 106.13.56.17 port 42630
2020-03-29 14:18:15
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.56.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40513
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.56.12.			IN	A

;; AUTHORITY SECTION:
.			401	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101501 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 16 05:12:36 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 12.56.13.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.56.13.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
101.17.16.236 attackbots
Aug 26 04:53:00 shivevps sshd[4567]: Bad protocol version identification '\024' from 101.17.16.236 port 42147
Aug 26 04:53:46 shivevps sshd[6189]: Bad protocol version identification '\024' from 101.17.16.236 port 47581
Aug 26 04:54:47 shivevps sshd[8053]: Bad protocol version identification '\024' from 101.17.16.236 port 55039
...
2020-08-26 12:46:59
193.176.86.166 attackspam
Brute force SMTP login attempted.
...
2020-08-26 12:17:13
45.176.215.246 attackbots
"SMTP brute force auth login attempt."
2020-08-26 12:43:48
106.12.175.86 attackspambots
2020-08-26T04:07:37.670282shield sshd\[25122\]: Invalid user tushar from 106.12.175.86 port 44894
2020-08-26T04:07:37.694046shield sshd\[25122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.175.86
2020-08-26T04:07:39.829787shield sshd\[25122\]: Failed password for invalid user tushar from 106.12.175.86 port 44894 ssh2
2020-08-26T04:10:43.168804shield sshd\[25861\]: Invalid user yasmina from 106.12.175.86 port 35744
2020-08-26T04:10:43.184927shield sshd\[25861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.175.86
2020-08-26 12:22:23
51.79.52.2 attackbots
*Port Scan* detected from 51.79.52.2 (CA/Canada/Quebec/Montreal (Ville-Marie)/vps-0c55fa02.vps.ovh.ca). 4 hits in the last 86 seconds
2020-08-26 12:21:51
27.154.67.94 attackspam
Aug 26 03:48:24 instance-2 sshd[401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.67.94 
Aug 26 03:48:26 instance-2 sshd[401]: Failed password for invalid user jboss from 27.154.67.94 port 50422 ssh2
Aug 26 03:55:18 instance-2 sshd[629]: Failed password for root from 27.154.67.94 port 33408 ssh2
2020-08-26 12:20:37
203.135.57.46 attackspam
Aug 26 04:52:55 shivevps sshd[4123]: Bad protocol version identification '\024' from 203.135.57.46 port 49610
Aug 26 04:53:17 shivevps sshd[5362]: Bad protocol version identification '\024' from 203.135.57.46 port 49756
Aug 26 04:54:46 shivevps sshd[8031]: Bad protocol version identification '\024' from 203.135.57.46 port 50280
...
2020-08-26 12:48:48
180.123.205.165 attackspambots
Aug 26 04:52:58 shivevps sshd[4423]: Bad protocol version identification '\024' from 180.123.205.165 port 13312
Aug 26 04:53:09 shivevps sshd[5010]: Bad protocol version identification '\024' from 180.123.205.165 port 62700
Aug 26 04:54:47 shivevps sshd[8064]: Bad protocol version identification '\024' from 180.123.205.165 port 38775
...
2020-08-26 12:38:58
178.128.210.170 attackbots
Aug 26 04:52:53 shivevps sshd[3893]: Bad protocol version identification '\024' from 178.128.210.170 port 57130
Aug 26 04:54:45 shivevps sshd[7901]: Bad protocol version identification '\024' from 178.128.210.170 port 35038
Aug 26 04:54:51 shivevps sshd[8363]: Bad protocol version identification '\024' from 178.128.210.170 port 38706
...
2020-08-26 12:10:20
114.226.197.139 attack
2020-08-25 22:53:00.087596-0500  localhost sshd[68948]: Failed password for invalid user helpdesk from 114.226.197.139 port 49666 ssh2
2020-08-26 12:41:52
35.198.194.198 attackspam
Aug 26 06:21:02 OPSO sshd\[30570\]: Invalid user jesus from 35.198.194.198 port 36126
Aug 26 06:21:02 OPSO sshd\[30570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.198.194.198
Aug 26 06:21:04 OPSO sshd\[30570\]: Failed password for invalid user jesus from 35.198.194.198 port 36126 ssh2
Aug 26 06:25:25 OPSO sshd\[31308\]: Invalid user lwc from 35.198.194.198 port 44998
Aug 26 06:25:25 OPSO sshd\[31308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.198.194.198
2020-08-26 12:26:01
64.139.79.35 attackspam
Aug 26 04:52:56 shivevps sshd[4221]: Bad protocol version identification '\024' from 64.139.79.35 port 53022
Aug 26 04:53:01 shivevps sshd[4652]: Bad protocol version identification '\024' from 64.139.79.35 port 53142
Aug 26 04:54:47 shivevps sshd[8105]: Bad protocol version identification '\024' from 64.139.79.35 port 55206
...
2020-08-26 12:36:07
222.186.175.212 attack
2020-08-26T07:24:45.770819afi-git.jinr.ru sshd[27700]: Failed password for root from 222.186.175.212 port 18234 ssh2
2020-08-26T07:24:49.582062afi-git.jinr.ru sshd[27700]: Failed password for root from 222.186.175.212 port 18234 ssh2
2020-08-26T07:24:53.460794afi-git.jinr.ru sshd[27700]: Failed password for root from 222.186.175.212 port 18234 ssh2
2020-08-26T07:24:53.460927afi-git.jinr.ru sshd[27700]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 18234 ssh2 [preauth]
2020-08-26T07:24:53.460944afi-git.jinr.ru sshd[27700]: Disconnecting: Too many authentication failures [preauth]
...
2020-08-26 12:27:04
107.161.177.66 attackbots
107.161.177.66 - - [26/Aug/2020:04:55:19 +0100] "POST /wp-login.php HTTP/1.1" 200 2082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
107.161.177.66 - - [26/Aug/2020:04:55:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
107.161.177.66 - - [26/Aug/2020:04:55:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-26 12:07:56
116.12.251.132 attack
*Port Scan* detected from 116.12.251.132 (SG/Singapore/-/Singapore/-). 4 hits in the last 240 seconds
2020-08-26 12:43:34

最近上报的IP列表

251.202.130.8 151.165.168.86 171.116.26.172 181.31.230.12
97.127.79.255 82.137.238.234 54.221.26.203 168.114.18.63
189.226.219.214 74.43.147.83 49.207.181.242 178.21.66.226
178.128.232.77 160.153.147.15 80.98.199.181 1.171.26.146
212.235.203.242 111.172.104.22 106.12.179.35 190.113.89.30