106.13.62.64 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	TCP (SYN) 106.13.62.64:48261 -> port 3813, len 44	2020-07-01 13:41:06

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.62.26	attackbotsspam	Jun 1 14:03:32 MainVPS sshd[28672]: Invalid user w00kie\r from 106.13.62.26 port 36136 Jun 1 14:03:32 MainVPS sshd[28672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26 Jun 1 14:03:32 MainVPS sshd[28672]: Invalid user w00kie\r from 106.13.62.26 port 36136 Jun 1 14:03:35 MainVPS sshd[28672]: Failed password for invalid user w00kie\r from 106.13.62.26 port 36136 ssh2 Jun 1 14:06:40 MainVPS sshd[31478]: Invalid user saaaaaaaa\r from 106.13.62.26 port 55392 ...	2020-06-01 23:47:49
106.13.62.26	attack	May 4 21:10:19 mail sshd\[2363\]: Invalid user jingxin from 106.13.62.26 May 4 21:10:19 mail sshd\[2363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26 ...	2020-05-05 11:48:29
106.13.62.26	attackspambots	Apr 7 02:57:02 vps647732 sshd[20725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26 Apr 7 02:57:05 vps647732 sshd[20725]: Failed password for invalid user sinus from 106.13.62.26 port 48358 ssh2 ...	2020-04-07 09:00:08
106.13.62.184	attackspam	Mar 5 05:46:34 grey postfix/smtpd\[2402\]: NOQUEUE: reject: RCPT from unknown\[106.13.62.184\]: 554 5.7.1 Service unavailable\; Client host \[106.13.62.184\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[106.13.62.184\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-05 20:02:42
106.13.62.26	attackspam	Feb 21 05:11:10 web1 sshd\[15191\]: Invalid user superman from 106.13.62.26 Feb 21 05:11:10 web1 sshd\[15191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26 Feb 21 05:11:13 web1 sshd\[15191\]: Failed password for invalid user superman from 106.13.62.26 port 47302 ssh2 Feb 21 05:15:52 web1 sshd\[15643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26 user=root Feb 21 05:15:54 web1 sshd\[15643\]: Failed password for root from 106.13.62.26 port 43672 ssh2	2020-02-21 23:51:47
106.13.62.247	attackbots	Feb 9 07:00:22 MK-Soft-Root2 sshd[3730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.247 Feb 9 07:00:24 MK-Soft-Root2 sshd[3730]: Failed password for invalid user whi from 106.13.62.247 port 57226 ssh2 ...	2020-02-09 14:36:27
106.13.62.247	attackspambots	Feb 2 sshd[2677]: Invalid user web from 106.13.62.247 port 59592	2020-02-02 17:50:56
106.13.62.26	attackbotsspam	Dec 5 08:12:18 lnxded64 sshd[26981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26	2019-12-05 15:24:19
106.13.62.26	attack	Dec 1 22:52:29 Ubuntu-1404-trusty-64-minimal sshd\[28131\]: Invalid user howlet from 106.13.62.26 Dec 1 22:52:29 Ubuntu-1404-trusty-64-minimal sshd\[28131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26 Dec 1 22:52:31 Ubuntu-1404-trusty-64-minimal sshd\[28131\]: Failed password for invalid user howlet from 106.13.62.26 port 48830 ssh2 Dec 1 23:06:37 Ubuntu-1404-trusty-64-minimal sshd\[7911\]: Invalid user chijoke from 106.13.62.26 Dec 1 23:06:37 Ubuntu-1404-trusty-64-minimal sshd\[7911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.26	2019-12-02 06:22:45
106.13.62.194	attackbotsspam	SSH brute-force: detected 18 distinct usernames within a 24-hour window.	2019-11-26 21:36:39
106.13.62.194	attackspambots	Nov 14 07:58:35 [host] sshd[15057]: Invalid user tytiyana from 106.13.62.194 Nov 14 07:58:35 [host] sshd[15057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.194 Nov 14 07:58:37 [host] sshd[15057]: Failed password for invalid user tytiyana from 106.13.62.194 port 53996 ssh2	2019-11-14 17:58:00
106.13.62.194	attackspam	Nov 12 00:43:04 ns37 sshd[2128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.194	2019-11-12 08:25:54
106.13.62.194	attackbots	Nov 5 07:43:33 eddieflores sshd\[20955\]: Invalid user Redistoor from 106.13.62.194 Nov 5 07:43:33 eddieflores sshd\[20955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.194 Nov 5 07:43:34 eddieflores sshd\[20955\]: Failed password for invalid user Redistoor from 106.13.62.194 port 53834 ssh2 Nov 5 07:47:54 eddieflores sshd\[21307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.62.194 user=root Nov 5 07:47:56 eddieflores sshd\[21307\]: Failed password for root from 106.13.62.194 port 60270 ssh2	2019-11-06 02:06:31
106.13.62.194	attackspam	Invalid user luke from 106.13.62.194 port 33452	2019-10-29 07:14:58
106.13.62.194	attackspambots	F2B jail: sshd. Time: 2019-10-17 08:59:15, Reported by: VKReport	2019-10-17 15:17:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.62.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50360
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.62.64.			IN	A

;; AUTHORITY SECTION:
.			531	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070101 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 01 13:41:00 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 64.62.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.62.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
92.118.38.35	attack	Aug 26 19:54:46 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:55:26 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:56:06 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:56:45 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 19:57:26 webserver postfix/smtpd\[22969\]: warning: unknown\[92.118.38.35\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-08-27 02:12:09
113.108.177.194	attackbotsspam	Unauthorized connection attempt from IP address 113.108.177.194 on Port 445(SMB)	2019-08-27 02:05:43
109.88.44.32	attackspambots	SSH-bruteforce attempts	2019-08-27 02:02:32
165.227.140.123	attack	SSHD brute force attack detected by fail2ban	2019-08-27 02:44:10
51.15.84.255	attackbots	Aug 26 03:47:20 php2 sshd\[27770\]: Invalid user ts3server from 51.15.84.255 Aug 26 03:47:20 php2 sshd\[27770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.84.255 Aug 26 03:47:23 php2 sshd\[27770\]: Failed password for invalid user ts3server from 51.15.84.255 port 33046 ssh2 Aug 26 03:51:28 php2 sshd\[28171\]: Invalid user sistemas from 51.15.84.255 Aug 26 03:51:28 php2 sshd\[28171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.84.255	2019-08-27 01:56:18
51.81.18.73	attackbots	Aug 26 04:05:37 web1 sshd\[18329\]: Invalid user test2 from 51.81.18.73 Aug 26 04:05:37 web1 sshd\[18329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.81.18.73 Aug 26 04:05:38 web1 sshd\[18329\]: Failed password for invalid user test2 from 51.81.18.73 port 47684 ssh2 Aug 26 04:09:56 web1 sshd\[18800\]: Invalid user ts3 from 51.81.18.73 Aug 26 04:09:56 web1 sshd\[18800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.81.18.73	2019-08-27 02:45:09
84.120.41.118	attackspambots	Invalid user profe from 84.120.41.118 port 57571 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.120.41.118 Failed password for invalid user profe from 84.120.41.118 port 57571 ssh2 Invalid user stagiaire from 84.120.41.118 port 51922 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.120.41.118	2019-08-27 02:15:44
185.100.85.190	attackbots	"Fail2Ban detected SSH brute force attempt"	2019-08-27 02:27:38
49.156.53.19	attackspambots	Aug 26 18:12:09 debian sshd\[9645\]: Invalid user telnetd from 49.156.53.19 port 58534 Aug 26 18:12:09 debian sshd\[9645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.156.53.19 ...	2019-08-27 02:16:07
106.38.39.66	attackbotsspam	Aug 26 17:10:08 OPSO sshd\[32708\]: Invalid user anamaria from 106.38.39.66 port 58011 Aug 26 17:10:08 OPSO sshd\[32708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.39.66 Aug 26 17:10:10 OPSO sshd\[32708\]: Failed password for invalid user anamaria from 106.38.39.66 port 58011 ssh2 Aug 26 17:16:32 OPSO sshd\[1059\]: Invalid user outeiro from 106.38.39.66 port 64235 Aug 26 17:16:32 OPSO sshd\[1059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.39.66	2019-08-27 02:23:45
180.247.27.72	attack	Unauthorized connection attempt from IP address 180.247.27.72 on Port 445(SMB)	2019-08-27 02:42:34
220.248.226.138	attackspam	Aug 26 20:18:59 SilenceServices sshd[20666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.248.226.138 Aug 26 20:19:01 SilenceServices sshd[20666]: Failed password for invalid user kube from 220.248.226.138 port 52792 ssh2 Aug 26 20:22:05 SilenceServices sshd[21803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.248.226.138	2019-08-27 02:44:51
191.55.183.73	attack	Unauthorized connection attempt from IP address 191.55.183.73 on Port 445(SMB)	2019-08-27 02:32:26
51.77.193.218	attack	[Aegis] @ 2019-08-26 18:54:30 0100 -> Maximum authentication attempts exceeded.	2019-08-27 01:58:35
218.92.0.157	attackspam	Aug 26 09:34:51 ny01 sshd[10346]: Failed password for root from 218.92.0.157 port 37510 ssh2 Aug 26 09:34:51 ny01 sshd[10348]: Failed password for root from 218.92.0.157 port 9081 ssh2 Aug 26 09:34:54 ny01 sshd[10346]: Failed password for root from 218.92.0.157 port 37510 ssh2	2019-08-27 02:25:45

最近上报的IP列表

210.228.238.13	180.220.28.20	14.185.143.169	38.181.54.157
200.155.175.197	189.213.139.221	105.244.3.141	203.228.234.242
213.249.163.4	166.183.213.7	53.235.91.212	160.239.65.116
117.84.154.25	128.77.215.201	220.114.192.124	150.88.13.127
214.3.171.80	130.144.196.93	189.177.188.104	124.13.39.82