106.13.63.65 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Dec 25 16:39:02 vpn01 sshd[15937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.65 Dec 25 16:39:03 vpn01 sshd[15937]: Failed password for invalid user howes from 106.13.63.65 port 33828 ssh2 ...	2019-12-26 01:23:15
attackspambots	Invalid user guzman from 106.13.63.65 port 39404	2019-12-21 22:36:18

类型

评论内容

时间

attackbotsspam

Dec 25 16:39:02 vpn01 sshd[15937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.65
Dec 25 16:39:03 vpn01 sshd[15937]: Failed password for invalid user howes from 106.13.63.65 port 33828 ssh2
...

2019-12-26 01:23:15

attackspambots

Invalid user guzman from 106.13.63.65 port 39404

2019-12-21 22:36:18

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.63.120	attack	Sep 21 23:20:49 ip-172-31-16-56 sshd\[16633\]: Invalid user test from 106.13.63.120\ Sep 21 23:20:51 ip-172-31-16-56 sshd\[16633\]: Failed password for invalid user test from 106.13.63.120 port 50312 ssh2\ Sep 21 23:25:04 ip-172-31-16-56 sshd\[16724\]: Invalid user stunnel from 106.13.63.120\ Sep 21 23:25:06 ip-172-31-16-56 sshd\[16724\]: Failed password for invalid user stunnel from 106.13.63.120 port 59322 ssh2\ Sep 21 23:29:23 ip-172-31-16-56 sshd\[16784\]: Failed password for root from 106.13.63.120 port 40066 ssh2\	2020-09-23 03:23:16
106.13.63.120	attackspam	Sep 21 23:20:49 ip-172-31-16-56 sshd\[16633\]: Invalid user test from 106.13.63.120\ Sep 21 23:20:51 ip-172-31-16-56 sshd\[16633\]: Failed password for invalid user test from 106.13.63.120 port 50312 ssh2\ Sep 21 23:25:04 ip-172-31-16-56 sshd\[16724\]: Invalid user stunnel from 106.13.63.120\ Sep 21 23:25:06 ip-172-31-16-56 sshd\[16724\]: Failed password for invalid user stunnel from 106.13.63.120 port 59322 ssh2\ Sep 21 23:29:23 ip-172-31-16-56 sshd\[16784\]: Failed password for root from 106.13.63.120 port 40066 ssh2\	2020-09-22 19:34:59
106.13.63.120	attackspam	2020-08-31T12:10:47.833033ks3355764 sshd[5037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.120 user=root 2020-08-31T12:10:50.430462ks3355764 sshd[5037]: Failed password for root from 106.13.63.120 port 45882 ssh2 ...	2020-08-31 19:57:10
106.13.63.215	attackspam	Aug 25 16:40:58 server sshd[16803]: Failed password for invalid user squid from 106.13.63.215 port 40316 ssh2 Aug 25 16:45:53 server sshd[23184]: Failed password for invalid user pck from 106.13.63.215 port 35504 ssh2 Aug 25 16:50:58 server sshd[29875]: Failed password for invalid user sanjay from 106.13.63.215 port 58926 ssh2	2020-08-26 02:17:34
106.13.63.120	attack	Aug 19 03:56:35 *** sshd[2067]: User root from 106.13.63.120 not allowed because not listed in AllowUsers	2020-08-19 12:08:00
106.13.63.215	attackbots	Invalid user ams from 106.13.63.215 port 49464	2020-08-18 18:57:18
106.13.63.215	attackspambots	Aug 17 23:08:54 fhem-rasp sshd[18846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.215 Aug 17 23:08:56 fhem-rasp sshd[18846]: Failed password for invalid user ctc from 106.13.63.215 port 40154 ssh2 ...	2020-08-18 08:25:30
106.13.63.215	attackspam	$f2bV_matches	2020-08-15 08:39:44
106.13.63.215	attackbots	2020-08-14T07:26:12.707564linuxbox-skyline sshd[107600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.215 user=root 2020-08-14T07:26:14.951994linuxbox-skyline sshd[107600]: Failed password for root from 106.13.63.215 port 36030 ssh2 ...	2020-08-14 23:05:27
106.13.63.215	attackspambots	Failed password for root from 106.13.63.215 port 56772 ssh2	2020-08-06 12:30:23
106.13.63.215	attackbots	"Unauthorized connection attempt on SSHD detected"	2020-08-01 17:43:20
106.13.63.215	attackbotsspam	Jul 31 19:15:04 marvibiene sshd[29816]: Failed password for root from 106.13.63.215 port 57934 ssh2 Jul 31 19:19:18 marvibiene sshd[30331]: Failed password for root from 106.13.63.215 port 49522 ssh2	2020-08-01 01:42:27
106.13.63.215	attackbots	Jul 30 17:12:17 ns382633 sshd\[10783\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.215 user=root Jul 30 17:12:19 ns382633 sshd\[10783\]: Failed password for root from 106.13.63.215 port 33352 ssh2 Jul 30 17:41:56 ns382633 sshd\[15527\]: Invalid user sonarqube from 106.13.63.215 port 43832 Jul 30 17:41:56 ns382633 sshd\[15527\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.215 Jul 30 17:41:59 ns382633 sshd\[15527\]: Failed password for invalid user sonarqube from 106.13.63.215 port 43832 ssh2	2020-07-31 00:23:41
106.13.63.215	attackspambots	2020-07-23T22:15:02.001726lavrinenko.info sshd[27995]: Invalid user ftpusr from 106.13.63.215 port 40704 2020-07-23T22:15:02.008919lavrinenko.info sshd[27995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.63.215 2020-07-23T22:15:02.001726lavrinenko.info sshd[27995]: Invalid user ftpusr from 106.13.63.215 port 40704 2020-07-23T22:15:03.509566lavrinenko.info sshd[27995]: Failed password for invalid user ftpusr from 106.13.63.215 port 40704 ssh2 2020-07-23T22:19:58.370716lavrinenko.info sshd[28144]: Invalid user gmodserver2 from 106.13.63.215 port 51430 ...	2020-07-24 03:34:14
106.13.63.215	attackspambots	Invalid user dai from 106.13.63.215 port 44412	2020-07-23 13:07:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.63.65
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48117
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.63.65.			IN	A

;; AUTHORITY SECTION:
.			459	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122100 1800 900 604800 86400

;; Query time: 204 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 21 22:36:11 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 65.63.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 65.63.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
190.104.149.194	attack	Jan 22 13:25:41 josie sshd[3752]: Invalid user admin from 190.104.149.194 Jan 22 13:25:41 josie sshd[3752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194 Jan 22 13:25:43 josie sshd[3752]: Failed password for invalid user admin from 190.104.149.194 port 57056 ssh2 Jan 22 13:25:43 josie sshd[3757]: Received disconnect from 190.104.149.194: 11: Bye Bye Jan 22 13:39:26 josie sshd[11131]: Invalid user postgres from 190.104.149.194 Jan 22 13:39:26 josie sshd[11131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194 Jan 22 13:39:28 josie sshd[11131]: Failed password for invalid user postgres from 190.104.149.194 port 44770 ssh2 Jan 22 13:39:28 josie sshd[11133]: Received disconnect from 190.104.149.194: 11: Bye Bye Jan 22 13:43:17 josie sshd[13256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194 user=r.r Jan........ -------------------------------	2020-01-24 03:14:02
104.236.78.228	attackspam	Jan 23 19:24:05 tuxlinux sshd[26033]: Invalid user dis from 104.236.78.228 port 56897 Jan 23 19:24:05 tuxlinux sshd[26033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.78.228 Jan 23 19:24:05 tuxlinux sshd[26033]: Invalid user dis from 104.236.78.228 port 56897 Jan 23 19:24:05 tuxlinux sshd[26033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.78.228 Jan 23 19:24:05 tuxlinux sshd[26033]: Invalid user dis from 104.236.78.228 port 56897 Jan 23 19:24:05 tuxlinux sshd[26033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.78.228 Jan 23 19:24:08 tuxlinux sshd[26033]: Failed password for invalid user dis from 104.236.78.228 port 56897 ssh2 ...	2020-01-24 02:35:51
212.159.44.179	attackbots	Lines containing failures of 212.159.44.179 (max 1000) Jan 22 16:52:10 mm sshd[2919]: pam_unix(sshd:auth): authentication fail= ure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D212.159.44.= 179 user=3Dr.r Jan 22 16:52:12 mm sshd[2919]: Failed password for r.r from 212.159.44= .179 port 38383 ssh2 Jan 22 16:52:12 mm sshd[2919]: Received disconnect from 212.159.44.179 = port 38383:11: Bye Bye [preauth] Jan 22 16:52:12 mm sshd[2919]: Disconnected from authenticating user ro= ot 212.159.44.179 port 38383 [preauth] Jan 22 17:02:04 mm sshd[2963]: Invalid user monique from 212.159.44.179= port 59343 Jan 22 17:02:04 mm sshd[2963]: pam_unix(sshd:auth): authentication fail= ure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D212.159.44.= 179 Jan 22 17:02:06 mm sshd[2963]: Failed password for invalid user monique= from 212.159.44.179 port 59343 ssh2 Jan 22 17:02:06 mm sshd[2963]: Received disconnect from 212.159.44.179 = port 59343:11: Bye Bye [preauth] Jan 22........ ------------------------------	2020-01-24 03:00:29
138.197.213.233	attack	Jan 23 18:21:20 lnxmail61 sshd[25166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.213.233	2020-01-24 02:39:29
160.176.205.55	attackbots	Jan 22 17:03:47 hochezhostnamejf sshd[7118]: Invalid user guest from 160.176.205.55 Jan 22 17:03:47 hochezhostnamejf sshd[7118]: Failed password for invalid user guest from 160.176.205.55 port 63281 ssh2 Jan 22 17:04:00 hochezhostnamejf sshd[7120]: Invalid user guest from 160.176.205.55 Jan 22 17:04:00 hochezhostnamejf sshd[7120]: Failed password for invalid user guest from 160.176.205.55 port 49225 ssh2 Jan 22 17:04:06 hochezhostnamejf sshd[7129]: Invalid user guest from 160.176.205.55 Jan 22 17:04:06 hochezhostnamejf sshd[7129]: Failed password for invalid user guest from 160.176.205.55 port 50529 ssh2 Jan 22 17:04:20 hochezhostnamejf sshd[7136]: Invalid user guest from 160.176.205.55 Jan 22 17:04:20 hochezhostnamejf sshd[7136]: Failed password for invalid user guest from 160.176.205.55 port 53153 ssh2 Jan 22 17:04:29 hochezhostnamejf sshd[7138]: Invalid user guest from 160.176.205.55 Jan 22 17:04:30 hochezhostnamejf sshd[7138]: Failed password for invalid user guest f........ ------------------------------	2020-01-24 02:58:33
104.206.128.74	attackbots	Unauthorized connection attempt detected from IP address 104.206.128.74 to port 5900 [J]	2020-01-24 03:12:32
219.94.83.241	attackbotsspam	2020-01-23T15:59:27.672432abusebot-3.cloudsearch.cf sshd[23403]: Invalid user peer from 219.94.83.241 port 54120 2020-01-23T15:59:27.683339abusebot-3.cloudsearch.cf sshd[23403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.94.83.241 2020-01-23T15:59:27.672432abusebot-3.cloudsearch.cf sshd[23403]: Invalid user peer from 219.94.83.241 port 54120 2020-01-23T15:59:29.341101abusebot-3.cloudsearch.cf sshd[23403]: Failed password for invalid user peer from 219.94.83.241 port 54120 ssh2 2020-01-23T16:07:05.668264abusebot-3.cloudsearch.cf sshd[23846]: Invalid user jspark from 219.94.83.241 port 39591 2020-01-23T16:07:05.675412abusebot-3.cloudsearch.cf sshd[23846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.94.83.241 2020-01-23T16:07:05.668264abusebot-3.cloudsearch.cf sshd[23846]: Invalid user jspark from 219.94.83.241 port 39591 2020-01-23T16:07:07.539166abusebot-3.cloudsearch.cf sshd[23846]: Failed ...	2020-01-24 02:58:16
178.128.209.122	attackbots	Jan 23 20:01:01 pkdns2 sshd\[47790\]: Invalid user tmuser from 178.128.209.122Jan 23 20:01:04 pkdns2 sshd\[47790\]: Failed password for invalid user tmuser from 178.128.209.122 port 45922 ssh2Jan 23 20:03:58 pkdns2 sshd\[47956\]: Failed password for root from 178.128.209.122 port 53922 ssh2Jan 23 20:07:06 pkdns2 sshd\[48164\]: Invalid user user from 178.128.209.122Jan 23 20:07:08 pkdns2 sshd\[48164\]: Failed password for invalid user user from 178.128.209.122 port 35830 ssh2Jan 23 20:10:03 pkdns2 sshd\[48325\]: Invalid user ftpuser from 178.128.209.122 ...	2020-01-24 02:36:38
49.233.165.151	attackspam	Jan 23 18:35:05 hcbbdb sshd\[19623\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.165.151 user=root Jan 23 18:35:07 hcbbdb sshd\[19623\]: Failed password for root from 49.233.165.151 port 37710 ssh2 Jan 23 18:37:51 hcbbdb sshd\[20035\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.165.151 user=root Jan 23 18:37:53 hcbbdb sshd\[20035\]: Failed password for root from 49.233.165.151 port 59132 ssh2 Jan 23 18:40:36 hcbbdb sshd\[20426\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.165.151 user=root	2020-01-24 03:00:14
159.65.133.81	attack	Unauthorized connection attempt detected from IP address 159.65.133.81 to port 2220 [J]	2020-01-24 02:57:49
69.94.158.96	attack	Jan 23 17:07:11 grey postfix/smtpd\[7666\]: NOQUEUE: reject: RCPT from frog.swingthelamp.com\[69.94.158.96\]: 554 5.7.1 Service unavailable\; Client host \[69.94.158.96\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.158.96\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-24 02:55:19
89.163.209.26	attackspambots	Unauthorized connection attempt detected from IP address 89.163.209.26 to port 2220 [J]	2020-01-24 02:54:42
103.192.76.156	attackbots	(imapd) Failed IMAP login from 103.192.76.156 (NP/Nepal/-): 1 in the last 3600 secs	2020-01-24 03:10:27
218.92.0.158	attackspam	2020-01-23T18:35:25.017965abusebot-7.cloudsearch.cf sshd[18782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.158 user=root 2020-01-23T18:35:26.895233abusebot-7.cloudsearch.cf sshd[18782]: Failed password for root from 218.92.0.158 port 31096 ssh2 2020-01-23T18:35:30.223403abusebot-7.cloudsearch.cf sshd[18782]: Failed password for root from 218.92.0.158 port 31096 ssh2 2020-01-23T18:35:25.017965abusebot-7.cloudsearch.cf sshd[18782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.158 user=root 2020-01-23T18:35:26.895233abusebot-7.cloudsearch.cf sshd[18782]: Failed password for root from 218.92.0.158 port 31096 ssh2 2020-01-23T18:35:30.223403abusebot-7.cloudsearch.cf sshd[18782]: Failed password for root from 218.92.0.158 port 31096 ssh2 2020-01-23T18:35:25.017965abusebot-7.cloudsearch.cf sshd[18782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho ...	2020-01-24 02:40:03
139.196.6.190	attackspambots	Portscan or hack attempt detected by psad/fwsnort	2020-01-24 02:44:12

最近上报的IP列表

138.250.9.32	128.72.59.94	17.190.5.148	87.246.197.203
186.193.63.142	59.23.218.250	89.224.94.71	249.173.113.207
196.94.49.175	214.159.86.165	136.145.78.253	42.252.144.111
145.39.116.194	240.24.25.199	26.154.137.157	2.234.41.88
156.246.76.161	45.125.222.82	1.58.113.147	103.52.16.98