106.13.70.29 - IPInfo

基本信息:

城市(city): unknown

省份(region): Beijing

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): Beijing Baidu Netcom Science and Technology Co., Ltd.

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Invalid user difeo from 106.13.70.29 port 38390	2020-01-02 14:05:30
attackspambots	Jan 1 05:56:18 raspberrypi sshd\[15427\]: Invalid user interiors from 106.13.70.29Jan 1 05:56:20 raspberrypi sshd\[15427\]: Failed password for invalid user interiors from 106.13.70.29 port 51956 ssh2Jan 1 06:23:01 raspberrypi sshd\[16210\]: Failed password for root from 106.13.70.29 port 38624 ssh2 ...	2020-01-01 18:38:48
attackbots	Dec 24 08:15:30 dev0-dcde-rnet sshd[16577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 Dec 24 08:15:33 dev0-dcde-rnet sshd[16577]: Failed password for invalid user sartirana from 106.13.70.29 port 38340 ssh2 Dec 24 08:19:09 dev0-dcde-rnet sshd[16616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29	2019-12-24 17:01:20
attackspam	Dec 10 19:07:02 web1 sshd\[2891\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 user=daemon Dec 10 19:07:04 web1 sshd\[2891\]: Failed password for daemon from 106.13.70.29 port 59280 ssh2 Dec 10 19:13:55 web1 sshd\[3867\]: Invalid user ajay from 106.13.70.29 Dec 10 19:13:55 web1 sshd\[3867\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 Dec 10 19:13:57 web1 sshd\[3867\]: Failed password for invalid user ajay from 106.13.70.29 port 54722 ssh2	2019-12-11 14:23:53
attackspam	2019-12-06T00:09:02.149876shield sshd\[20188\]: Invalid user frick from 106.13.70.29 port 45656 2019-12-06T00:09:02.154758shield sshd\[20188\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 2019-12-06T00:09:04.277424shield sshd\[20188\]: Failed password for invalid user frick from 106.13.70.29 port 45656 ssh2 2019-12-06T00:15:56.402182shield sshd\[22167\]: Invalid user euaebio from 106.13.70.29 port 46790 2019-12-06T00:15:56.406629shield sshd\[22167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29	2019-12-06 10:09:48
attackbots	Dec 2 11:36:44 OPSO sshd\[19481\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 user=backup Dec 2 11:36:46 OPSO sshd\[19481\]: Failed password for backup from 106.13.70.29 port 53592 ssh2 Dec 2 11:44:10 OPSO sshd\[20762\]: Invalid user smmsp from 106.13.70.29 port 51792 Dec 2 11:44:10 OPSO sshd\[20762\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 Dec 2 11:44:12 OPSO sshd\[20762\]: Failed password for invalid user smmsp from 106.13.70.29 port 51792 ssh2	2019-12-02 19:01:22
attackbots	Nov 10 18:22:45 itv-usvr-02 sshd[20484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 user=root Nov 10 18:22:47 itv-usvr-02 sshd[20484]: Failed password for root from 106.13.70.29 port 58958 ssh2 Nov 10 18:28:01 itv-usvr-02 sshd[20489]: Invalid user gaowen from 106.13.70.29 port 37764 Nov 10 18:28:01 itv-usvr-02 sshd[20489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 Nov 10 18:28:01 itv-usvr-02 sshd[20489]: Invalid user gaowen from 106.13.70.29 port 37764 Nov 10 18:28:03 itv-usvr-02 sshd[20489]: Failed password for invalid user gaowen from 106.13.70.29 port 37764 ssh2	2019-11-10 21:27:22
attackspambots	Jul 27 00:48:01 debian sshd\[20933\]: Invalid user P@ssw0rd5 from 106.13.70.29 port 41400 Jul 27 00:48:01 debian sshd\[20933\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 ...	2019-07-27 09:21:35
attackspam	Jun 23 22:07:13 ncomp sshd[20169]: Invalid user jboss from 106.13.70.29 Jun 23 22:07:13 ncomp sshd[20169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.29 Jun 23 22:07:13 ncomp sshd[20169]: Invalid user jboss from 106.13.70.29 Jun 23 22:07:15 ncomp sshd[20169]: Failed password for invalid user jboss from 106.13.70.29 port 39184 ssh2	2019-06-24 06:18:02

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.70.63	attackspam	Oct 4 23:48:53 pve1 sshd[12571]: Failed password for root from 106.13.70.63 port 50412 ssh2 ...	2020-10-05 06:53:12
106.13.70.63	attack	$f2bV_matches	2020-10-04 22:58:47
106.13.70.63	attackspam	$f2bV_matches	2020-10-04 14:43:51
106.13.70.63	attack	Aug 6 08:56:54 hosting sshd[15615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.63 user=root Aug 6 08:56:56 hosting sshd[15615]: Failed password for root from 106.13.70.63 port 34174 ssh2 ...	2020-08-06 14:52:23
106.13.70.233	attackbots	Aug 3 23:34:37 buvik sshd[9204]: Failed password for root from 106.13.70.233 port 50722 ssh2 Aug 3 23:39:57 buvik sshd[10053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.233 user=root Aug 3 23:39:59 buvik sshd[10053]: Failed password for root from 106.13.70.233 port 58694 ssh2 ...	2020-08-04 05:44:56
106.13.70.63	attackspambots	Jul 25 17:04:29 server1 sshd\[31647\]: Invalid user pawan from 106.13.70.63 Jul 25 17:04:29 server1 sshd\[31647\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.63 Jul 25 17:04:31 server1 sshd\[31647\]: Failed password for invalid user pawan from 106.13.70.63 port 51818 ssh2 Jul 25 17:09:24 server1 sshd\[602\]: Invalid user satou from 106.13.70.63 Jul 25 17:09:24 server1 sshd\[602\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.63 ...	2020-07-26 07:11:11
106.13.70.63	attackbots	Jul 24 13:02:44 server sshd[40460]: Failed password for invalid user dominik from 106.13.70.63 port 48624 ssh2 Jul 24 13:06:29 server sshd[41858]: Failed password for invalid user store from 106.13.70.63 port 60078 ssh2 Jul 24 13:07:55 server sshd[42285]: Failed password for invalid user vnc from 106.13.70.63 port 47172 ssh2	2020-07-24 19:55:11
106.13.70.60	attack	Jul 20 00:56:44 serwer sshd\[5731\]: User ftpuser from 106.13.70.60 not allowed because not listed in AllowUsers Jul 20 00:56:44 serwer sshd\[5731\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.60 user=ftpuser Jul 20 00:56:46 serwer sshd\[5731\]: Failed password for invalid user ftpuser from 106.13.70.60 port 37546 ssh2 ...	2020-07-20 07:25:44
106.13.70.63	attackspambots	2020-07-18T20:44:22.058018mail.csmailer.org sshd[8589]: Invalid user admin from 106.13.70.63 port 57292 2020-07-18T20:44:22.063260mail.csmailer.org sshd[8589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.63 2020-07-18T20:44:22.058018mail.csmailer.org sshd[8589]: Invalid user admin from 106.13.70.63 port 57292 2020-07-18T20:44:23.992175mail.csmailer.org sshd[8589]: Failed password for invalid user admin from 106.13.70.63 port 57292 ssh2 2020-07-18T20:48:21.042820mail.csmailer.org sshd[8911]: Invalid user ansible from 106.13.70.63 port 58268 ...	2020-07-19 05:03:30
106.13.70.233	attack	Invalid user stephane from 106.13.70.233 port 50952	2020-07-18 22:42:36
106.13.70.63	attack	Jul 18 03:54:18 onepixel sshd[3996731]: Invalid user eder from 106.13.70.63 port 40798 Jul 18 03:54:18 onepixel sshd[3996731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.70.63 Jul 18 03:54:18 onepixel sshd[3996731]: Invalid user eder from 106.13.70.63 port 40798 Jul 18 03:54:19 onepixel sshd[3996731]: Failed password for invalid user eder from 106.13.70.63 port 40798 ssh2 Jul 18 03:56:23 onepixel sshd[3997813]: Invalid user lois from 106.13.70.63 port 39898	2020-07-18 12:22:26
106.13.70.233	attack	2020-07-14T14:51:49.933497snf-827550 sshd[1912]: Invalid user avila from 106.13.70.233 port 53388 2020-07-14T14:51:52.089766snf-827550 sshd[1912]: Failed password for invalid user avila from 106.13.70.233 port 53388 ssh2 2020-07-14T14:59:44.447028snf-827550 sshd[2984]: Invalid user vmail from 106.13.70.233 port 44640 ...	2020-07-14 20:26:03
106.13.70.60	attack	TCP (SYN) 106.13.70.60:44556 -> port 3570, len 44	2020-07-12 18:09:37
106.13.70.63	attack	2020-07-11T22:11:19+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	2020-07-12 04:57:17
106.13.70.63	attackspambots	Multiple SSH authentication failures from 106.13.70.63	2020-07-01 14:39:32

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.70.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16343
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.70.29.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040101 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 02 03:25:10 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 29.70.13.106.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 29.70.13.106.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
1.193.57.144	attackspam	firewall-block, port(s): 23/tcp	2019-10-31 17:07:29
178.62.181.74	attackbots	2019-10-31T04:01:40.468325shield sshd\[6813\]: Invalid user ernest from 178.62.181.74 port 38588 2019-10-31T04:01:40.473431shield sshd\[6813\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.181.74 2019-10-31T04:01:42.373279shield sshd\[6813\]: Failed password for invalid user ernest from 178.62.181.74 port 38588 ssh2 2019-10-31T04:05:37.488264shield sshd\[7244\]: Invalid user netscreen from 178.62.181.74 port 57679 2019-10-31T04:05:37.492626shield sshd\[7244\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.181.74	2019-10-31 17:09:08
46.38.144.32	attack	2019-10-31T10:30:22.062411mail01 postfix/smtpd[19032]: warning: unknown[46.38.144.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-31T10:30:29.439014mail01 postfix/smtpd[18961]: warning: unknown[46.38.144.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-31T10:30:42.181694mail01 postfix/smtpd[29571]: warning: unknown[46.38.144.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-10-31 17:34:33
185.248.160.65	attack	www.familiengesundheitszentrum-fulda.de 185.248.160.65 \[31/Oct/2019:04:49:36 +0100\] "POST /xmlrpc.php HTTP/1.0" 301 537 "-" "Mozilla/5.0 $Macintosh\; Intel Mac OS X 10_12_6$ AppleWebKit/605.1.15 $KHTML, like Gecko$ Version/12.0 Safari/605.1.15" familiengesundheitszentrum-fulda.de 185.248.160.65 \[31/Oct/2019:04:49:38 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 $Macintosh\; Intel Mac OS X 10_12_6$ AppleWebKit/605.1.15 $KHTML, like Gecko$ Version/12.0 Safari/605.1.15"	2019-10-31 17:25:21
193.68.64.1	attackspambots	23/tcp [2019-10-31]1pkt	2019-10-31 17:09:24
177.69.237.53	attackspambots	Invalid user gel from 177.69.237.53 port 34228	2019-10-31 17:18:54
106.12.218.159	attack	Invalid user titus from 106.12.218.159 port 50460	2019-10-31 17:02:30
167.71.66.151	attackbots	50100/tcp [2019-10-31]1pkt	2019-10-31 17:26:57
138.68.148.177	attack	SSH invalid-user multiple login try	2019-10-31 17:20:33
43.254.16.242	attackspam	X-DKIM-Failure: bodyhash_mismatch Received: from mg1.eee.tw ([43.254.16.242]) by mx68.antispamcloud.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1iQ11L-0000rl-9S for customerservice@canaan.com.sg; Thu, 31 Oct 2019 04:21:12 +0100 Received: from re34.cx901.com (re34.cx901.com [43.254.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mg1.eee.tw (Postfix) with ESMTPS id 56480E0114D; Thu, 31 Oct 2019 11:20:13 +0800 (CST) DKIM-Filter: OpenDKIM Filter v2.11.0 mg1.eee.tw 56480E0114D DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mg1.eee.tw; s=default; t=1572492013; bh=eQhYLeE/BrOAVpKx7os/7aoVq8sbBvlkAoPjHjl9YKs=; h=Date:From:To:Subject:In-Reply-To:References:From; b=cKBuv9EjYyDuCX2b1Xt/se0QDx9RplRSVESR+/Uv6/Ob/Tw5gdS5BlU/tpUZOEK1s 5QLLKYdPzM9o2iGzTiKfANYxOTCbfV+zpu+3rW1iB1/OA+7Jhy/HMRTxzYctk2Wgfo rYm2lxpuGABTxcOMSdkQHvSL3UQM1ZbxBtXzPfsg=	2019-10-31 17:24:34
51.38.152.200	attackbotsspam	Feb 16 18:30:54 vtv3 sshd\[8388\]: Invalid user wj from 51.38.152.200 port 20885 Feb 16 18:30:54 vtv3 sshd\[8388\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.152.200 Feb 16 18:30:55 vtv3 sshd\[8388\]: Failed password for invalid user wj from 51.38.152.200 port 20885 ssh2 Feb 16 18:35:59 vtv3 sshd\[9786\]: Invalid user monit from 51.38.152.200 port 50159 Feb 16 18:35:59 vtv3 sshd\[9786\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.152.200 Mar 13 02:06:55 vtv3 sshd\[7513\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.152.200 user=root Mar 13 02:06:57 vtv3 sshd\[7513\]: Failed password for root from 51.38.152.200 port 33723 ssh2 Mar 13 02:13:27 vtv3 sshd\[10121\]: Invalid user test from 51.38.152.200 port 39363 Mar 13 02:13:27 vtv3 sshd\[10121\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.152.200 Ma	2019-10-31 17:02:59
94.23.254.24	attackspam	Oct 31 09:06:05 server sshd\[29705\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns341745.ip-94-23-254.eu user=root Oct 31 09:06:07 server sshd\[29705\]: Failed password for root from 94.23.254.24 port 47979 ssh2 Oct 31 09:13:58 server sshd\[31088\]: Invalid user sarah from 94.23.254.24 Oct 31 09:13:58 server sshd\[31088\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns341745.ip-94-23-254.eu Oct 31 09:14:00 server sshd\[31088\]: Failed password for invalid user sarah from 94.23.254.24 port 39015 ssh2 ...	2019-10-31 17:13:32
80.82.64.213	attackbotsspam	ft-1848-fussball.de 80.82.64.213 \[31/Oct/2019:09:13:54 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 666 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/74.0.3729.169 Safari/537.36" ft-1848-fussball.de 80.82.64.213 \[31/Oct/2019:09:13:57 +0100\] "POST /wp-login.php HTTP/1.1" 200 5241 "http://ft-1848-fussball.de/wp-login.php" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/74.0.3729.169 Safari/537.36"	2019-10-31 17:32:53
149.202.206.206	attackspambots	2019-10-31T04:22:19.146787abusebot-8.cloudsearch.cf sshd\[27525\]: Invalid user jcs from 149.202.206.206 port 43624	2019-10-31 17:23:51
72.253.156.40	attackbotsspam	Automatic report - Banned IP Access	2019-10-31 17:33:27

最近上报的IP列表

124.65.176.118	101.111.227.45	46.197.89.133	45.62.231.172
2400:6180:100:d0::7c9:d001	221.215.130.162	216.58.196.132	203.150.196.34
200.104.186.133	196.52.43.125	193.194.89.116	185.207.232.232
180.113.142.103	172.217.25.142	142.93.52.185	111.230.21.80
106.13.52.247	95.57.216.86	94.247.244.210	46.101.77.58