106.13.75.102 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Baidu Netcom Science and Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Search Engine Spider

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-10-12 06:35:29
attack	Oct 11 07:42:34 mail sshd[1119840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.102 Oct 11 07:42:34 mail sshd[1119840]: Invalid user git from 106.13.75.102 port 41402 Oct 11 07:42:36 mail sshd[1119840]: Failed password for invalid user git from 106.13.75.102 port 41402 ssh2 ...	2020-10-11 22:45:37
attack	Oct 11 07:42:34 mail sshd[1119840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.102 Oct 11 07:42:34 mail sshd[1119840]: Invalid user git from 106.13.75.102 port 41402 Oct 11 07:42:36 mail sshd[1119840]: Failed password for invalid user git from 106.13.75.102 port 41402 ssh2 ...	2020-10-11 14:42:02
attackspam	Oct 10 23:49:51 abendstille sshd\[17372\]: Invalid user seb from 106.13.75.102 Oct 10 23:49:51 abendstille sshd\[17372\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.102 Oct 10 23:49:53 abendstille sshd\[17372\]: Failed password for invalid user seb from 106.13.75.102 port 60748 ssh2 Oct 10 23:53:46 abendstille sshd\[21661\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.102 user=root Oct 10 23:53:48 abendstille sshd\[21661\]: Failed password for root from 106.13.75.102 port 59958 ssh2 ...	2020-10-11 08:04:23

相同子网IP讨论:

IP	类型	评论内容	时间
106.13.75.187	attackspam	106.13.75.187 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 10 09:09:49 jbs1 sshd[22002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.187 user=root Oct 10 09:09:51 jbs1 sshd[22002]: Failed password for root from 106.13.75.187 port 36282 ssh2 Oct 10 09:07:56 jbs1 sshd[21525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.6.215 user=root Oct 10 09:07:58 jbs1 sshd[21525]: Failed password for root from 178.62.6.215 port 57196 ssh2 Oct 10 09:13:14 jbs1 sshd[22934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.129.38 user=root Oct 10 09:13:15 jbs1 sshd[22945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.2.215 user=root IP Addresses Blocked:	2020-10-10 23:28:23
106.13.75.187	attackspam	Oct 10 09:03:00 lavrea sshd[268562]: Invalid user tomcat from 106.13.75.187 port 35372 ...	2020-10-10 15:18:10
106.13.75.154	attackspambots	Oct 1 23:41:47 inter-technics sshd[19218]: Invalid user cam from 106.13.75.154 port 58380 Oct 1 23:41:47 inter-technics sshd[19218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.154 Oct 1 23:41:47 inter-technics sshd[19218]: Invalid user cam from 106.13.75.154 port 58380 Oct 1 23:41:50 inter-technics sshd[19218]: Failed password for invalid user cam from 106.13.75.154 port 58380 ssh2 Oct 1 23:43:39 inter-technics sshd[19305]: Invalid user prueba1 from 106.13.75.154 port 57942 ...	2020-10-02 06:10:43
106.13.75.154	attackbots	Invalid user kitbattle from 106.13.75.154 port 58652	2020-10-01 22:33:51
106.13.75.154	attackspambots	Sep 29 00:35:13 dhoomketu sshd[3437277]: Failed password for root from 106.13.75.154 port 58366 ssh2 Sep 29 00:39:25 dhoomketu sshd[3437422]: Invalid user mapr from 106.13.75.154 port 35138 Sep 29 00:39:25 dhoomketu sshd[3437422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.154 Sep 29 00:39:25 dhoomketu sshd[3437422]: Invalid user mapr from 106.13.75.154 port 35138 Sep 29 00:39:27 dhoomketu sshd[3437422]: Failed password for invalid user mapr from 106.13.75.154 port 35138 ssh2 ...	2020-09-29 03:30:09
106.13.75.154	attackbots	Sep 28 07:34:33 Tower sshd[4949]: Connection from 106.13.75.154 port 46886 on 192.168.10.220 port 22 rdomain "" Sep 28 07:34:35 Tower sshd[4949]: Invalid user miguel from 106.13.75.154 port 46886 Sep 28 07:34:35 Tower sshd[4949]: error: Could not get shadow information for NOUSER Sep 28 07:34:35 Tower sshd[4949]: Failed password for invalid user miguel from 106.13.75.154 port 46886 ssh2 Sep 28 07:34:36 Tower sshd[4949]: Received disconnect from 106.13.75.154 port 46886:11: Bye Bye [preauth] Sep 28 07:34:36 Tower sshd[4949]: Disconnected from invalid user miguel 106.13.75.154 port 46886 [preauth]	2020-09-28 19:41:39
106.13.75.187	attack	Sep 27 22:01:03 mavik sshd[16755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.187 user=root Sep 27 22:01:05 mavik sshd[16755]: Failed password for root from 106.13.75.187 port 45890 ssh2 Sep 27 22:05:48 mavik sshd[16962]: Invalid user git from 106.13.75.187 Sep 27 22:05:48 mavik sshd[16962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.187 Sep 27 22:05:50 mavik sshd[16962]: Failed password for invalid user git from 106.13.75.187 port 49660 ssh2 ...	2020-09-28 05:06:00
106.13.75.187	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-27 21:24:11
106.13.75.187	attackbots	2020-09-27T00:34:54.883562ionos.janbro.de sshd[169080]: Failed password for invalid user fernando from 106.13.75.187 port 39812 ssh2 2020-09-27T00:37:20.410746ionos.janbro.de sshd[169103]: Invalid user oracle from 106.13.75.187 port 50386 2020-09-27T00:37:20.452800ionos.janbro.de sshd[169103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.187 2020-09-27T00:37:20.410746ionos.janbro.de sshd[169103]: Invalid user oracle from 106.13.75.187 port 50386 2020-09-27T00:37:22.046499ionos.janbro.de sshd[169103]: Failed password for invalid user oracle from 106.13.75.187 port 50386 ssh2 2020-09-27T00:39:45.902179ionos.janbro.de sshd[169141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.187 user=root 2020-09-27T00:39:48.074728ionos.janbro.de sshd[169141]: Failed password for root from 106.13.75.187 port 60902 ssh2 2020-09-27T00:42:15.501026ionos.janbro.de sshd[169171]: pam_unix(sshd:auth): auth ...	2020-09-27 13:06:51
106.13.75.154	attackbots	Invalid user norman from 106.13.75.154 port 49382	2020-09-27 02:16:31
106.13.75.154	attack	Sep 26 09:28:42 rocket sshd[3901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.75.154 Sep 26 09:28:44 rocket sshd[3901]: Failed password for invalid user werkstatt from 106.13.75.154 port 58238 ssh2 ...	2020-09-26 18:11:28
106.13.75.158	attackbotsspam	firewall-block, port(s): 28033/tcp	2020-09-17 23:09:02
106.13.75.158	attackbots	TCP (SYN) 106.13.75.158:59595 -> port 28033, len 44	2020-09-17 15:15:07
106.13.75.158	attackspam	Fail2Ban Ban Triggered	2020-09-17 06:23:17
106.13.75.187	attackspambots	Brute%20Force%20SSH	2020-09-15 02:24:20

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.13.75.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11084
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.13.75.102.			IN	A

;; AUTHORITY SECTION:
.			276	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101002 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 11 08:04:20 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 102.75.13.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 102.75.13.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
45.55.157.147	attack	$f2bV_matches	2019-08-20 05:55:47
207.46.13.8	attackbots	Automatic report - Banned IP Access	2019-08-20 05:46:32
148.70.210.77	attack	Aug 19 23:35:58 v22019058497090703 sshd[24012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.210.77 Aug 19 23:36:00 v22019058497090703 sshd[24012]: Failed password for invalid user shit from 148.70.210.77 port 51106 ssh2 Aug 19 23:40:45 v22019058497090703 sshd[24494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.210.77 ...	2019-08-20 06:01:53
193.188.22.12	attackspam	Too many connections or unauthorized access detected from Yankee banned ip	2019-08-20 06:11:12
58.248.201.132	attackbotsspam	port scan and connect, tcp 3128 (squid-http)	2019-08-20 06:00:09
49.81.199.130	attackbotsspam	[Mon Aug 19 17:26:23 2019 GMT] "James Gu" [RDNS_NONE], Subject: Re: More professional, more cost-saving	2019-08-20 06:12:20
123.31.47.20	attackspam	Aug 19 11:29:34 hcbb sshd\[8985\]: Invalid user noah from 123.31.47.20 Aug 19 11:29:34 hcbb sshd\[8985\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.47.20 Aug 19 11:29:36 hcbb sshd\[8985\]: Failed password for invalid user noah from 123.31.47.20 port 56416 ssh2 Aug 19 11:36:17 hcbb sshd\[9576\]: Invalid user smbguest from 123.31.47.20 Aug 19 11:36:17 hcbb sshd\[9576\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.47.20	2019-08-20 05:44:20
46.252.250.34	attackbots	Aug 19 11:51:45 web9 sshd\[10444\]: Invalid user sll from 46.252.250.34 Aug 19 11:51:45 web9 sshd\[10444\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.252.250.34 Aug 19 11:51:47 web9 sshd\[10444\]: Failed password for invalid user sll from 46.252.250.34 port 6913 ssh2 Aug 19 11:55:52 web9 sshd\[11379\]: Invalid user helen from 46.252.250.34 Aug 19 11:55:52 web9 sshd\[11379\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.252.250.34	2019-08-20 06:02:39
89.36.222.85	attackspam	Aug 19 23:32:55 vps691689 sshd[3189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.36.222.85 Aug 19 23:32:57 vps691689 sshd[3189]: Failed password for invalid user uploader from 89.36.222.85 port 47736 ssh2 ...	2019-08-20 06:10:17
222.186.42.163	attack	Aug 20 00:09:31 amit sshd\[16532\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.163 user=root Aug 20 00:09:33 amit sshd\[16532\]: Failed password for root from 222.186.42.163 port 31522 ssh2 Aug 20 00:10:13 amit sshd\[16542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.163 user=root ...	2019-08-20 06:10:38
185.47.132.185	attackspam	Autoban 185.47.132.185 AUTH/CONNECT	2019-08-20 05:58:08
115.84.112.98	attack	Aug 19 12:00:48 hcbb sshd\[11978\]: Invalid user oracle from 115.84.112.98 Aug 19 12:00:48 hcbb sshd\[11978\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftth.laotel.com Aug 19 12:00:50 hcbb sshd\[11978\]: Failed password for invalid user oracle from 115.84.112.98 port 57912 ssh2 Aug 19 12:05:38 hcbb sshd\[12403\]: Invalid user photon from 115.84.112.98 Aug 19 12:05:38 hcbb sshd\[12403\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ftth.laotel.com	2019-08-20 06:19:02
80.211.78.252	attackbots	Aug 19 11:54:15 lcdev sshd\[19532\]: Invalid user p4ssw0rd from 80.211.78.252 Aug 19 11:54:15 lcdev sshd\[19532\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.78.252 Aug 19 11:54:16 lcdev sshd\[19532\]: Failed password for invalid user p4ssw0rd from 80.211.78.252 port 39822 ssh2 Aug 19 11:58:32 lcdev sshd\[19897\]: Invalid user falko from 80.211.78.252 Aug 19 11:58:32 lcdev sshd\[19897\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.78.252	2019-08-20 06:08:05
185.164.63.234	attackspambots	Aug 19 11:48:33 friendsofhawaii sshd\[17786\]: Invalid user postgres from 185.164.63.234 Aug 19 11:48:33 friendsofhawaii sshd\[17786\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.164.63.234 Aug 19 11:48:34 friendsofhawaii sshd\[17786\]: Failed password for invalid user postgres from 185.164.63.234 port 35876 ssh2 Aug 19 11:52:41 friendsofhawaii sshd\[18162\]: Invalid user webmaster from 185.164.63.234 Aug 19 11:52:41 friendsofhawaii sshd\[18162\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.164.63.234	2019-08-20 05:57:36
170.81.56.134	attackspam	Aug 19 23:35:07 ubuntu-2gb-nbg1-dc3-1 sshd[25578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.81.56.134 Aug 19 23:35:08 ubuntu-2gb-nbg1-dc3-1 sshd[25578]: Failed password for invalid user jose from 170.81.56.134 port 60859 ssh2 ...	2019-08-20 05:46:05

最近上报的IP列表

37.57.37.213	173.254.225.93	139.59.215.171	192.241.238.54
192.185.2.104	186.242.208.120	73.13.104.201	218.59.47.1
68.183.203.105	12.244.146.242	173.231.59.213	191.101.79.52
125.212.244.109	181.164.41.194	37.59.58.8	101.36.118.86
45.14.224.238	194.190.143.48	177.220.174.2	123.23.183.76