106.52.148.199

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	20 attempts against mh-ssh on flame	2020-07-05 17:13:00

相同子网IP讨论:

IP	类型	评论内容	时间
106.52.148.196	attack	Wordpress malicious attack:[sshd]	2020-06-13 18:26:20
106.52.148.196	attackbotsspam	Jun 12 00:11:58 Host-KLAX-C sshd[12002]: User root from 106.52.148.196 not allowed because not listed in AllowUsers ...	2020-06-12 14:54:39

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.148.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58614
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.148.199.			IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070500 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 05 17:12:55 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 199.148.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 199.148.52.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.164.14.103	attack	SSH login attempts.	2020-07-10 03:59:10
51.75.28.134	attackspambots	2020-07-09T19:31:26.579930abusebot-5.cloudsearch.cf sshd[25914]: Invalid user oracle from 51.75.28.134 port 55078 2020-07-09T19:31:26.584794abusebot-5.cloudsearch.cf sshd[25914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.ip-51-75-28.eu 2020-07-09T19:31:26.579930abusebot-5.cloudsearch.cf sshd[25914]: Invalid user oracle from 51.75.28.134 port 55078 2020-07-09T19:31:28.496345abusebot-5.cloudsearch.cf sshd[25914]: Failed password for invalid user oracle from 51.75.28.134 port 55078 ssh2 2020-07-09T19:34:39.649190abusebot-5.cloudsearch.cf sshd[25965]: Invalid user zzs from 51.75.28.134 port 51962 2020-07-09T19:34:39.655132abusebot-5.cloudsearch.cf sshd[25965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.ip-51-75-28.eu 2020-07-09T19:34:39.649190abusebot-5.cloudsearch.cf sshd[25965]: Invalid user zzs from 51.75.28.134 port 51962 2020-07-09T19:34:41.727308abusebot-5.cloudsearch.cf sshd[25965]: Fa ...	2020-07-10 03:40:40
128.199.219.43	attackbotsspam	Jul 9 08:02:58 logopedia-1vcpu-1gb-nyc1-01 sshd[87408]: Invalid user john from 128.199.219.43 port 60232 ...	2020-07-10 04:13:29
141.98.9.160	attackbotsspam	2020-07-09T19:41:01.011778abusebot-3.cloudsearch.cf sshd[8998]: Invalid user user from 141.98.9.160 port 36031 2020-07-09T19:41:01.018342abusebot-3.cloudsearch.cf sshd[8998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160 2020-07-09T19:41:01.011778abusebot-3.cloudsearch.cf sshd[8998]: Invalid user user from 141.98.9.160 port 36031 2020-07-09T19:41:03.198703abusebot-3.cloudsearch.cf sshd[8998]: Failed password for invalid user user from 141.98.9.160 port 36031 ssh2 2020-07-09T19:41:36.374162abusebot-3.cloudsearch.cf sshd[9056]: Invalid user guest from 141.98.9.160 port 40281 2020-07-09T19:41:36.380512abusebot-3.cloudsearch.cf sshd[9056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160 2020-07-09T19:41:36.374162abusebot-3.cloudsearch.cf sshd[9056]: Invalid user guest from 141.98.9.160 port 40281 2020-07-09T19:41:38.365113abusebot-3.cloudsearch.cf sshd[9056]: Failed password for inva ...	2020-07-10 04:10:04
5.249.145.245	attackbotsspam	Jul 9 20:27:25 ns392434 sshd[25015]: Invalid user oracle from 5.249.145.245 port 35912 Jul 9 20:27:25 ns392434 sshd[25015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.145.245 Jul 9 20:27:25 ns392434 sshd[25015]: Invalid user oracle from 5.249.145.245 port 35912 Jul 9 20:27:27 ns392434 sshd[25015]: Failed password for invalid user oracle from 5.249.145.245 port 35912 ssh2 Jul 9 21:01:28 ns392434 sshd[25954]: Invalid user wayne from 5.249.145.245 port 53534 Jul 9 21:01:28 ns392434 sshd[25954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.249.145.245 Jul 9 21:01:28 ns392434 sshd[25954]: Invalid user wayne from 5.249.145.245 port 53534 Jul 9 21:01:31 ns392434 sshd[25954]: Failed password for invalid user wayne from 5.249.145.245 port 53534 ssh2 Jul 9 21:05:30 ns392434 sshd[26137]: Invalid user freeswitch from 5.249.145.245 port 51882	2020-07-10 04:00:44
69.59.194.81	attackspambots	SSH login attempts.	2020-07-10 04:11:23
106.13.63.215	attackspambots	2020-07-09T07:03:18.594537morrigan.ad5gb.com sshd[1365398]: Invalid user admin from 106.13.63.215 port 38386 2020-07-09T07:03:20.728494morrigan.ad5gb.com sshd[1365398]: Failed password for invalid user admin from 106.13.63.215 port 38386 ssh2	2020-07-10 03:40:08
51.79.86.177	attack	srv02 SSH BruteForce Attacks 22 ..	2020-07-10 04:01:56
171.225.208.72	attackspam	2020-07-09 06:54:59.638216-0500 localhost smtpd[8692]: NOQUEUE: reject: RCPT from unknown[171.225.208.72]: 554 5.7.1 Service unavailable; Client host [171.225.208.72] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/171.225.208.72; from= to= proto=ESMTP helo=<[171.225.208.72]>	2020-07-10 03:56:34
208.91.198.24	attack	SSH login attempts.	2020-07-10 04:05:10
80.82.68.202	attack	WordPress Arbitrary File Download and Directory Traversal Vulnerabilities , PTR: PTR record not found	2020-07-10 03:43:51
205.139.110.221	attackbots	SSH login attempts.	2020-07-10 03:41:03
170.130.48.37	attack	2020-07-09 06:38:44.794260-0500 localhost smtpd[7768]: NOQUEUE: reject: RCPT from unknown[170.130.48.37]: 450 4.7.25 Client host rejected: cannot find your hostname, [170.130.48.37]; from= to= proto=ESMTP helo=<00ea89c0.sonusheal.xyz>	2020-07-10 04:00:13
171.37.29.233	attackbotsspam	Automatic report - Port Scan Attack	2020-07-10 04:06:30
192.241.202.169	attackspambots	SSH Bruteforce attack	2020-07-10 04:04:04

最近上报的IP列表

18.142.50.47	121.123.148.220	181.101.136.168	175.22.45.197
37.170.232.20	191.70.185.146	192.215.224.23	246.45.33.232
239.106.74.89	69.189.120.240	223.249.41.77	218.246.9.94
231.142.38.133	219.66.141.173	80.21.251.124	125.19.149.221
254.58.193.17	49.25.134.137	101.97.219.72	151.224.85.188