106.52.194.40 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Invalid user libuuid from 106.52.194.40 port 46392	2019-10-01 05:42:38
attackbots	$f2bV_matches	2019-09-29 20:15:51

相同子网IP讨论:

IP	类型	评论内容	时间
106.52.194.72	attackspam	2019-11-17T19:00:07.042720abusebot.cloudsearch.cf sshd\[22340\]: Invalid user serum from 106.52.194.72 port 40392	2019-11-18 06:12:15
106.52.194.72	attack	Nov 16 16:08:19 eventyay sshd[4959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.194.72 Nov 16 16:08:21 eventyay sshd[4959]: Failed password for invalid user serenity from 106.52.194.72 port 42292 ssh2 Nov 16 16:13:22 eventyay sshd[5046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.194.72 ...	2019-11-16 23:38:57
106.52.194.72	attackspam	Brute force SMTP login attempted. ...	2019-11-12 03:30:50
106.52.194.72	attackspambots	2019-11-10T09:08:30.702460abusebot.cloudsearch.cf sshd\[28694\]: Invalid user vat from 106.52.194.72 port 47020	2019-11-10 20:58:29

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.194.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44215
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.194.40.			IN	A

;; AUTHORITY SECTION:
.			492	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092900 1800 900 604800 86400

;; Query time: 389 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 29 20:15:47 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 40.194.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 40.194.52.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
104.248.164.123	attackspam	(sshd) Failed SSH login from 104.248.164.123 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 26 05:46:47 elude sshd[24937]: Invalid user wlw from 104.248.164.123 port 59250 Apr 26 05:46:48 elude sshd[24937]: Failed password for invalid user wlw from 104.248.164.123 port 59250 ssh2 Apr 26 05:54:01 elude sshd[25963]: Invalid user kay from 104.248.164.123 port 51138 Apr 26 05:54:03 elude sshd[25963]: Failed password for invalid user kay from 104.248.164.123 port 51138 ssh2 Apr 26 05:56:10 elude sshd[26305]: Invalid user shen from 104.248.164.123 port 33518	2020-04-26 12:51:47
84.92.92.196	attackspam	Invalid user hakim from 84.92.92.196 port 48554	2020-04-26 13:00:24
167.99.194.54	attackbots	Apr 26 06:27:35 ns381471 sshd[15986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.194.54 Apr 26 06:27:37 ns381471 sshd[15986]: Failed password for invalid user duc from 167.99.194.54 port 50468 ssh2	2020-04-26 12:46:35
203.147.72.32	attack	(imapd) Failed IMAP login from 203.147.72.32 (NC/New Caledonia/host-203-147-72-32.h25.canl.nc): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 26 08:26:00 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 21 secs): user=, method=PLAIN, rip=203.147.72.32, lip=5.63.12.44, TLS, session=	2020-04-26 12:53:04
197.149.66.166	attackspam	Unauthorized connection attempt detected from IP address 197.149.66.166 to port 80	2020-04-26 13:10:36
222.186.173.226	attackspambots	Apr 26 07:10:44 santamaria sshd\[25381\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root Apr 26 07:10:47 santamaria sshd\[25381\]: Failed password for root from 222.186.173.226 port 49471 ssh2 Apr 26 07:11:15 santamaria sshd\[25383\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root ...	2020-04-26 13:22:07
186.10.125.209	attackbotsspam	Invalid user tester1 from 186.10.125.209 port 14987	2020-04-26 12:43:56
203.147.74.216	attack	Unauthorized connection attempt from IP address 203.147.74.216 on port 993	2020-04-26 12:49:06
113.190.253.45	attackbots	(imapd) Failed IMAP login from 113.190.253.45 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 26 08:26:09 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=113.190.253.45, lip=5.63.12.44, session=	2020-04-26 12:51:03
88.157.229.58	attackbotsspam	Failed password for invalid user root from 88.157.229.58 port 51882 ssh2	2020-04-26 13:10:59
178.128.248.121	attackspam	Fail2Ban Ban Triggered	2020-04-26 12:53:24
182.151.15.175	attackbotsspam	Apr 26 05:58:49 ns392434 sshd[28798]: Invalid user adonix from 182.151.15.175 port 43782 Apr 26 05:58:49 ns392434 sshd[28798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.15.175 Apr 26 05:58:49 ns392434 sshd[28798]: Invalid user adonix from 182.151.15.175 port 43782 Apr 26 05:58:51 ns392434 sshd[28798]: Failed password for invalid user adonix from 182.151.15.175 port 43782 ssh2 Apr 26 06:03:45 ns392434 sshd[29001]: Invalid user ftpuser from 182.151.15.175 port 60100 Apr 26 06:03:45 ns392434 sshd[29001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.15.175 Apr 26 06:03:45 ns392434 sshd[29001]: Invalid user ftpuser from 182.151.15.175 port 60100 Apr 26 06:03:47 ns392434 sshd[29001]: Failed password for invalid user ftpuser from 182.151.15.175 port 60100 ssh2 Apr 26 06:08:52 ns392434 sshd[29229]: Invalid user ghost from 182.151.15.175 port 33008	2020-04-26 12:48:47
151.80.61.142	attackbots	fail2ban	2020-04-26 13:02:31
185.217.117.220	attackspambots	SQL injection attack	2020-04-26 13:11:32
46.101.158.75	attackbots	" "	2020-04-26 12:59:49

最近上报的IP列表

213.246.56.4	235.3.191.153	196.202.95.249	117.34.187.187
82.81.12.247	219.76.165.55	95.181.205.40	187.119.227.175
119.126.150.247	189.175.239.100	131.160.135.161	183.203.96.105
241.249.244.61	35.158.125.97	191.96.191.133	45.40.122.186
38.145.89.93	181.215.205.232	159.203.201.222	105.96.110.37