106.52.22.129 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	TCP (SYN) 106.52.22.129:15385 -> port 23, len 44	2020-09-29 04:11:59
attackspam	TCP (SYN) 106.52.22.129:15385 -> port 23, len 44	2020-09-28 20:25:54
attackspam	1601239219 - 09/27/2020 22:40:19 Host: 106.52.22.129/106.52.22.129 Port: 23 TCP Blocked ...	2020-09-28 12:31:35

相同子网IP讨论:

IP	类型	评论内容	时间
106.52.22.64	attackspambots	Aug 22 08:48:29 vps333114 sshd[28709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.64 Aug 22 08:48:31 vps333114 sshd[28709]: Failed password for invalid user olga from 106.52.22.64 port 44548 ssh2 ...	2020-08-22 16:04:37
106.52.22.64	attack	Aug 21 21:39:53 XXX sshd[11792]: Invalid user apache2 from 106.52.22.64 port 39258	2020-08-22 08:18:21
106.52.22.64	attack	Aug 20 08:30:05 pkdns2 sshd\[7513\]: Invalid user operatore from 106.52.22.64Aug 20 08:30:07 pkdns2 sshd\[7513\]: Failed password for invalid user operatore from 106.52.22.64 port 57702 ssh2Aug 20 08:33:55 pkdns2 sshd\[7654\]: Invalid user user2 from 106.52.22.64Aug 20 08:33:57 pkdns2 sshd\[7654\]: Failed password for invalid user user2 from 106.52.22.64 port 41970 ssh2Aug 20 08:37:37 pkdns2 sshd\[7841\]: Invalid user nancy from 106.52.22.64Aug 20 08:37:39 pkdns2 sshd\[7841\]: Failed password for invalid user nancy from 106.52.22.64 port 54468 ssh2 ...	2020-08-20 15:28:05
106.52.22.64	attackspam	Aug 13 05:46:50 cosmoit sshd[24783]: Failed password for root from 106.52.22.64 port 59824 ssh2	2020-08-13 19:41:26
106.52.22.64	attack	Invalid user zywu from 106.52.22.64 port 52218	2020-08-02 18:46:39
106.52.22.64	attack	Unauthorized connection attempt detected from IP address 106.52.22.64 to port 4445	2020-06-11 18:55:46
106.52.221.48	attackbots	1590378948 - 05/25/2020 05:55:48 Host: 106.52.221.48/106.52.221.48 Port: 23 TCP Blocked	2020-05-25 12:31:52
106.52.221.48	attack	" "	2020-05-24 15:02:20
106.52.221.140	attackbots	Invalid user student from 106.52.221.140 port 43286	2020-05-15 01:21:02
106.52.229.254	attackspambots	Apr 19 06:55:40 mailserver sshd\[8052\]: Invalid user admin from 106.52.229.254 ...	2020-04-19 19:12:56
106.52.229.254	attack	Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-04-12 20:34:43
106.52.22.131	attackbots	5x Failed Password	2020-02-13 13:09:25
106.52.222.170	attackspambots	Unauthorized connection attempt detected from IP address 106.52.222.170 to port 2220 [J]	2020-01-31 17:31:42
106.52.22.202	attack	Dec 5 09:36:58 vpn01 sshd[25368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 5 09:37:00 vpn01 sshd[25368]: Failed password for invalid user hyka from 106.52.22.202 port 46022 ssh2 ...	2019-12-05 17:48:59
106.52.22.202	attack	Dec 4 21:10:34 eventyay sshd[28709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 4 21:10:36 eventyay sshd[28709]: Failed password for invalid user nancyp from 106.52.22.202 port 44848 ssh2 Dec 4 21:16:41 eventyay sshd[29005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 ...	2019-12-05 04:32:19

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.22.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.22.129.			IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092701 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 12:31:29 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 129.22.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 129.22.52.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
218.92.0.137	attackspam	Nov 30 07:56:36 legacy sshd[8684]: Failed password for root from 218.92.0.137 port 57725 ssh2 Nov 30 07:56:50 legacy sshd[8684]: error: maximum authentication attempts exceeded for root from 218.92.0.137 port 57725 ssh2 [preauth] Nov 30 07:56:58 legacy sshd[8691]: Failed password for root from 218.92.0.137 port 22799 ssh2 ...	2019-11-30 15:01:07
128.199.95.163	attackspambots	Nov 30 01:00:38 TORMINT sshd\[18294\]: Invalid user isil from 128.199.95.163 Nov 30 01:00:38 TORMINT sshd\[18294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.163 Nov 30 01:00:40 TORMINT sshd\[18294\]: Failed password for invalid user isil from 128.199.95.163 port 56932 ssh2 ...	2019-11-30 14:25:44
121.132.223.200	attackspambots	Fail2Ban - FTP Abuse Attempt	2019-11-30 14:55:30
42.159.122.158	attackspambots	(sshd) Failed SSH login from 42.159.122.158 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 30 03:21:16 cwp sshd[22940]: Invalid user guest from 42.159.122.158 port 54882 Nov 30 03:21:18 cwp sshd[22940]: Failed password for invalid user guest from 42.159.122.158 port 54882 ssh2 Nov 30 03:27:50 cwp sshd[23193]: Invalid user ricar from 42.159.122.158 port 47168 Nov 30 03:27:52 cwp sshd[23193]: Failed password for invalid user ricar from 42.159.122.158 port 47168 ssh2 Nov 30 03:31:17 cwp sshd[23318]: Invalid user testftp6 from 42.159.122.158 port 53208	2019-11-30 14:42:36
182.121.84.173	attack	Telnet Server BruteForce Attack	2019-11-30 14:29:28
14.169.108.109	attackbotsspam	SpamReport	2019-11-30 14:42:58
77.247.109.31	attackspambots	\[2019-11-30 01:09:40\] NOTICE\[2754\] chan_sip.c: Registration from '"1233" \' failed for '77.247.109.31:5100' - Wrong password \[2019-11-30 01:09:40\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-30T01:09:40.186-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1233",SessionID="0x7f26c4838a68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.31/5100",Challenge="0e392d43",ReceivedChallenge="0e392d43",ReceivedHash="94e771f65346783f34bb1ea1c2bcc144" \[2019-11-30 01:14:16\] NOTICE\[2754\] chan_sip.c: Registration from '"699" \' failed for '77.247.109.31:5099' - Wrong password \[2019-11-30 01:14:16\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-30T01:14:16.971-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="699",SessionID="0x7f26c4838a68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/7	2019-11-30 14:28:46
118.192.66.52	attackbotsspam	Nov 30 02:56:47 firewall sshd[2424]: Invalid user \|\|\|\|\|\|\|\|\|\| from 118.192.66.52 Nov 30 02:56:49 firewall sshd[2424]: Failed password for invalid user \|\|\|\|\|\|\|\|\|\| from 118.192.66.52 port 53814 ssh2 Nov 30 03:00:39 firewall sshd[2534]: Invalid user fuwuqiNet from 118.192.66.52 ...	2019-11-30 14:25:14
218.92.0.170	attackbotsspam	2019-11-30T06:21:58.837296hub.schaetter.us sshd\[3310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.170 user=root 2019-11-30T06:22:00.835616hub.schaetter.us sshd\[3310\]: Failed password for root from 218.92.0.170 port 65125 ssh2 2019-11-30T06:22:03.757985hub.schaetter.us sshd\[3310\]: Failed password for root from 218.92.0.170 port 65125 ssh2 2019-11-30T06:22:07.138214hub.schaetter.us sshd\[3310\]: Failed password for root from 218.92.0.170 port 65125 ssh2 2019-11-30T06:22:10.400819hub.schaetter.us sshd\[3310\]: Failed password for root from 218.92.0.170 port 65125 ssh2 ...	2019-11-30 14:22:18
110.174.222.208	attackspam	Netflix account login and detail changes	2019-11-30 14:26:14
168.128.86.35	attackspambots	SSHScan	2019-11-30 15:05:03
195.154.33.66	attack	SSH invalid-user multiple login try	2019-11-30 15:02:40
37.187.195.209	attackspambots	Nov 30 07:30:52 serwer sshd\[19034\]: Invalid user phone from 37.187.195.209 port 46690 Nov 30 07:30:52 serwer sshd\[19034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.195.209 Nov 30 07:30:54 serwer sshd\[19034\]: Failed password for invalid user phone from 37.187.195.209 port 46690 ssh2 ...	2019-11-30 14:49:04
189.170.97.220	attackspambots	11/30/2019-07:30:44.050898 189.170.97.220 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-11-30 14:53:55
218.92.0.160	attackbotsspam	Nov 30 07:32:48 arianus sshd\[17600\]: Unable to negotiate with 218.92.0.160 port 41729: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\] ...	2019-11-30 14:39:33

最近上报的IP列表

88.241.42.121	249.21.149.43	152.132.23.60	30.251.74.158
38.105.50.242	27.25.126.172	138.68.14.219	103.39.213.170
177.93.122.187	31.10.190.58	124.156.140.217	118.27.35.105
37.211.17.111	195.182.212.29	103.45.183.136	94.208.246.103
49.235.68.183	172.245.64.203	112.85.42.110	62.210.103.204