106.52.22.129 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	TCP (SYN) 106.52.22.129:15385 -> port 23, len 44	2020-09-29 04:11:59
attackspam	TCP (SYN) 106.52.22.129:15385 -> port 23, len 44	2020-09-28 20:25:54
attackspam	1601239219 - 09/27/2020 22:40:19 Host: 106.52.22.129/106.52.22.129 Port: 23 TCP Blocked ...	2020-09-28 12:31:35

相同子网IP讨论:

IP	类型	评论内容	时间
106.52.22.64	attackspambots	Aug 22 08:48:29 vps333114 sshd[28709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.64 Aug 22 08:48:31 vps333114 sshd[28709]: Failed password for invalid user olga from 106.52.22.64 port 44548 ssh2 ...	2020-08-22 16:04:37
106.52.22.64	attack	Aug 21 21:39:53 XXX sshd[11792]: Invalid user apache2 from 106.52.22.64 port 39258	2020-08-22 08:18:21
106.52.22.64	attack	Aug 20 08:30:05 pkdns2 sshd\[7513\]: Invalid user operatore from 106.52.22.64Aug 20 08:30:07 pkdns2 sshd\[7513\]: Failed password for invalid user operatore from 106.52.22.64 port 57702 ssh2Aug 20 08:33:55 pkdns2 sshd\[7654\]: Invalid user user2 from 106.52.22.64Aug 20 08:33:57 pkdns2 sshd\[7654\]: Failed password for invalid user user2 from 106.52.22.64 port 41970 ssh2Aug 20 08:37:37 pkdns2 sshd\[7841\]: Invalid user nancy from 106.52.22.64Aug 20 08:37:39 pkdns2 sshd\[7841\]: Failed password for invalid user nancy from 106.52.22.64 port 54468 ssh2 ...	2020-08-20 15:28:05
106.52.22.64	attackspam	Aug 13 05:46:50 cosmoit sshd[24783]: Failed password for root from 106.52.22.64 port 59824 ssh2	2020-08-13 19:41:26
106.52.22.64	attack	Invalid user zywu from 106.52.22.64 port 52218	2020-08-02 18:46:39
106.52.22.64	attack	Unauthorized connection attempt detected from IP address 106.52.22.64 to port 4445	2020-06-11 18:55:46
106.52.221.48	attackbots	1590378948 - 05/25/2020 05:55:48 Host: 106.52.221.48/106.52.221.48 Port: 23 TCP Blocked	2020-05-25 12:31:52
106.52.221.48	attack	" "	2020-05-24 15:02:20
106.52.221.140	attackbots	Invalid user student from 106.52.221.140 port 43286	2020-05-15 01:21:02
106.52.229.254	attackspambots	Apr 19 06:55:40 mailserver sshd\[8052\]: Invalid user admin from 106.52.229.254 ...	2020-04-19 19:12:56
106.52.229.254	attack	Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-04-12 20:34:43
106.52.22.131	attackbots	5x Failed Password	2020-02-13 13:09:25
106.52.222.170	attackspambots	Unauthorized connection attempt detected from IP address 106.52.222.170 to port 2220 [J]	2020-01-31 17:31:42
106.52.22.202	attack	Dec 5 09:36:58 vpn01 sshd[25368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 5 09:37:00 vpn01 sshd[25368]: Failed password for invalid user hyka from 106.52.22.202 port 46022 ssh2 ...	2019-12-05 17:48:59
106.52.22.202	attack	Dec 4 21:10:34 eventyay sshd[28709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 Dec 4 21:10:36 eventyay sshd[28709]: Failed password for invalid user nancyp from 106.52.22.202 port 44848 ssh2 Dec 4 21:16:41 eventyay sshd[29005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.22.202 ...	2019-12-05 04:32:19

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.22.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.22.129.			IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092701 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 12:31:29 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 129.22.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 129.22.52.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
201.140.237.225	attackbotsspam	coe-12 : Block return, carriage return, ... characters=>/component/phocadownload/category/1-modules-joomla?download=54:com-cg-parallax'A=0(')	2020-05-24 16:45:53
172.245.92.117	attackspam	May 24 03:49:02 mail postfix/smtpd[13740]: connect from unknown[172.245.92.117] May 24 03:49:02 mail postfix/smtpd[13740]: NOQUEUE: reject: RCPT from unknown[172.245.92.117]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= May 24 03:49:03 mail postfix/smtpd[13740]: lost connection after RCPT from unknown[172.245.92.117] May 24 03:49:03 mail postfix/smtpd[13740]: disconnect from unknown[172.245.92.117] ehlo=1 mail=1 rcpt=0/1 rset=1 commands=3/4	2020-05-24 16:40:27
104.131.139.147	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-05-24 16:39:26
118.25.47.130	attackbotsspam	Invalid user dlh from 118.25.47.130 port 52448	2020-05-24 16:34:51
50.255.64.233	attackspam	May 24 09:20:54 inter-technics sshd[26292]: Invalid user ts from 50.255.64.233 port 38122 May 24 09:20:54 inter-technics sshd[26292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.255.64.233 May 24 09:20:54 inter-technics sshd[26292]: Invalid user ts from 50.255.64.233 port 38122 May 24 09:20:56 inter-technics sshd[26292]: Failed password for invalid user ts from 50.255.64.233 port 38122 ssh2 May 24 09:22:49 inter-technics sshd[26435]: Invalid user oxr from 50.255.64.233 port 40872 ...	2020-05-24 16:25:11
85.209.0.101	attackbots	Bruteforce detected by fail2ban	2020-05-24 16:35:27
62.210.206.78	attackbotsspam	Invalid user ebw from 62.210.206.78 port 53416	2020-05-24 16:14:06
190.98.228.54	attackspam	Invalid user etr from 190.98.228.54 port 37340	2020-05-24 16:05:47
36.46.142.80	attackbots	$f2bV_matches	2020-05-24 16:37:05
190.119.190.122	attackspambots	(sshd) Failed SSH login from 190.119.190.122 (PE/Peru/-): 5 in the last 3600 secs	2020-05-24 16:11:16
177.1.213.19	attack	web-1 [ssh] SSH Attack	2020-05-24 16:42:06
138.118.102.244	attackbots	scan z	2020-05-24 16:12:23
195.228.32.220	attackspam	Unauthorized connection attempt detected from IP address 195.228.32.220 to port 23	2020-05-24 16:45:11
212.33.81.146	attackspam	3x Failed Password	2020-05-24 16:25:38
184.105.139.67	attackspam	Unauthorized connection attempt detected from IP address 184.105.139.67 to port 873	2020-05-24 16:27:50

最近上报的IP列表

88.241.42.121	249.21.149.43	152.132.23.60	30.251.74.158
38.105.50.242	27.25.126.172	138.68.14.219	103.39.213.170
177.93.122.187	31.10.190.58	124.156.140.217	118.27.35.105
37.211.17.111	195.182.212.29	103.45.183.136	94.208.246.103
49.235.68.183	172.245.64.203	112.85.42.110	62.210.103.204