必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
SSH brute-force attempt
2020-08-23 16:03:26
attackspam
Aug 17 23:32:12 vps647732 sshd[8119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.92
Aug 17 23:32:14 vps647732 sshd[8119]: Failed password for invalid user oracle from 106.52.6.92 port 55144 ssh2
...
2020-08-18 05:37:00
attack
Failed password for root from 106.52.6.92 port 60462 ssh2
2020-08-06 19:00:47
attackbotsspam
Aug  5 21:11:36 mockhub sshd[847]: Failed password for root from 106.52.6.92 port 43152 ssh2
...
2020-08-06 12:26:55
attackbotsspam
Aug  3 14:25:52 webhost01 sshd[11099]: Failed password for root from 106.52.6.92 port 57070 ssh2
...
2020-08-03 16:02:21
attackspambots
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-07-28 17:38:46
attackspambots
07/16/2020-07:54:08.630038 106.52.6.92 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-16 21:00:46
attackbots
Fail2Ban Ban Triggered
2020-07-14 22:04:38
attack
Lines containing failures of 106.52.6.92 (max 1000)
Jul  6 13:30:28 localhost sshd[5885]: Invalid user ricardo from 106.52.6.92 port 60994
Jul  6 13:30:28 localhost sshd[5885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.92 
Jul  6 13:30:31 localhost sshd[5885]: Failed password for invalid user ricardo from 106.52.6.92 port 60994 ssh2
Jul  6 13:30:34 localhost sshd[5885]: Received disconnect from 106.52.6.92 port 60994:11: Bye Bye [preauth]
Jul  6 13:30:34 localhost sshd[5885]: Disconnected from invalid user ricardo 106.52.6.92 port 60994 [preauth]
Jul  6 13:52:08 localhost sshd[11013]: Invalid user nagios from 106.52.6.92 port 36948
Jul  6 13:52:08 localhost sshd[11013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.92 
Jul  6 13:52:10 localhost sshd[11013]: Failed password for invalid user nagios from 106.52.6.92 port 36948 ssh2
Jul  6 13:52:12 localhost sshd[11013]:........
------------------------------
2020-07-07 00:12:35
attackspam
 TCP (SYN) 106.52.6.92:45817 -> port 30218, len 44
2020-07-05 16:59:59
attack
firewall-block, port(s): 30519/tcp
2020-06-29 00:50:06
attackbotsspam
May 31 07:43:08 vps687878 sshd\[27218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.92  user=root
May 31 07:43:10 vps687878 sshd\[27218\]: Failed password for root from 106.52.6.92 port 33328 ssh2
May 31 07:45:50 vps687878 sshd\[27562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.92  user=root
May 31 07:45:52 vps687878 sshd\[27562\]: Failed password for root from 106.52.6.92 port 37314 ssh2
May 31 07:48:31 vps687878 sshd\[27753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.92  user=root
...
2020-05-31 15:09:21
attack
Invalid user ovg from 106.52.6.92 port 47684
2020-05-23 07:27:11
attack
May  5 11:12:34 hell sshd[5662]: Failed password for root from 106.52.6.92 port 56804 ssh2
...
2020-05-05 20:28:44
相同子网IP讨论:
IP 类型 评论内容 时间
106.52.64.125 attack
Sep 27 17:41:37 sso sshd[31742]: Failed password for root from 106.52.64.125 port 53308 ssh2
...
2020-09-28 03:57:04
106.52.64.125 attack
Failed password for invalid user prueba from 106.52.64.125 port 40346 ssh2
2020-09-27 20:13:00
106.52.64.125 attackbots
Sep 14 17:54:35 124388 sshd[18583]: Failed password for root from 106.52.64.125 port 38718 ssh2
Sep 14 17:57:34 124388 sshd[18691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
Sep 14 17:57:36 124388 sshd[18691]: Failed password for root from 106.52.64.125 port 45812 ssh2
Sep 14 18:00:09 124388 sshd[18932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
Sep 14 18:00:11 124388 sshd[18932]: Failed password for root from 106.52.64.125 port 52904 ssh2
2020-09-15 02:11:12
106.52.64.125 attack
5x Failed Password
2020-09-14 17:57:53
106.52.66.49 attackspam
Invalid user ki from 106.52.66.49 port 51356
2020-08-22 01:03:58
106.52.66.49 attack
Aug 19 23:43:28 OPSO sshd\[13799\]: Invalid user ct from 106.52.66.49 port 44176
Aug 19 23:43:28 OPSO sshd\[13799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49
Aug 19 23:43:29 OPSO sshd\[13799\]: Failed password for invalid user ct from 106.52.66.49 port 44176 ssh2
Aug 19 23:46:57 OPSO sshd\[14605\]: Invalid user test from 106.52.66.49 port 56632
Aug 19 23:46:57 OPSO sshd\[14605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49
2020-08-20 06:07:36
106.52.64.125 attackspam
Invalid user hduser from 106.52.64.125 port 58854
2020-08-18 16:34:38
106.52.64.125 attack
Aug 17 10:33:49 h2427292 sshd\[13617\]: Invalid user dani from 106.52.64.125
Aug 17 10:33:49 h2427292 sshd\[13617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125 
Aug 17 10:33:51 h2427292 sshd\[13617\]: Failed password for invalid user dani from 106.52.64.125 port 52778 ssh2
...
2020-08-17 18:06:28
106.52.64.125 attackbotsspam
Aug 11 20:46:01 wbs sshd\[31270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
Aug 11 20:46:03 wbs sshd\[31270\]: Failed password for root from 106.52.64.125 port 46014 ssh2
Aug 11 20:52:00 wbs sshd\[31674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
Aug 11 20:52:01 wbs sshd\[31674\]: Failed password for root from 106.52.64.125 port 59712 ssh2
Aug 11 20:56:00 wbs sshd\[31959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
2020-08-12 15:10:17
106.52.64.125 attackspambots
Aug 11 15:43:59 abendstille sshd\[9929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
Aug 11 15:44:01 abendstille sshd\[9929\]: Failed password for root from 106.52.64.125 port 43898 ssh2
Aug 11 15:48:43 abendstille sshd\[14526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
Aug 11 15:48:45 abendstille sshd\[14526\]: Failed password for root from 106.52.64.125 port 58048 ssh2
Aug 11 15:53:25 abendstille sshd\[18591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125  user=root
...
2020-08-11 23:35:05
106.52.64.125 attackbotsspam
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-07-23 07:44:55
106.52.6.77 attackbots
Jul  8 14:36:25 [Censored Hostname] sshd[10273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.77 
Jul  8 14:36:27 [Censored Hostname] sshd[10273]: Failed password for invalid user nakagome from 106.52.6.77 port 40784 ssh2
Jul  8 14:40:09 [Censored Hostname] sshd[2170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.77 [...]
2020-07-08 20:47:24
106.52.64.125 attackspambots
Jul  4 00:14:10 gestao sshd[14927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125 
Jul  4 00:14:11 gestao sshd[14927]: Failed password for invalid user wanghe from 106.52.64.125 port 33304 ssh2
Jul  4 00:16:51 gestao sshd[14999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.64.125 
...
2020-07-04 08:50:37
106.52.6.77 attack
Jun 30 07:02:31 piServer sshd[2749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.77 
Jun 30 07:02:33 piServer sshd[2749]: Failed password for invalid user git from 106.52.6.77 port 43862 ssh2
Jun 30 07:11:00 piServer sshd[3446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.77 
...
2020-06-30 13:22:13
106.52.6.77 attackspambots
Jun 16 05:49:16 sticky sshd\[4513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.77  user=root
Jun 16 05:49:18 sticky sshd\[4513\]: Failed password for root from 106.52.6.77 port 40442 ssh2
Jun 16 05:53:17 sticky sshd\[4669\]: Invalid user user1 from 106.52.6.77 port 57658
Jun 16 05:53:17 sticky sshd\[4669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.6.77
Jun 16 05:53:19 sticky sshd\[4669\]: Failed password for invalid user user1 from 106.52.6.77 port 57658 ssh2
2020-06-16 13:46:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.6.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1040
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.6.92.			IN	A

;; AUTHORITY SECTION:
.			505	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050500 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 05 20:28:39 CST 2020
;; MSG SIZE  rcvd: 115
HOST信息:
Host 92.6.52.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 92.6.52.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
148.102.16.206 attack
Oct  1 20:22:10 mxgate1 postfix/postscreen[18533]: CONNECT from [148.102.16.206]:34625 to [176.31.12.44]:25
Oct  1 20:22:10 mxgate1 postfix/dnsblog[18538]: addr 148.102.16.206 listed by domain zen.spamhaus.org as 127.0.0.4
Oct  1 20:22:10 mxgate1 postfix/dnsblog[18535]: addr 148.102.16.206 listed by domain cbl.abuseat.org as 127.0.0.2
Oct  1 20:22:10 mxgate1 postfix/dnsblog[18536]: addr 148.102.16.206 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Oct  1 20:22:11 mxgate1 postfix/dnsblog[18537]: addr 148.102.16.206 listed by domain b.barracudacentral.org as 127.0.0.2
Oct  1 20:22:16 mxgate1 postfix/postscreen[18533]: DNSBL rank 5 for [148.102.16.206]:34625
Oct x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=148.102.16.206
2019-10-04 17:20:41
5.63.187.116 attackbots
Sep 30 07:56:38 our-server-hostname postfix/smtpd[28215]: connect from unknown[5.63.187.116]
Sep x@x
Sep x@x
Sep x@x
Sep 30 07:56:42 our-server-hostname postfix/smtpd[28215]: lost connection after RCPT from unknown[5.63.187.116]
Sep 30 07:56:42 our-server-hostname postfix/smtpd[28215]: disconnect from unknown[5.63.187.116]
Sep 30 13:57:18 our-server-hostname postfix/smtpd[5205]: connect from unknown[5.63.187.116]
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=5.63.187.116
2019-10-04 17:03:10
198.108.67.42 attackbotsspam
" "
2019-10-04 16:46:19
123.207.7.130 attackspam
Oct  4 10:42:44 OPSO sshd\[5612\]: Invalid user 123qwertyuiop from 123.207.7.130 port 52476
Oct  4 10:42:44 OPSO sshd\[5612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.7.130
Oct  4 10:42:46 OPSO sshd\[5612\]: Failed password for invalid user 123qwertyuiop from 123.207.7.130 port 52476 ssh2
Oct  4 10:47:38 OPSO sshd\[6399\]: Invalid user CENTOS@1234 from 123.207.7.130 port 33050
Oct  4 10:47:38 OPSO sshd\[6399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.7.130
2019-10-04 16:54:13
51.38.231.249 attack
Oct  4 05:48:22 MK-Soft-VM7 sshd[19793]: Failed password for root from 51.38.231.249 port 32982 ssh2
...
2019-10-04 17:24:31
176.115.100.201 attackspambots
Oct  4 10:55:08 dedicated sshd[15110]: Invalid user Qaz@2018 from 176.115.100.201 port 50068
2019-10-04 17:17:15
211.157.2.92 attackbots
Oct  4 06:47:56 www2 sshd\[34414\]: Invalid user Contrasena@12345 from 211.157.2.92Oct  4 06:47:58 www2 sshd\[34414\]: Failed password for invalid user Contrasena@12345 from 211.157.2.92 port 63167 ssh2Oct  4 06:52:44 www2 sshd\[34995\]: Invalid user P@r0la_1@3 from 211.157.2.92
...
2019-10-04 17:11:34
207.154.234.102 attackbotsspam
Oct  3 18:20:35 tdfoods sshd\[8133\]: Invalid user Exotic@2017 from 207.154.234.102
Oct  3 18:20:35 tdfoods sshd\[8133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.234.102
Oct  3 18:20:37 tdfoods sshd\[8133\]: Failed password for invalid user Exotic@2017 from 207.154.234.102 port 57350 ssh2
Oct  3 18:24:36 tdfoods sshd\[8475\]: Invalid user Caramel123 from 207.154.234.102
Oct  3 18:24:36 tdfoods sshd\[8475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.234.102
2019-10-04 16:50:26
168.194.248.156 attack
Oct  2 00:40:53 lvps5-35-247-183 postfix/smtpd[19246]: connect from 168-194-248-156.unikanet.net.br[168.194.248.156]
Oct x@x
Oct x@x
Oct x@x
Oct  2 00:41:00 lvps5-35-247-183 postfix/smtpd[19246]: lost connection after RCPT from 168-194-248-156.unikanet.net.br[168.194.248.156]
Oct  2 00:41:00 lvps5-35-247-183 postfix/smtpd[19246]: disconnect from 168-194-248-156.unikanet.net.br[168.194.248.156]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=168.194.248.156
2019-10-04 17:23:18
195.9.192.50 attackspam
Sep 30 14:29:58 our-server-hostname postfix/smtpd[6587]: connect from unknown[195.9.192.50]
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=195.9.192.50
2019-10-04 16:59:48
182.74.24.58 attackbotsspam
Oct  2 16:47:44 our-server-hostname postfix/smtpd[18494]: connect from unknown[182.74.24.58]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=182.74.24.58
2019-10-04 16:44:32
49.88.112.68 attackbots
Oct  4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68  user=root
Oct  4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2
Oct  4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2
Oct  4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68  user=root
Oct  4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2
Oct  4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2
Oct  4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68  user=root
Oct  4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2
Oct  4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 
...
2019-10-04 16:37:48
80.11.200.161 attackspambots
Sep 30 10:28:24 our-server-hostname postfix/smtpd[10063]: connect from unknown[80.11.200.161]
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep x@x
Sep 30 10:28:41 our-server-hostname postfix/smtpd[10063]: lost connection after RCPT from unknown[80.11.200.161]
Sep 30 10:28:41 our-server-hostname postfix/smtpd[10063]: disconnect from unknown[80.11.200.161]
Sep 30 10:28:55 our-server-hostname postfix/smtpd[20850]: connect from unknown[80.11.200.161]
Sep x@x
Sep x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=80.11.200.161
2019-10-04 16:53:17
185.36.81.16 attackbotsspam
Rude login attack (7 tries in 1d)
2019-10-04 16:52:51
49.88.112.78 attackbots
Oct  4 11:28:26 vpn01 sshd[31053]: Failed password for root from 49.88.112.78 port 20539 ssh2
Oct  4 11:28:29 vpn01 sshd[31053]: Failed password for root from 49.88.112.78 port 20539 ssh2
...
2019-10-04 17:31:19

最近上报的IP列表

8.110.131.50 197.111.186.215 199.189.201.128 160.124.157.76
159.239.29.35 79.111.135.123 27.78.237.77 59.32.47.14
43.17.107.39 129.28.160.25 45.125.65.46 62.234.132.72
1.188.65.240 187.140.51.117 180.211.135.42 128.199.250.87
104.40.17.254 198.50.143.157 193.253.209.7 89.22.105.165