106.52.66.116 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
106.52.66.49	attackspam	Invalid user ki from 106.52.66.49 port 51356	2020-08-22 01:03:58
106.52.66.49	attack	Aug 19 23:43:28 OPSO sshd\[13799\]: Invalid user ct from 106.52.66.49 port 44176 Aug 19 23:43:28 OPSO sshd\[13799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49 Aug 19 23:43:29 OPSO sshd\[13799\]: Failed password for invalid user ct from 106.52.66.49 port 44176 ssh2 Aug 19 23:46:57 OPSO sshd\[14605\]: Invalid user test from 106.52.66.49 port 56632 Aug 19 23:46:57 OPSO sshd\[14605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49	2020-08-20 06:07:36

类型

评论内容

时间

106.52.66.49

attackspam

Invalid user ki from 106.52.66.49 port 51356

2020-08-22 01:03:58

106.52.66.49

attack

Aug 19 23:43:28 OPSO sshd\[13799\]: Invalid user ct from 106.52.66.49 port 44176
Aug 19 23:43:28 OPSO sshd\[13799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49
Aug 19 23:43:29 OPSO sshd\[13799\]: Failed password for invalid user ct from 106.52.66.49 port 44176 ssh2
Aug 19 23:46:57 OPSO sshd\[14605\]: Invalid user test from 106.52.66.49 port 56632
Aug 19 23:46:57 OPSO sshd\[14605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49

2020-08-20 06:07:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.66.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40243
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.52.66.116.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031501 1800 900 604800 86400

;; Query time: 170 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 16 02:17:03 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 116.66.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 116.66.52.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
13.127.29.179	attackspambots	13.127.29.179 - - [03/Jul/2020:19:31:36 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 13.127.29.179 - - [03/Jul/2020:19:31:38 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 13.127.29.179 - - [03/Jul/2020:19:31:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-04 02:56:12
185.143.73.93	attack	Jul 3 20:32:09 srv01 postfix/smtpd\[10886\]: warning: unknown\[185.143.73.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 20:32:49 srv01 postfix/smtpd\[3752\]: warning: unknown\[185.143.73.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 20:33:34 srv01 postfix/smtpd\[10499\]: warning: unknown\[185.143.73.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 20:34:22 srv01 postfix/smtpd\[10885\]: warning: unknown\[185.143.73.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 3 20:35:06 srv01 postfix/smtpd\[10499\]: warning: unknown\[185.143.73.93\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-04 02:43:21
190.102.143.82	attack	Unauthorized connection attempt from IP address 190.102.143.82 on Port 445(SMB)	2020-07-04 02:39:59
151.80.173.36	attack	Jul 3 15:41:25 ws19vmsma01 sshd[92303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.173.36 Jul 3 15:41:27 ws19vmsma01 sshd[92303]: Failed password for invalid user wjh from 151.80.173.36 port 40822 ssh2 ...	2020-07-04 02:46:00
192.241.216.31	attack	Port scan: Attack repeated for 24 hours	2020-07-04 03:05:32
122.163.28.248	attack	Unauthorized connection attempt from IP address 122.163.28.248 on Port 445(SMB)	2020-07-04 03:09:54
91.121.211.34	attackbotsspam	Jul 3 18:29:07 plex-server sshd[699584]: Invalid user liu from 91.121.211.34 port 60170 Jul 3 18:29:07 plex-server sshd[699584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.34 Jul 3 18:29:07 plex-server sshd[699584]: Invalid user liu from 91.121.211.34 port 60170 Jul 3 18:29:09 plex-server sshd[699584]: Failed password for invalid user liu from 91.121.211.34 port 60170 ssh2 Jul 3 18:31:54 plex-server sshd[699800]: Invalid user elev from 91.121.211.34 port 56924 ...	2020-07-04 02:32:47
103.131.71.171	attackbotsspam	(mod_security) mod_security (id:210730) triggered by 103.131.71.171 (VN/Vietnam/bot-103-131-71-171.coccoc.com): 5 in the last 3600 secs	2020-07-04 03:07:41
120.70.102.239	attackspambots	Jul 3 20:24:51 server sshd[54084]: Failed password for invalid user gfs from 120.70.102.239 port 45465 ssh2 Jul 3 20:28:22 server sshd[56826]: Failed password for invalid user git from 120.70.102.239 port 39474 ssh2 Jul 3 20:31:51 server sshd[59528]: Failed password for invalid user hxy from 120.70.102.239 port 33273 ssh2	2020-07-04 02:36:27
138.197.89.212	attackbots	Jul 3 20:28:39 abendstille sshd\[11969\]: Invalid user zlj from 138.197.89.212 Jul 3 20:28:39 abendstille sshd\[11969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 Jul 3 20:28:41 abendstille sshd\[11969\]: Failed password for invalid user zlj from 138.197.89.212 port 53972 ssh2 Jul 3 20:31:47 abendstille sshd\[14953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.89.212 user=root Jul 3 20:31:49 abendstille sshd\[14953\]: Failed password for root from 138.197.89.212 port 52764 ssh2 ...	2020-07-04 02:38:33
138.68.236.156	attackbotsspam	138.68.236.156 - - [03/Jul/2020:20:48:42 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.236.156 - - [03/Jul/2020:20:48:49 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.236.156 - - [03/Jul/2020:20:48:56 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-04 03:07:24
167.71.4.187	attackbotsspam	[Sat Jul 04 02:10:11 2020] - Syn Flood From IP: 167.71.4.187 Port: 51440	2020-07-04 02:45:28
186.179.167.21	attack	Telnet Honeypot -> Telnet Bruteforce / Login	2020-07-04 03:11:05
172.104.174.197	attackspambots	Unauthorized connection attempt from IP address 172.104.174.197 on Port 25(SMTP)	2020-07-04 02:48:51
187.189.24.234	attack	Jul 3 12:31:43 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 19 secs): user=, method=PLAIN, rip=187.189.24.234, lip=185.198.26.142, TLS, session= ...	2020-07-04 02:48:37

最近上报的IP列表

106.52.38.39	106.52.67.233	106.52.84.22	106.52.85.225
106.52.92.66	106.53.100.206	106.53.103.25	106.53.109.148
106.53.109.21	106.53.111.113	141.99.71.17	106.53.115.196
106.53.136.12	106.53.141.21	106.53.145.77	106.53.146.121
106.53.22.132	106.53.234.218	106.53.24.138	106.53.254.90