106.52.66.49 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Invalid user ki from 106.52.66.49 port 51356	2020-08-22 01:03:58
attack	Aug 19 23:43:28 OPSO sshd\[13799\]: Invalid user ct from 106.52.66.49 port 44176 Aug 19 23:43:28 OPSO sshd\[13799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49 Aug 19 23:43:29 OPSO sshd\[13799\]: Failed password for invalid user ct from 106.52.66.49 port 44176 ssh2 Aug 19 23:46:57 OPSO sshd\[14605\]: Invalid user test from 106.52.66.49 port 56632 Aug 19 23:46:57 OPSO sshd\[14605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49	2020-08-20 06:07:36

类型

评论内容

时间

attackspam

Invalid user ki from 106.52.66.49 port 51356

2020-08-22 01:03:58

attack

Aug 19 23:43:28 OPSO sshd\[13799\]: Invalid user ct from 106.52.66.49 port 44176
Aug 19 23:43:28 OPSO sshd\[13799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49
Aug 19 23:43:29 OPSO sshd\[13799\]: Failed password for invalid user ct from 106.52.66.49 port 44176 ssh2
Aug 19 23:46:57 OPSO sshd\[14605\]: Invalid user test from 106.52.66.49 port 56632
Aug 19 23:46:57 OPSO sshd\[14605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.66.49

2020-08-20 06:07:36

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.52.66.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7623
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.52.66.49.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081902 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 20 06:07:33 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 49.66.52.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.66.52.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
40.77.167.35	attackspam	Automatic report - Banned IP Access	2020-04-07 00:42:22
222.186.15.10	attackbots	[MK-VM1] SSH login failed	2020-04-07 01:23:20
217.115.102.6	attackbotsspam	1433/tcp [2020-04-06]1pkt	2020-04-07 00:40:03
168.197.157.2	attack	Automatic report - Port Scan Attack	2020-04-07 00:43:12
41.208.150.114	attack	Apr 6 18:05:46 [HOSTNAME] sshd[14813]: User removed from 41.208.150.114 not allowed because not listed in AllowUsers Apr 6 18:05:46 [HOSTNAME] sshd[14813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 user=removed Apr 6 18:05:48 [HOSTNAME] sshd[14813]: Failed password for invalid user removed from 41.208.150.114 port 60836 ssh2 ...	2020-04-07 01:11:44
189.39.112.219	attack	SSH Brute-Force reported by Fail2Ban	2020-04-07 00:59:26
36.227.136.62	attackbotsspam	23/tcp [2020-04-06]1pkt	2020-04-07 01:03:39
222.186.180.17	attack	Apr 6 18:35:07 MainVPS sshd[32684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Apr 6 18:35:09 MainVPS sshd[32684]: Failed password for root from 222.186.180.17 port 58974 ssh2 Apr 6 18:35:23 MainVPS sshd[32684]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 58974 ssh2 [preauth] Apr 6 18:35:07 MainVPS sshd[32684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Apr 6 18:35:09 MainVPS sshd[32684]: Failed password for root from 222.186.180.17 port 58974 ssh2 Apr 6 18:35:23 MainVPS sshd[32684]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 58974 ssh2 [preauth] Apr 6 18:35:26 MainVPS sshd[639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Apr 6 18:35:29 MainVPS sshd[639]: Failed password for root from 222.186.180.17 port 1546 ssh2 ..	2020-04-07 00:39:36
69.94.158.97	attackbotsspam	Apr 6 18:30:40 web01.agentur-b-2.de postfix/smtpd[237763]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 18:30:40 web01.agentur-b-2.de postfix/smtpd[243220]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 18:30:43 web01.agentur-b-2.de postfix/smtpd[237763]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 18:30:43 web01.agentur-b-2.de postfix/smtpd[243220]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not	2020-04-07 01:05:05
51.83.70.229	attackspambots	$f2bV_matches	2020-04-07 00:49:59
175.101.78.144	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-04-07 01:14:27
138.197.179.111	attackbotsspam	2020-04-06T15:32:22.751068Z d31697938d09 New connection: 138.197.179.111:42964 (172.17.0.4:2222) [session: d31697938d09] 2020-04-06T15:39:46.085594Z 2be8d3cf63ab New connection: 138.197.179.111:39892 (172.17.0.4:2222) [session: 2be8d3cf63ab]	2020-04-07 00:53:05
38.64.102.46	attackbotsspam	20 attempts against mh-misbehave-ban on leaf	2020-04-07 00:35:59
45.148.10.7	attackspambots	(pop3d) Failed POP3 login from 45.148.10.7 (NL/Netherlands/-): 10 in the last 3600 secs	2020-04-07 01:17:00
185.48.39.23	attack	26/tcp [2020-04-06]1pkt	2020-04-07 00:59:57

最近上报的IP列表

34.74.227.16	156.96.61.106	74.65.55.194	109.103.178.85
205.209.166.108	212.58.121.187	74.74.152.74	105.184.84.57
73.229.90.45	74.82.195.39	45.251.35.131	89.203.137.89
173.29.101.42	164.17.182.157	185.250.47.43	42.84.169.206
204.111.209.66	88.227.145.29	91.209.168.207	91.156.168.43