106.55.152.22 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jun 28 02:01:28 inter-technics sshd[20770]: Invalid user appserver from 106.55.152.22 port 42228 Jun 28 02:01:28 inter-technics sshd[20770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.152.22 Jun 28 02:01:28 inter-technics sshd[20770]: Invalid user appserver from 106.55.152.22 port 42228 Jun 28 02:01:30 inter-technics sshd[20770]: Failed password for invalid user appserver from 106.55.152.22 port 42228 ssh2 Jun 28 02:09:17 inter-technics sshd[21326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.152.22 user=root Jun 28 02:09:18 inter-technics sshd[21326]: Failed password for root from 106.55.152.22 port 47910 ssh2 ...	2020-06-28 08:16:40

类型

评论内容

时间

attack

Jun 28 02:01:28 inter-technics sshd[20770]: Invalid user appserver from 106.55.152.22 port 42228
Jun 28 02:01:28 inter-technics sshd[20770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.152.22
Jun 28 02:01:28 inter-technics sshd[20770]: Invalid user appserver from 106.55.152.22 port 42228
Jun 28 02:01:30 inter-technics sshd[20770]: Failed password for invalid user appserver from 106.55.152.22 port 42228 ssh2
Jun 28 02:09:17 inter-technics sshd[21326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.152.22  user=root
Jun 28 02:09:18 inter-technics sshd[21326]: Failed password for root from 106.55.152.22 port 47910 ssh2
...

2020-06-28 08:16:40

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.55.152.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38730
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.55.152.22.			IN	A

;; AUTHORITY SECTION:
.			413	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062701 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 28 08:16:34 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 22.152.55.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 22.152.55.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
117.4.81.54	attackspambots	Unauthorized connection attempt from IP address 117.4.81.54 on Port 445(SMB)	2019-07-10 09:05:16
181.198.50.102	attack	Unauthorized connection attempt from IP address 181.198.50.102 on Port 445(SMB)	2019-07-10 09:16:47
182.149.199.38	attack	Unauthorized connection attempt from IP address 182.149.199.38 on Port 445(SMB)	2019-07-10 09:44:38
37.120.135.221	attackbotsspam	\[2019-07-09 20:42:31\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1323' - Wrong password \[2019-07-09 20:42:31\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T20:42:31.536-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9844",SessionID="0x7f02f98e5508",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.135.221/53764",Challenge="6e26f745",ReceivedChallenge="6e26f745",ReceivedHash="d16e20d2a261f1dd2fa5a217ad224b8b" \[2019-07-09 20:43:33\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1249' - Wrong password \[2019-07-09 20:43:33\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T20:43:33.989-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3793",SessionID="0x7f02f94cdc98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.1	2019-07-10 08:53:11
185.211.245.170	attack	Jul 10 01:46:42 mail postfix/smtpd\[25163\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 10 01:46:56 mail postfix/smtpd\[25132\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 10 02:31:30 mail postfix/smtpd\[25860\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 10 02:31:50 mail postfix/smtpd\[25860\]: warning: unknown\[185.211.245.170\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2019-07-10 09:33:48
41.39.221.131	attackspam	Unauthorized connection attempt from IP address 41.39.221.131 on Port 445(SMB)	2019-07-10 09:32:40
197.60.217.35	attackspambots	port scan and connect, tcp 23 (telnet)	2019-07-10 08:57:55
120.33.126.215	attackbots	port scan and connect, tcp 23 (telnet)	2019-07-10 09:15:35
51.75.169.236	attackspam	Jul 10 03:23:32 srv206 sshd[26903]: Invalid user lisa from 51.75.169.236 Jul 10 03:23:32 srv206 sshd[26903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.169.236 Jul 10 03:23:32 srv206 sshd[26903]: Invalid user lisa from 51.75.169.236 Jul 10 03:23:34 srv206 sshd[26903]: Failed password for invalid user lisa from 51.75.169.236 port 54551 ssh2 ...	2019-07-10 09:32:23
206.189.132.184	attackbots	Jul 9 19:28:56 localhost sshd[12048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.132.184 Jul 9 19:28:58 localhost sshd[12048]: Failed password for invalid user oracle from 206.189.132.184 port 49726 ssh2 Jul 9 19:31:37 localhost sshd[12091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.132.184 Jul 9 19:31:39 localhost sshd[12091]: Failed password for invalid user jzhao from 206.189.132.184 port 49280 ssh2 ...	2019-07-10 09:42:34
166.111.7.104	attackbots	'Fail2Ban'	2019-07-10 09:34:53
93.102.233.132	attackspam	Automatic report - SSH Brute-Force Attack	2019-07-10 09:34:04
115.75.163.131	attackbotsspam	Unauthorized connection attempt from IP address 115.75.163.131 on Port 445(SMB)	2019-07-10 09:20:15
115.74.211.234	attackbots	Unauthorized connection attempt from IP address 115.74.211.234 on Port 445(SMB)	2019-07-10 09:02:11
5.135.135.116	attackspam	Invalid user andreia from 5.135.135.116 port 44347 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.135.116 Failed password for invalid user andreia from 5.135.135.116 port 44347 ssh2 Invalid user yusuf from 5.135.135.116 port 60578 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.135.116	2019-07-10 08:55:48

最近上报的IP列表

40.73.0.147	35.153.253.221	140.179.120.90	113.106.83.154
153.180.108.7	112.172.118.237	95.136.58.101	109.226.63.124
77.166.69.175	81.63.175.178	180.110.196.228	115.225.42.49
77.45.5.33	32.22.157.170	254.123.79.252	74.82.205.99
50.255.124.6	63.148.240.242	74.14.12.241	110.8.241.158