106.55.20.246 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Lines containing failures of 106.55.20.246 Jul 4 19:55:50 shared12 sshd[30613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.20.246 user=r.r Jul 4 19:55:52 shared12 sshd[30613]: Failed password for r.r from 106.55.20.246 port 54690 ssh2 Jul 4 19:55:52 shared12 sshd[30613]: Received disconnect from 106.55.20.246 port 54690:11: Bye Bye [preauth] Jul 4 19:55:52 shared12 sshd[30613]: Disconnected from authenticating user r.r 106.55.20.246 port 54690 [preauth] Jul 4 20:14:09 shared12 sshd[4303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.20.246 user=r.r Jul 4 20:14:11 shared12 sshd[4303]: Failed password for r.r from 106.55.20.246 port 59650 ssh2 Jul 4 20:14:12 shared12 sshd[4303]: Received disconnect from 106.55.20.246 port 59650:11: Bye Bye [preauth] Jul 4 20:14:12 shared12 sshd[4303]: Disconnected from authenticating user r.r 106.55.20.246 port 59650 [preauth] Ju........ ------------------------------	2020-07-05 06:20:40

类型

评论内容

时间

attack

Lines containing failures of 106.55.20.246
Jul  4 19:55:50 shared12 sshd[30613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.20.246  user=r.r
Jul  4 19:55:52 shared12 sshd[30613]: Failed password for r.r from 106.55.20.246 port 54690 ssh2
Jul  4 19:55:52 shared12 sshd[30613]: Received disconnect from 106.55.20.246 port 54690:11: Bye Bye [preauth]
Jul  4 19:55:52 shared12 sshd[30613]: Disconnected from authenticating user r.r 106.55.20.246 port 54690 [preauth]
Jul  4 20:14:09 shared12 sshd[4303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.20.246  user=r.r
Jul  4 20:14:11 shared12 sshd[4303]: Failed password for r.r from 106.55.20.246 port 59650 ssh2
Jul  4 20:14:12 shared12 sshd[4303]: Received disconnect from 106.55.20.246 port 59650:11: Bye Bye [preauth]
Jul  4 20:14:12 shared12 sshd[4303]: Disconnected from authenticating user r.r 106.55.20.246 port 59650 [preauth]
Ju........
------------------------------

2020-07-05 06:20:40

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.55.20.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31281
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.55.20.246.			IN	A

;; AUTHORITY SECTION:
.			301	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070401 1800 900 604800 86400

;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 05 06:20:37 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 246.20.55.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 246.20.55.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
84.76.125.85	attackbots	Repeated failed SSH attempt	2020-01-01 23:27:49
113.239.183.123	attackbotsspam	Telnet Server BruteForce Attack	2020-01-01 23:10:45
52.184.199.30	attackbots	Jan 1 14:07:48 icinga sshd[1044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.184.199.30 Jan 1 14:07:50 icinga sshd[1044]: Failed password for invalid user boas from 52.184.199.30 port 46164 ssh2 ...	2020-01-01 22:50:52
178.128.42.36	attackbots	Portscan or hack attempt detected by psad/fwsnort	2020-01-01 23:03:42
218.92.0.168	attack	Jan 1 10:14:10 plusreed sshd[12573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Jan 1 10:14:12 plusreed sshd[12573]: Failed password for root from 218.92.0.168 port 47489 ssh2 ...	2020-01-01 23:16:22
85.209.0.139	attackspam	Jan 1 15:57:25 srv01 sshd[13120]: Did not receive identification string from 85.209.0.139 port 40186 Jan 1 15:57:27 srv01 sshd[13121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.139 user=root Jan 1 15:57:30 srv01 sshd[13121]: Failed password for root from 85.209.0.139 port 4276 ssh2 Jan 1 15:57:27 srv01 sshd[13121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.139 user=root Jan 1 15:57:30 srv01 sshd[13121]: Failed password for root from 85.209.0.139 port 4276 ssh2 ...	2020-01-01 23:09:52
197.116.30.133	attackbotsspam	Jan 1 15:53:49 grey postfix/smtpd\[24668\]: NOQUEUE: reject: RCPT from unknown\[197.116.30.133\]: 554 5.7.1 Service unavailable\; Client host \[197.116.30.133\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[197.116.30.133\]\; from=\ to=\ proto=ESMTP helo=\<\[197.116.30.133\]\> ...	2020-01-01 23:32:08
49.88.112.62	attackspam	Jan 1 15:45:37 minden010 sshd[11460]: Failed password for root from 49.88.112.62 port 40923 ssh2 Jan 1 15:45:40 minden010 sshd[11460]: Failed password for root from 49.88.112.62 port 40923 ssh2 Jan 1 15:45:43 minden010 sshd[11460]: Failed password for root from 49.88.112.62 port 40923 ssh2 Jan 1 15:45:46 minden010 sshd[11460]: Failed password for root from 49.88.112.62 port 40923 ssh2 ...	2020-01-01 22:55:07
189.14.135.202	attack	Automatic report - Banned IP Access	2020-01-01 23:03:22
213.32.67.160	attackspambots	Jan 1 16:08:48 vmd17057 sshd\[28114\]: Invalid user jakie from 213.32.67.160 port 60874 Jan 1 16:08:48 vmd17057 sshd\[28114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.67.160 Jan 1 16:08:50 vmd17057 sshd\[28114\]: Failed password for invalid user jakie from 213.32.67.160 port 60874 ssh2 ...	2020-01-01 23:10:14
187.44.113.33	attackbots	Jan 1 16:04:58 srv-ubuntu-dev3 sshd[61963]: Invalid user jgreen from 187.44.113.33 Jan 1 16:04:58 srv-ubuntu-dev3 sshd[61963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33 Jan 1 16:04:58 srv-ubuntu-dev3 sshd[61963]: Invalid user jgreen from 187.44.113.33 Jan 1 16:05:01 srv-ubuntu-dev3 sshd[61963]: Failed password for invalid user jgreen from 187.44.113.33 port 57416 ssh2 Jan 1 16:07:44 srv-ubuntu-dev3 sshd[62206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33 user=root Jan 1 16:07:45 srv-ubuntu-dev3 sshd[62206]: Failed password for root from 187.44.113.33 port 41288 ssh2 Jan 1 16:10:33 srv-ubuntu-dev3 sshd[62588]: Invalid user Airi from 187.44.113.33 Jan 1 16:10:33 srv-ubuntu-dev3 sshd[62588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33 Jan 1 16:10:33 srv-ubuntu-dev3 sshd[62588]: Invalid user Airi from 187.4 ...	2020-01-01 23:27:03
51.77.32.33	attack	Jan 1 15:54:28 MK-Soft-VM7 sshd[17741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.32.33 Jan 1 15:54:30 MK-Soft-VM7 sshd[17741]: Failed password for invalid user qian from 51.77.32.33 port 56000 ssh2 ...	2020-01-01 23:12:48
159.89.177.46	attack	Jan 1 15:53:41 amit sshd\[13711\]: Invalid user rpc from 159.89.177.46 Jan 1 15:53:41 amit sshd\[13711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.177.46 Jan 1 15:53:43 amit sshd\[13711\]: Failed password for invalid user rpc from 159.89.177.46 port 60630 ssh2 ...	2020-01-01 23:34:54
92.63.194.91	attackbots	Jan 1 15:54:26 mc1 kernel: \[2049247.031966\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.63.194.91 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45374 DF PROTO=TCP SPT=32015 DPT=1723 WINDOW=29200 RES=0x00 SYN URGP=0 Jan 1 15:54:27 mc1 kernel: \[2049248.059512\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.63.194.91 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45375 DF PROTO=TCP SPT=32015 DPT=1723 WINDOW=29200 RES=0x00 SYN URGP=0 Jan 1 15:54:29 mc1 kernel: \[2049250.082706\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.63.194.91 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=45376 DF PROTO=TCP SPT=32015 DPT=1723 WINDOW=29200 RES=0x00 SYN URGP=0 ...	2020-01-01 23:12:30
222.186.180.130	attackspambots	Jan 1 16:30:44 MK-Soft-VM4 sshd[1477]: Failed password for root from 222.186.180.130 port 52133 ssh2 Jan 1 16:30:49 MK-Soft-VM4 sshd[1477]: Failed password for root from 222.186.180.130 port 52133 ssh2 ...	2020-01-01 23:31:44

最近上报的IP列表

78.140.153.202	193.29.13.11	110.72.129.33	35.74.79.198
118.27.31.145	90.251.107.4	111.72.194.165	83.22.104.51
223.149.177.12	84.72.140.252	95.158.46.205	81.232.16.152
108.154.150.99	119.54.138.43	125.115.183.55	119.164.236.12
42.228.38.143	208.6.211.85	74.104.93.244	110.227.248.205