106.75.104.44 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Shanghai UCloud Information Technology Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Oct 5 07:10:29 *** sshd[28210]: User root from 106.75.104.44 not allowed because not listed in AllowUsers	2020-10-05 18:22:14
attack	Sep 25 00:07:27 vpn01 sshd[10282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.104.44 Sep 25 00:07:30 vpn01 sshd[10282]: Failed password for invalid user grid from 106.75.104.44 port 50778 ssh2 ...	2020-09-25 06:14:48
attack	Sep 21 16:28:40 ip-172-31-42-142 sshd\[31184\]: Failed password for root from 106.75.104.44 port 49856 ssh2\ Sep 21 16:30:40 ip-172-31-42-142 sshd\[31188\]: Failed password for root from 106.75.104.44 port 42684 ssh2\ Sep 21 16:32:51 ip-172-31-42-142 sshd\[31196\]: Failed password for root from 106.75.104.44 port 35514 ssh2\ Sep 21 16:34:58 ip-172-31-42-142 sshd\[31201\]: Failed password for root from 106.75.104.44 port 56574 ssh2\ Sep 21 16:36:57 ip-172-31-42-142 sshd\[31232\]: Failed password for root from 106.75.104.44 port 49402 ssh2\	2020-09-22 02:47:31
attackspam	SSH/22 MH Probe, BF, Hack -	2020-09-21 18:32:24

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.104.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47410
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.104.44.			IN	A

;; AUTHORITY SECTION:
.			578	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092100 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 21 18:32:18 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 44.104.75.106.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.104.75.106.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
175.164.131.120	attack	Jun 14 15:14:05 dignus sshd[25412]: Failed password for root from 175.164.131.120 port 60205 ssh2 Jun 14 15:15:27 dignus sshd[25578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.164.131.120 user=root Jun 14 15:15:29 dignus sshd[25578]: Failed password for root from 175.164.131.120 port 41383 ssh2 Jun 14 15:16:46 dignus sshd[25724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.164.131.120 user=root Jun 14 15:16:48 dignus sshd[25724]: Failed password for root from 175.164.131.120 port 50793 ssh2 ...	2020-06-15 09:21:00
77.121.70.11	attackbots	" "	2020-06-15 09:32:03
94.228.182.244	attackspambots	Jun 15 02:06:19 serwer sshd\[22761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.228.182.244 user=admin Jun 15 02:06:21 serwer sshd\[22761\]: Failed password for admin from 94.228.182.244 port 42324 ssh2 Jun 15 02:13:15 serwer sshd\[23484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.228.182.244 user=root ...	2020-06-15 08:42:33
124.126.18.162	attackbotsspam	(sshd) Failed SSH login from 124.126.18.162 (CN/China/162.18.126.124.broad.bjtelecom.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 15 01:31:32 s1 sshd[15930]: Invalid user gmod from 124.126.18.162 port 40268 Jun 15 01:31:34 s1 sshd[15930]: Failed password for invalid user gmod from 124.126.18.162 port 40268 ssh2 Jun 15 01:34:44 s1 sshd[15962]: Invalid user exe from 124.126.18.162 port 45700 Jun 15 01:34:47 s1 sshd[15962]: Failed password for invalid user exe from 124.126.18.162 port 45700 ssh2 Jun 15 01:36:37 s1 sshd[16042]: Invalid user jewel from 124.126.18.162 port 40016	2020-06-15 09:18:36
154.179.82.77	attackspam	Jun 14 15:24:14 Host-KLAX-C postfix/smtps/smtpd[32556]: lost connection after CONNECT from unknown[154.179.82.77] ...	2020-06-15 08:56:05
14.251.161.81	attackspam	Jun 14 15:24:14 Host-KLAX-C postfix/smtps/smtpd[32558]: lost connection after CONNECT from unknown[14.251.161.81] ...	2020-06-15 08:54:58
34.75.240.70	attackspambots	REQUESTED PAGE: /xmlrpc.php?rsd	2020-06-15 09:24:10
116.196.123.143	attackspambots	Jun 14 15:24:28 Host-KLAX-C sshd[427]: Invalid user home from 116.196.123.143 port 44200 ...	2020-06-15 08:46:10
43.226.41.171	attackbotsspam	SSH Brute-Force attacks	2020-06-15 08:48:28
113.162.147.109	attackbotsspam	Jun 14 15:24:23 Host-KLAX-C postfix/smtpd[364]: lost connection after CONNECT from unknown[113.162.147.109] ...	2020-06-15 08:49:28
54.36.246.66	attack	Jun 15 00:27:24 Horstpolice sshd[19273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.246.66 user=r.r Jun 15 00:27:27 Horstpolice sshd[19273]: Failed password for r.r from 54.36.246.66 port 41714 ssh2 Jun 15 00:27:27 Horstpolice sshd[19273]: Received disconnect from 54.36.246.66 port 41714:11: Bye Bye [preauth] Jun 15 00:27:27 Horstpolice sshd[19273]: Disconnected from 54.36.246.66 port 41714 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=54.36.246.66	2020-06-15 08:53:44
128.199.225.205	attack	Jun 14 17:16:29 hurricane sshd[20034]: Invalid user admin from 128.199.225.205 port 37542 Jun 14 17:16:30 hurricane sshd[20034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.225.205 Jun 14 17:16:31 hurricane sshd[20034]: Failed password for invalid user admin from 128.199.225.205 port 37542 ssh2 Jun 14 17:16:31 hurricane sshd[20034]: Received disconnect from 128.199.225.205 port 37542:11: Bye Bye [preauth] Jun 14 17:16:31 hurricane sshd[20034]: Disconnected from 128.199.225.205 port 37542 [preauth] Jun 14 17:24:16 hurricane sshd[20087]: Invalid user ajc from 128.199.225.205 port 1464 Jun 14 17:24:16 hurricane sshd[20087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.225.205 Jun 14 17:24:19 hurricane sshd[20087]: Failed password for invalid user ajc from 128.199.225.205 port 1464 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=128.199.225.205	2020-06-15 09:07:30
120.39.3.141	attackbotsspam	Jun 15 01:59:37 cosmoit sshd[4726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.39.3.141	2020-06-15 09:20:08
80.82.65.187	attack	Jun 15 02:22:59 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session= Jun 15 02:24:35 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session= Jun 15 02:25:02 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session= Jun 15 02:25:37 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.187, lip=185.118.198.210, session= Jun 15 02:25:55 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip	2020-06-15 08:52:20
101.251.197.238	attackbotsspam	2020-06-15T01:41:06.538721rocketchat.forhosting.nl sshd[681]: Invalid user lol from 101.251.197.238 port 48488 2020-06-15T01:41:08.894272rocketchat.forhosting.nl sshd[681]: Failed password for invalid user lol from 101.251.197.238 port 48488 ssh2 2020-06-15T01:57:58.425105rocketchat.forhosting.nl sshd[857]: Invalid user mirror from 101.251.197.238 port 49566 ...	2020-06-15 09:21:20

最近上报的IP列表

117.44.60.211	103.141.138.124	60.212.37.94	93.43.216.241
2001:2002:d9d0:d399:215:5dff:fe00:2c23	64.225.37.169	52.187.65.64	147.139.5.160
45.143.221.96	3.212.48.17	172.81.208.125	13.92.97.171
35.190.214.113	125.42.4.7	37.208.139.94	24.249.17.101
155.4.113.161	104.223.29.193	123.194.117.96	120.85.60.41