106.75.113.0 - IPInfo

基本信息:

城市(city): unknown

省份(region): Shanghai

国家(country): China

运营商(isp): Shanghai UCloud Information Technology Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-11 04:38:30

相同子网IP讨论:

IP	类型	评论内容	时间
106.75.113.52	attackbotsspam	firewall-block, port(s): 5060/udp	2020-01-11 04:37:32
106.75.113.53	attackspam	unauthorized connection attempt	2020-01-11 04:35:59
106.75.113.55	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-11 04:35:18
106.75.113.53	attack	firewall-block, port(s): 5060/udp	2020-01-06 23:50:49
106.75.113.55	attack	firewall-block, port(s): 5060/udp	2019-12-28 14:17:07
106.75.113.55	attackspambots	Dec 25 00:27:17 debian-2gb-nbg1-2 kernel: \[882775.053807\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.75.113.55 DST=195.201.40.59 LEN=436 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=UDP SPT=5113 DPT=5060 LEN=416	2019-12-25 08:18:02
106.75.113.55	attackspambots	SIPVicious Scanner Detection	2019-12-22 06:04:54
106.75.113.53	attackbotsspam	firewall-block, port(s): 5060/udp	2019-12-14 02:22:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.113.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13270
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.113.0.			IN	A

;; AUTHORITY SECTION:
.			386	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011001 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 04:38:25 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 0.113.75.106.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 0.113.75.106.in-addr.arpa.: No answer

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
54.95.132.197	attackspam	[portscan] Port scan	2020-03-14 08:56:36
206.189.156.198	attackbotsspam	SASL PLAIN auth failed: ruser=...	2020-03-14 08:38:36
222.186.190.2	attackspambots	Mar 14 01:56:02 vps647732 sshd[10431]: Failed password for root from 222.186.190.2 port 28254 ssh2 Mar 14 01:56:14 vps647732 sshd[10431]: error: maximum authentication attempts exceeded for root from 222.186.190.2 port 28254 ssh2 [preauth] ...	2020-03-14 08:57:03
180.121.138.49	attack	Mar 13 18:58:20 mailman postfix/smtpd[23906]: warning: unknown[180.121.138.49]: SASL LOGIN authentication failed: authentication failure	2020-03-14 08:20:47
106.13.35.153	attackspam	$f2bV_matches	2020-03-14 08:29:28
34.255.138.159	attackbotsspam	[portscan] Port scan	2020-03-14 08:53:35
111.32.171.44	attackspambots	Mar 13 20:19:51 firewall sshd[27302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.32.171.44 Mar 13 20:19:51 firewall sshd[27302]: Invalid user oracle from 111.32.171.44 Mar 13 20:19:53 firewall sshd[27302]: Failed password for invalid user oracle from 111.32.171.44 port 35630 ssh2 ...	2020-03-14 08:19:20
200.107.241.50	attackbotsspam	2020-03-13 22:13:02 H=$Host-200-107-241-50.cotes.net.bo$ \[200.107.241.50\]:27283 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:13:28 H=$Host-200-107-241-50.cotes.net.bo$ \[200.107.241.50\]:12693 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:13:46 H=$Host-200-107-241-50.cotes.net.bo$ \[200.107.241.50\]:2664 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-03-14 08:27:02
77.6.169.189	attack	Mar 13 22:13:04 OPSO sshd\[29195\]: Invalid user pi from 77.6.169.189 port 49458 Mar 13 22:13:04 OPSO sshd\[29196\]: Invalid user pi from 77.6.169.189 port 49464 Mar 13 22:13:04 OPSO sshd\[29195\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.6.169.189 Mar 13 22:13:04 OPSO sshd\[29196\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.6.169.189 Mar 13 22:13:06 OPSO sshd\[29195\]: Failed password for invalid user pi from 77.6.169.189 port 49458 ssh2 Mar 13 22:13:06 OPSO sshd\[29196\]: Failed password for invalid user pi from 77.6.169.189 port 49464 ssh2	2020-03-14 08:53:04
103.4.217.138	attack	2020-03-14T00:31:45.695259 sshd[21789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.138 user=root 2020-03-14T00:31:48.020204 sshd[21789]: Failed password for root from 103.4.217.138 port 52653 ssh2 2020-03-14T00:45:17.293192 sshd[21999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.4.217.138 user=root 2020-03-14T00:45:19.090899 sshd[21999]: Failed password for root from 103.4.217.138 port 56031 ssh2 ...	2020-03-14 08:27:52
51.254.114.105	attackbots	SASL PLAIN auth failed: ruser=...	2020-03-14 08:26:00
139.59.235.149	attackbots	xmlrpc attack	2020-03-14 08:45:39
42.55.164.124	attack	2020-03-1322:13:561jCrcx-00084g-K0\<=info@whatsup2013.chH=$localhost$[14.161.70.165]:56819P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3719id=999C2A7972A6883BE7E2AB13E75189AD@whatsup2013.chT="iamChristina"forkenyattawilliams4810@gmail.comzanderanderson2004@yahoo.com2020-03-1322:13:561jCrcx-00084c-Vm\<=info@whatsup2013.chH=$localhost$[42.55.164.124]:59371P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3684id=4B4EF8ABA0745AE9353079C135E1C5C8@whatsup2013.chT="iamChristina"forgeoffreywhittles@hotmail.comdeepak.singh12671@gmail.com2020-03-1322:12:421jCrbl-0007vY-4j\<=info@whatsup2013.chH=$localhost$[113.22.4.10]:43594P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3600id=1217A1F2F92D03B06C6920986CC530D9@whatsup2013.chT="iamChristina"fortundeemmanuel717@gmail.comskhirtladze7@mail.ru2020-03-1322:13:061jCrcA-0007yL-2J\<=info@whatsup2013.chH=mx-ll-183.89.229-114.dynamic.3bb.co	2020-03-14 08:16:11
104.248.54.12	attackbotsspam	WordPress login Brute force / Web App Attack on client site.	2020-03-14 08:56:01
93.174.93.216	attackspam	03/13/2020-19:25:07.736232 93.174.93.216 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-03-14 08:47:54

最近上报的IP列表

185.112.82.239	157.48.68.112	123.16.129.145	162.108.21.4
103.25.139.245	102.72.184.57	98.195.131.67	44.203.118.84
62.100.248.130	85.132.64.124	115.226.221.212	82.122.85.17
67.190.132.169	103.100.211.90	176.232.204.68	36.224.119.36
103.197.102.83	97.175.44.226	104.214.52.230	194.151.8.213