必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Shanghai UCloud Information Technology Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Apr 13 07:45:34 vps647732 sshd[23308]: Failed password for root from 106.75.56.29 port 34078 ssh2
...
2020-04-13 14:50:06
相同子网IP讨论:
IP 类型 评论内容 时间
106.75.56.56 attackspam
Aug  3 16:16:08 mellenthin sshd[1997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56  user=root
Aug  3 16:16:10 mellenthin sshd[1997]: Failed password for invalid user root from 106.75.56.56 port 46009 ssh2
2020-08-04 01:54:16
106.75.56.56 attackbots
2020-07-29T18:22:34.9605111495-001 sshd[24526]: Invalid user zhuhan from 106.75.56.56 port 33684
2020-07-29T18:22:37.1268961495-001 sshd[24526]: Failed password for invalid user zhuhan from 106.75.56.56 port 33684 ssh2
2020-07-29T18:26:44.1952021495-001 sshd[24704]: Invalid user kevinm from 106.75.56.56 port 37545
2020-07-29T18:26:44.1983841495-001 sshd[24704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56
2020-07-29T18:26:44.1952021495-001 sshd[24704]: Invalid user kevinm from 106.75.56.56 port 37545
2020-07-29T18:26:46.0153601495-001 sshd[24704]: Failed password for invalid user kevinm from 106.75.56.56 port 37545 ssh2
...
2020-07-30 07:02:14
106.75.56.56 attackspambots
Jul 21 05:23:44 dignus sshd[7041]: Failed password for invalid user ricoh from 106.75.56.56 port 58125 ssh2
Jul 21 05:28:49 dignus sshd[7800]: Invalid user system from 106.75.56.56 port 59385
Jul 21 05:28:49 dignus sshd[7800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56
Jul 21 05:28:51 dignus sshd[7800]: Failed password for invalid user system from 106.75.56.56 port 59385 ssh2
Jul 21 05:33:49 dignus sshd[8504]: Invalid user micro from 106.75.56.56 port 60628
...
2020-07-21 20:46:17
106.75.56.56 attackbots
Jul 19 02:59:19 Host-KLAX-C sshd[10520]: Invalid user informatica from 106.75.56.56 port 40177
...
2020-07-19 22:55:13
106.75.56.56 attackbotsspam
Jul  4 09:07:01 server sshd[21431]: Failed password for root from 106.75.56.56 port 50571 ssh2
Jul  4 09:16:16 server sshd[32137]: Failed password for invalid user francis from 106.75.56.56 port 60938 ssh2
Jul  4 09:20:26 server sshd[4318]: Failed password for invalid user vmi from 106.75.56.56 port 52007 ssh2
2020-07-04 16:02:55
106.75.56.56 attackspam
SSH bruteforce
2020-07-01 07:37:31
106.75.56.56 attackbots
Lines containing failures of 106.75.56.56 (max 1000)
Jun  8 08:41:19 HOSTNAME sshd[31909]: User r.r from 106.75.56.56 not allowed because not listed in AllowUsers
Jun  8 08:41:19 HOSTNAME sshd[31909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56  user=r.r
Jun  8 08:41:21 HOSTNAME sshd[31909]: Failed password for invalid user r.r from 106.75.56.56 port 59274 ssh2
Jun  8 08:41:22 HOSTNAME sshd[31909]: Received disconnect from 106.75.56.56 port 59274:11: Bye Bye [preauth]
Jun  8 08:41:22 HOSTNAME sshd[31909]: Disconnected from 106.75.56.56 port 59274 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.75.56.56
2020-06-08 15:35:15
106.75.56.56 attack
May 24 12:15:44 scw-6657dc sshd[2674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56
May 24 12:15:44 scw-6657dc sshd[2674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.56.56
May 24 12:15:45 scw-6657dc sshd[2674]: Failed password for invalid user ji from 106.75.56.56 port 33740 ssh2
...
2020-05-24 20:58:35
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.75.56.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55629
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;106.75.56.29.			IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041300 1800 900 604800 86400

;; Query time: 140 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 13 14:50:03 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 29.56.75.106.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 29.56.75.106.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
206.189.83.111 attackspam
2020-07-08T10:20:13.564746amanda2.illicoweb.com sshd\[15843\]: Invalid user muhandash from 206.189.83.111 port 48306
2020-07-08T10:20:13.571689amanda2.illicoweb.com sshd\[15843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.83.111
2020-07-08T10:20:15.481843amanda2.illicoweb.com sshd\[15843\]: Failed password for invalid user muhandash from 206.189.83.111 port 48306 ssh2
2020-07-08T10:22:53.957405amanda2.illicoweb.com sshd\[15950\]: Invalid user devp from 206.189.83.111 port 49460
2020-07-08T10:22:53.959593amanda2.illicoweb.com sshd\[15950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.83.111
...
2020-07-08 17:06:37
92.154.24.131 attackspam
Jul  8 05:43:12 odroid64 sshd\[7583\]: Invalid user dkb from 92.154.24.131
Jul  8 05:43:12 odroid64 sshd\[7583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.154.24.131
...
2020-07-08 16:40:24
42.119.145.98 attackspam
1594179775 - 07/08/2020 05:42:55 Host: 42.119.145.98/42.119.145.98 Port: 445 TCP Blocked
2020-07-08 16:55:18
202.200.142.251 attackbots
Jul  8 06:39:21 * sshd[16559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.200.142.251
Jul  8 06:39:22 * sshd[16559]: Failed password for invalid user valeska from 202.200.142.251 port 35814 ssh2
2020-07-08 16:58:05
166.62.80.165 attackspambots
166.62.80.165 - - [08/Jul/2020:11:30:35 +1000] "POST /wp-login.php HTTP/1.0" 200 6620 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.80.165 - - [08/Jul/2020:12:15:42 +1000] "POST /wp-login.php HTTP/1.1" 200 1925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.80.165 - - [08/Jul/2020:12:15:44 +1000] "POST /wp-login.php HTTP/1.1" 200 1880 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.80.165 - - [08/Jul/2020:12:56:55 +1000] "POST /wp-login.php HTTP/1.0" 200 5963 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
166.62.80.165 - - [08/Jul/2020:16:59:01 +1000] "POST /wp-login.php HTTP/1.0" 200 6261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-08 16:51:39
37.34.102.191 attackspambots
2020-07-0805:42:561jt0z1-0000EU-Rx\<=info@whatsup2013.chH=\(localhost\)[186.179.100.209]:2693P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3012id=802690c3c8e3c9c15d58ee42a5d1fbeea8ab3a@whatsup2013.chT="Doyouwanttoscrewtheladiesaroundyou\?"forjavierya3672@gmail.comandrea2020@email.combunnyboo@gmail.com2020-07-0805:42:481jt0yu-0000Ds-2T\<=info@whatsup2013.chH=\(localhost\)[113.173.109.5]:33416P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3001id=860571bab19a4fbc9f6197c4cf1b228ead4e9b7fb8@whatsup2013.chT="Yourlocalgirlsarewantingforyourdick"fortyler.fletcher2016@gmail.comtonywest2420@gmail.comqueencustomtees@yahoo.com2020-07-0805:42:371jt0yh-0000Ch-Hy\<=info@whatsup2013.chH=\(localhost\)[186.226.5.111]:48550P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2960id=048d51e2e9c217e4c739cf9c97437ad6f5166bb82a@whatsup2013.chT="Yourneighborhoodsweetheartsarewantingforsomedick"forrevjt
2020-07-08 16:45:52
115.166.142.214 attackbots
Fail2Ban
2020-07-08 16:54:11
68.183.12.80 attackspam
Jul  8 10:11:43 nas sshd[24294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.12.80 
Jul  8 10:11:46 nas sshd[24294]: Failed password for invalid user sreckels from 68.183.12.80 port 48474 ssh2
Jul  8 10:29:12 nas sshd[24910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.12.80 
...
2020-07-08 16:59:37
104.218.55.91 attackbotsspam
Jul  8 06:47:07 *** sshd[2094]: Invalid user mariel from 104.218.55.91
2020-07-08 16:53:20
218.92.0.138 attack
Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-07-08 16:55:36
94.177.231.4 attack
Jul  8 07:44:33 nextcloud sshd\[24944\]: Invalid user board from 94.177.231.4
Jul  8 07:44:33 nextcloud sshd\[24944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.231.4
Jul  8 07:44:35 nextcloud sshd\[24944\]: Failed password for invalid user board from 94.177.231.4 port 53028 ssh2
2020-07-08 16:56:00
58.217.157.209 attackbots
[MK-VM6] Blocked by UFW
2020-07-08 16:56:41
180.120.211.226 attack
Lines containing failures of 180.120.211.226
Jul  8 03:26:38 neweola postfix/smtpd[14487]: connect from unknown[180.120.211.226]
Jul  8 03:26:49 neweola postfix/smtpd[14487]: NOQUEUE: reject: RCPT from unknown[180.120.211.226]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<3j3wMAvn>
Jul  8 03:26:51 neweola postfix/smtpd[14487]: disconnect from unknown[180.120.211.226] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Jul  8 03:26:58 neweola postfix/smtpd[14487]: connect from unknown[180.120.211.226]
Jul  8 03:27:04 neweola postfix/smtpd[14487]: lost connection after AUTH from unknown[180.120.211.226]
Jul  8 03:27:04 neweola postfix/smtpd[14487]: disconnect from unknown[180.120.211.226] ehlo=1 auth=0/1 commands=1/2
Jul  8 03:27:11 neweola postfix/smtpd[14487]: connect from unknown[180.120.211.226]
Jul  8 03:27:25 neweola postfix/smtpd[14487]: lost connection after AUTH from unknown[180.120.211.226]
Jul  8 03:27:25 neweola postfix/smtpd........
------------------------------
2020-07-08 16:37:36
114.34.218.48 attackspam
port 23
2020-07-08 16:27:45
51.174.201.169 attackspambots
Failed password for root from 51.174.201.169 port 35492 ssh2
2020-07-08 17:03:44

最近上报的IP列表

180.244.97.57 170.82.236.19 59.14.199.115 2607:f1c0:858:a700::1a:7770
172.105.28.38 118.70.124.192 49.51.182.227 200.236.237.168
95.158.139.205 14.188.52.48 178.238.8.169 124.104.143.120
188.161.202.34 183.88.217.46 117.81.131.12 122.51.215.154
110.87.95.138 101.51.203.252 150.109.104.175 90.154.102.15