170.106.74.169

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	UDP 170.106.74.169:60356 -> port 32797, len 68	2020-07-22 15:53:46
attackbots	Apr 22 05:53:26 debian-2gb-nbg1-2 kernel: \[9786561.595203\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=170.106.74.169 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=53857 DPT=5280 WINDOW=65535 RES=0x00 SYN URGP=0	2020-04-22 15:26:57
attackbots	Unauthorized connection attempt detected from IP address 170.106.74.169 to port 8005 [J]	2020-01-06 13:17:17

类型

评论内容

时间

attack

 UDP 170.106.74.169:60356 -> port 32797, len 68

2020-07-22 15:53:46

attackbots

Apr 22 05:53:26 debian-2gb-nbg1-2 kernel: \[9786561.595203\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=170.106.74.169 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=53857 DPT=5280 WINDOW=65535 RES=0x00 SYN URGP=0

2020-04-22 15:26:57

attackbots

Unauthorized connection attempt detected from IP address 170.106.74.169 to port 8005 [J]

2020-01-06 13:17:17

相同子网IP讨论:

IP	类型	评论内容	时间
170.106.74.243	attackbotsspam	Unauthorized connection attempt detected from IP address 170.106.74.243 to port 8082	2020-07-22 14:59:14
170.106.74.243	attack	Unauthorized connection attempt detected from IP address 170.106.74.243 to port 9300	2020-07-09 06:42:52
170.106.74.243	attack	Apr 16 05:49:40 debian-2gb-nbg1-2 kernel: \[9267963.106390\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=170.106.74.243 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=233 ID=54321 PROTO=TCP SPT=54827 DPT=18245 WINDOW=65535 RES=0x00 SYN URGP=0	2020-04-16 17:24:30
170.106.74.243	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-28 20:06:18
170.106.74.243	attackbotsspam	Unauthorized connection attempt detected from IP address 170.106.74.243 to port 3940 [J]	2020-02-04 00:35:22
170.106.74.243	attackspambots	Unauthorized connection attempt detected from IP address 170.106.74.243 to port 4840 [J]	2020-02-01 00:04:21
170.106.74.243	attackspam	Unauthorized connection attempt detected from IP address 170.106.74.243 to port 1947 [J]	2020-01-17 15:27:07
170.106.74.33	attack	" "	2019-10-09 22:16:30
170.106.74.33	attackbots	53413/udp 8999/tcp 783/tcp... [2019-07-30/09-30]9pkt,8pt.(tcp),1pt.(udp)	2019-09-30 21:38:11
170.106.74.33	attackspambots	1099/tcp 4045/udp 502/tcp [2019-06-29/07-19]3pkt	2019-07-20 03:36:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.106.74.169
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36154
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;170.106.74.169.			IN	A

;; AUTHORITY SECTION:
.			341	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010501 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 06 13:17:14 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 169.74.106.170.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 169.74.106.170.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
178.22.145.234	attackspambots	(sshd) Failed SSH login from 178.22.145.234 (FR/France/lafibrenumerique5962.fr): 5 in the last 3600 secs	2020-03-06 14:38:21
206.189.145.251	attackspambots	detected by Fail2Ban	2020-03-06 13:54:27
106.54.83.45	attack	Mar 6 04:49:46 ip-172-31-62-245 sshd\[28515\]: Invalid user magda from 106.54.83.45\ Mar 6 04:49:48 ip-172-31-62-245 sshd\[28515\]: Failed password for invalid user magda from 106.54.83.45 port 41910 ssh2\ Mar 6 04:54:11 ip-172-31-62-245 sshd\[28542\]: Invalid user lishuoguo from 106.54.83.45\ Mar 6 04:54:13 ip-172-31-62-245 sshd\[28542\]: Failed password for invalid user lishuoguo from 106.54.83.45 port 35114 ssh2\ Mar 6 04:58:47 ip-172-31-62-245 sshd\[28572\]: Invalid user chef from 106.54.83.45\	2020-03-06 13:53:55
92.118.160.21	attackspambots	Honeypot hit.	2020-03-06 14:20:21
222.186.175.220	attack	Mar 6 07:14:30 nextcloud sshd\[16742\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.220 user=root Mar 6 07:14:32 nextcloud sshd\[16742\]: Failed password for root from 222.186.175.220 port 51848 ssh2 Mar 6 07:14:35 nextcloud sshd\[16742\]: Failed password for root from 222.186.175.220 port 51848 ssh2	2020-03-06 14:19:32
222.186.173.180	attack	detected by Fail2Ban	2020-03-06 14:24:41
170.231.59.118	attackbots	Mar 6 05:58:46 pornomens sshd\[24422\]: Invalid user kevin from 170.231.59.118 port 4104 Mar 6 05:58:46 pornomens sshd\[24422\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.231.59.118 Mar 6 05:58:48 pornomens sshd\[24422\]: Failed password for invalid user kevin from 170.231.59.118 port 4104 ssh2 ...	2020-03-06 13:52:51
213.39.53.241	attackbotsspam	SSH Authentication Attempts Exceeded	2020-03-06 13:55:16
185.143.223.173	attackbotsspam	Mar 6 07:14:45 mail.srvfarm.net postfix/smtpd[1965344]: NOQUEUE: reject: RCPT from unknown[185.143.223.173]: 554 5.7.1 : Relay access denied; from=<1g1zxxm8ebnh@sintesapeninsulahotels.com> to= proto=ESMTP helo=<[185.143.223.170]> Mar 6 07:14:45 mail.srvfarm.net postfix/smtpd[1965344]: NOQUEUE: reject: RCPT from unknown[185.143.223.173]: 554 5.7.1 : Relay access denied; from=<1g1zxxm8ebnh@sintesapeninsulahotels.com> to= proto=ESMTP helo=<[185.143.223.170]> Mar 6 07:14:45 mail.srvfarm.net postfix/smtpd[1965344]: NOQUEUE: reject: RCPT from unknown[185.143.223.173]: 554 5.7.1 : Relay access denied; from=<1g1zxxm8ebnh@sintesapeninsulahotels.com> to= proto=ESMTP helo=<[185.143.223.170]> Mar 6 07:14:45 mail.srvfarm.net postfix/smtpd[1965344]: NOQUEUE: reject: RCPT from unknown[185.143.223.173]: 554 5.7.1	2020-03-06 14:37:39
2.135.222.114	attackbotsspam	Port probing on unauthorized port 445	2020-03-06 13:54:09
200.52.80.34	attackbotsspam	2020-03-06T05:44:16.616661shield sshd\[3935\]: Invalid user ethos from 200.52.80.34 port 55416 2020-03-06T05:44:16.626575shield sshd\[3935\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34 2020-03-06T05:44:18.300197shield sshd\[3935\]: Failed password for invalid user ethos from 200.52.80.34 port 55416 ssh2 2020-03-06T05:48:08.075268shield sshd\[4903\]: Invalid user list from 200.52.80.34 port 37816 2020-03-06T05:48:08.080327shield sshd\[4903\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.52.80.34	2020-03-06 14:15:32
162.241.201.224	attackbotsspam	Mar 6 05:58:19 lnxweb62 sshd[2197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.201.224	2020-03-06 14:08:09
222.186.30.35	attackbots	Brute-force attempt banned	2020-03-06 14:25:42
87.250.224.104	attackspam	[Fri Mar 06 11:58:27.996194 2020] [:error] [pid 30794:tid 139856843798272] [client 87.250.224.104:50327] [client 87.250.224.104] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XmHYczAJ0TQ@Rct3pu3cdQAAAAQ"] ...	2020-03-06 14:03:14
139.59.0.243	attackspam	Mar 6 11:24:13 gw1 sshd[25897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243 Mar 6 11:24:16 gw1 sshd[25897]: Failed password for invalid user shiqian from 139.59.0.243 port 48950 ssh2 ...	2020-03-06 14:32:25

最近上报的IP列表

61.70.132.168	59.95.194.37	58.153.81.64	58.153.15.9
49.89.206.196	46.148.191.3	46.12.232.27	46.1.177.48
41.38.231.230	36.235.201.163	34.239.135.211	24.234.48.230
24.178.76.242	14.44.74.101	1.53.226.0	221.212.233.133
220.191.181.234	220.133.30.200	219.92.250.97	218.241.243.203