47.106.244.242

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Aliyun Computing Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jun 9 15:01:02 lukav-desktop sshd\[8257\]: Invalid user admin from 47.106.244.242 Jun 9 15:01:02 lukav-desktop sshd\[8257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242 Jun 9 15:01:05 lukav-desktop sshd\[8257\]: Failed password for invalid user admin from 47.106.244.242 port 43410 ssh2 Jun 9 15:02:00 lukav-desktop sshd\[8276\]: Invalid user odol from 47.106.244.242 Jun 9 15:02:00 lukav-desktop sshd\[8276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242	2020-06-10 03:19:21

类型

评论内容

时间

attack

Jun  9 15:01:02 lukav-desktop sshd\[8257\]: Invalid user admin from 47.106.244.242
Jun  9 15:01:02 lukav-desktop sshd\[8257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242
Jun  9 15:01:05 lukav-desktop sshd\[8257\]: Failed password for invalid user admin from 47.106.244.242 port 43410 ssh2
Jun  9 15:02:00 lukav-desktop sshd\[8276\]: Invalid user odol from 47.106.244.242
Jun  9 15:02:00 lukav-desktop sshd\[8276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242

2020-06-10 03:19:21

相同子网IP讨论:

IP	类型	评论内容	时间
47.106.244.64	attackbotsspam	Unauthorized connection attempt detected from IP address 47.106.244.64 to port 7001 [T]	2020-01-21 00:36:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.106.244.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62819
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;47.106.244.242.			IN	A

;; AUTHORITY SECTION:
.			577	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060901 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 10 03:19:16 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 242.244.106.47.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.244.106.47.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
94.249.131.90	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-08-30 04:13:13
176.43.210.125	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-30 03:41:57
36.112.131.217	attackspam	Unwanted checking 80 or 443 port ...	2020-08-30 04:05:46
208.109.14.122	attack	Aug 29 15:19:17 buvik sshd[30474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.14.122 Aug 29 15:19:19 buvik sshd[30474]: Failed password for invalid user julia from 208.109.14.122 port 52598 ssh2 Aug 29 15:24:09 buvik sshd[31141]: Invalid user ubuntu from 208.109.14.122 ...	2020-08-30 04:15:30
35.198.194.198	attack	Aug 29 16:13:48 pkdns2 sshd\[37775\]: Invalid user dongbowen from 35.198.194.198Aug 29 16:13:51 pkdns2 sshd\[37775\]: Failed password for invalid user dongbowen from 35.198.194.198 port 48266 ssh2Aug 29 16:18:12 pkdns2 sshd\[37995\]: Invalid user gdb from 35.198.194.198Aug 29 16:18:14 pkdns2 sshd\[37995\]: Failed password for invalid user gdb from 35.198.194.198 port 57016 ssh2Aug 29 16:22:34 pkdns2 sshd\[38217\]: Invalid user supervisor from 35.198.194.198Aug 29 16:22:35 pkdns2 sshd\[38217\]: Failed password for invalid user supervisor from 35.198.194.198 port 37536 ssh2 ...	2020-08-30 04:13:53
49.232.137.54	attackspam	Aug 29 15:30:25 OPSO sshd\[14748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.137.54 user=root Aug 29 15:30:27 OPSO sshd\[14748\]: Failed password for root from 49.232.137.54 port 51140 ssh2 Aug 29 15:34:50 OPSO sshd\[15019\]: Invalid user lcc from 49.232.137.54 port 41936 Aug 29 15:34:50 OPSO sshd\[15019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.137.54 Aug 29 15:34:52 OPSO sshd\[15019\]: Failed password for invalid user lcc from 49.232.137.54 port 41936 ssh2	2020-08-30 04:05:27
37.120.171.243	attackbotsspam	2020-08-29T13:07:55.803205linuxbox-skyline sshd[25458]: Invalid user phillip from 37.120.171.243 port 55130 ...	2020-08-30 03:47:03
201.178.222.138	attack	2020-08-29 06:57:46.883107-0500 localhost smtpd[49618]: NOQUEUE: reject: RCPT from unknown[201.178.222.138]: 554 5.7.1 Service unavailable; Client host [201.178.222.138] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/201.178.222.138; from= to= proto=ESMTP helo=<201-178-222-138.speedy.com.ar>	2020-08-30 04:07:32
128.199.204.26	attack	2020-08-29T09:48:48.518024dreamphreak.com sshd[161769]: Invalid user audio from 128.199.204.26 port 38196 2020-08-29T09:48:50.369279dreamphreak.com sshd[161769]: Failed password for invalid user audio from 128.199.204.26 port 38196 ssh2 ...	2020-08-30 03:46:18
45.40.206.194	attack	Auto Fail2Ban report, multiple SSH login attempts.	2020-08-30 03:50:40
160.124.157.76	attackspambots	Aug 29 13:57:21 minden010 sshd[10891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.124.157.76 Aug 29 13:57:24 minden010 sshd[10891]: Failed password for invalid user orca from 160.124.157.76 port 58804 ssh2 Aug 29 14:02:51 minden010 sshd[11595]: Failed password for root from 160.124.157.76 port 36542 ssh2 ...	2020-08-30 04:15:45
159.100.25.12	attackbots	2020-08-29 06:58:57.458826-0500 localhost smtpd[49687]: NOQUEUE: reject: RCPT from unknown[159.100.25.12]: 450 4.7.25 Client host rejected: cannot find your hostname, [159.100.25.12]; from= to= proto=ESMTP helo=<012b2040.fattissue.buzz>	2020-08-30 04:06:26
201.150.34.28	attack	2020-08-29T08:12:17.086942devel sshd[13255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.150.34.28 2020-08-29T08:12:17.081149devel sshd[13255]: Invalid user almacen from 201.150.34.28 port 49402 2020-08-29T08:12:18.712700devel sshd[13255]: Failed password for invalid user almacen from 201.150.34.28 port 49402 ssh2	2020-08-30 03:57:26
106.13.88.44	attackspambots	Aug 29 15:38:42 [host] sshd[21089]: Invalid user b Aug 29 15:38:42 [host] sshd[21089]: pam_unix(sshd: Aug 29 15:38:44 [host] sshd[21089]: Failed passwor	2020-08-30 04:01:30
106.12.111.201	attackspambots	Aug 29 14:19:12 rotator sshd\[27540\]: Invalid user prisma from 106.12.111.201Aug 29 14:19:14 rotator sshd\[27540\]: Failed password for invalid user prisma from 106.12.111.201 port 48694 ssh2Aug 29 14:22:37 rotator sshd\[28312\]: Invalid user ftpuser from 106.12.111.201Aug 29 14:22:39 rotator sshd\[28312\]: Failed password for invalid user ftpuser from 106.12.111.201 port 60080 ssh2Aug 29 14:25:53 rotator sshd\[29084\]: Invalid user tcb from 106.12.111.201Aug 29 14:25:55 rotator sshd\[29084\]: Failed password for invalid user tcb from 106.12.111.201 port 43236 ssh2 ...	2020-08-30 04:05:08

最近上报的IP列表

171.225.119.22	31.173.101.142	117.6.24.22	78.189.217.180
36.88.130.30	150.109.119.231	31.172.209.138	47.31.95.63
14.182.210.213	186.32.195.194	87.237.239.174	182.53.15.214
72.220.8.139	91.205.49.24	183.103.103.151	139.167.49.171
36.68.144.35	200.76.203.23	91.0.60.1	151.15.205.152