47.106.244.64 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Aliyun Computing Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorized connection attempt detected from IP address 47.106.244.64 to port 7001 [T]	2020-01-21 00:36:14

相同子网IP讨论:

IP	类型	评论内容	时间
47.106.244.242	attack	Jun 9 15:01:02 lukav-desktop sshd\[8257\]: Invalid user admin from 47.106.244.242 Jun 9 15:01:02 lukav-desktop sshd\[8257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242 Jun 9 15:01:05 lukav-desktop sshd\[8257\]: Failed password for invalid user admin from 47.106.244.242 port 43410 ssh2 Jun 9 15:02:00 lukav-desktop sshd\[8276\]: Invalid user odol from 47.106.244.242 Jun 9 15:02:00 lukav-desktop sshd\[8276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242	2020-06-10 03:19:21

类型

评论内容

时间

47.106.244.242

attack

Jun  9 15:01:02 lukav-desktop sshd\[8257\]: Invalid user admin from 47.106.244.242
Jun  9 15:01:02 lukav-desktop sshd\[8257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242
Jun  9 15:01:05 lukav-desktop sshd\[8257\]: Failed password for invalid user admin from 47.106.244.242 port 43410 ssh2
Jun  9 15:02:00 lukav-desktop sshd\[8276\]: Invalid user odol from 47.106.244.242
Jun  9 15:02:00 lukav-desktop sshd\[8276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.106.244.242

2020-06-10 03:19:21

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.106.244.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10656
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;47.106.244.64.			IN	A

;; AUTHORITY SECTION:
.			212	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012000 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 00:36:09 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 64.244.106.47.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.244.106.47.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.175.208.73	attackspambots	Unauthorized connection attempt detected from IP address 185.175.208.73 to port 2220 [J]	2020-01-27 08:40:26
187.189.241.135	attackspam	Unauthorized connection attempt detected from IP address 187.189.241.135 to port 2220 [J]	2020-01-27 09:04:19
222.186.169.194	attackbotsspam	$f2bV_matches	2020-01-27 09:15:02
184.149.47.144	attack	Jan 27 00:28:27 server sshd\[29247\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ipagstaticip-d3c88646-69b1-92c2-bd1d-9ff8625ae0de.sdsl.bell.ca user=root Jan 27 00:28:29 server sshd\[29247\]: Failed password for root from 184.149.47.144 port 59082 ssh2 Jan 27 00:51:57 server sshd\[3309\]: Invalid user glynn from 184.149.47.144 Jan 27 00:51:57 server sshd\[3309\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ipagstaticip-d3c88646-69b1-92c2-bd1d-9ff8625ae0de.sdsl.bell.ca Jan 27 00:51:59 server sshd\[3309\]: Failed password for invalid user glynn from 184.149.47.144 port 10264 ssh2 ...	2020-01-27 08:53:10
185.112.188.146	attackbotsspam	Email rejected due to spam filtering	2020-01-27 08:55:23
185.234.219.57	attackspambots	Jan 27 00:16:47 srv01 postfix/smtpd\[22330\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 00:17:43 srv01 postfix/smtpd\[25770\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 00:28:01 srv01 postfix/smtpd\[1236\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 00:31:13 srv01 postfix/smtpd\[1698\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 27 00:33:02 srv01 postfix/smtpd\[1698\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-01-27 08:45:59
185.94.111.1	attackspambots	firewall-block, port(s): 17/udp, 19/udp, 389/udp	2020-01-27 09:16:15
82.208.140.247	attackbotsspam	Unauthorized connection attempt detected from IP address 82.208.140.247 to port 88 [J]	2020-01-27 09:09:34
64.239.203.26	attackbotsspam	Unauthorized connection attempt detected from IP address 64.239.203.26 to port 5902 [T]	2020-01-27 08:33:44
61.185.220.233	attackbots	Unauthorized connection attempt detected from IP address 61.185.220.233 to port 445 [T]	2020-01-27 08:34:23
106.13.55.5	attackspambots	Unauthorized connection attempt detected from IP address 106.13.55.5 to port 2220 [J]	2020-01-27 08:59:32
188.165.215.138	attackbotsspam	[2020-01-26 19:29:28] NOTICE[1148][C-00002edc] chan_sip.c: Call from '' (188.165.215.138:57390) to extension '00441902933947' rejected because extension not found in context 'public'. [2020-01-26 19:29:28] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-26T19:29:28.682-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441902933947",SessionID="0x7fd82c10ad58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.215.138/57390",ACLName="no_extension_match" [2020-01-26 19:30:30] NOTICE[1148][C-00002edd] chan_sip.c: Call from '' (188.165.215.138:53696) to extension '011441902933947' rejected because extension not found in context 'public'. [2020-01-26 19:30:30] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-26T19:30:30.558-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441902933947",SessionID="0x7fd82c10ad58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/ ...	2020-01-27 08:37:25
81.171.107.188	attackbotsspam	[2020-01-26 19:27:27] NOTICE[1148] chan_sip.c: Registration from '' failed for '81.171.107.188:52660' - Wrong password [2020-01-26 19:27:27] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-26T19:27:27.217-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3418",SessionID="0x7fd82c10ad58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.188/52660",Challenge="4670c1e9",ReceivedChallenge="4670c1e9",ReceivedHash="532aa0a884a6214e0564894400d5d3f2" [2020-01-26 19:27:55] NOTICE[1148] chan_sip.c: Registration from '' failed for '81.171.107.188:60681' - Wrong password [2020-01-26 19:27:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-26T19:27:55.224-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5923",SessionID="0x7fd82c538db8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107 ...	2020-01-27 08:53:24
175.155.51.231	attack	Unauthorized connection attempt detected from IP address 175.155.51.231 to port 6656 [T]	2020-01-27 08:27:55
152.0.36.239	attackspam	Email rejected due to spam filtering	2020-01-27 08:56:08

最近上报的IP列表

125.24.225.24	124.163.246.19	67.3.17.84	124.123.100.247
123.57.192.2	119.118.18.191	118.69.21.248	117.93.100.249
202.84.176.197	117.58.244.238	104.29.173.228	113.58.243.15
184.27.27.56	113.25.187.154	150.245.210.55	67.105.110.129
101.224.236.210	69.197.161.210	61.180.18.52	59.50.64.238