1.128.104.161 - IPInfo

基本信息:

城市(city): unknown

省份(region): Queensland

国家(country): Australia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.128.104.112	attack	Aug 6 19:35:26 xonu07 sshd[17502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.128.104.112 user=r.r Aug 6 19:35:27 xonu07 sshd[17502]: Failed password for invalid user r.r from 1.128.104.112 port 34459 ssh2 Aug 6 19:46:13 xonu07 sshd[17782]: User r.r from 1.128.104.112 not allowed because not listed in AllowUsers ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=1.128.104.112	2020-08-07 02:16:23

类型

评论内容

时间

1.128.104.112

attack

Aug  6 19:35:26 xonu07 sshd[17502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.128.104.112  user=r.r
Aug  6 19:35:27 xonu07 sshd[17502]: Failed password for invalid user r.r from 1.128.104.112 port 34459 ssh2
Aug  6 19:46:13 xonu07 sshd[17782]: User r.r from 1.128.104.112 not allowed because not listed in AllowUsers


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=1.128.104.112

2020-08-07 02:16:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.128.104.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22205
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.128.104.161.			IN	A

;; AUTHORITY SECTION:
.			456	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022102800 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 29 01:19:49 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 161.104.128.1.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.104.128.1.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
80.91.176.139	attackspam	$f2bV_matches	2019-11-09 16:32:23
97.74.24.223	attack	Automatic report - XMLRPC Attack	2019-11-09 17:01:22
133.130.123.238	attackbotsspam	Nov 8 22:23:13 mockhub sshd[7216]: Failed password for root from 133.130.123.238 port 47882 ssh2 Nov 8 22:27:24 mockhub sshd[7331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.123.238 ...	2019-11-09 16:24:10
167.114.231.174	attackspam	Nov 9 08:52:57 SilenceServices sshd[22336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.231.174 Nov 9 08:52:59 SilenceServices sshd[22336]: Failed password for invalid user thebeef from 167.114.231.174 port 50644 ssh2 Nov 9 09:00:51 SilenceServices sshd[24534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.231.174	2019-11-09 16:44:21
107.180.123.15	attackbots	Automatic report - XMLRPC Attack	2019-11-09 16:45:54
81.171.75.48	attackspambots	\[2019-11-09 02:57:19\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:56135' - Wrong password \[2019-11-09 02:57:19\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-09T02:57:19.383-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2864",SessionID="0x7fdf2c473798",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48/56135",Challenge="118dfc17",ReceivedChallenge="118dfc17",ReceivedHash="c1740ad31ff8b2c412fd216516cc72f7" \[2019-11-09 02:58:00\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:53104' - Wrong password \[2019-11-09 02:58:00\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-09T02:58:00.860-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3469",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48	2019-11-09 16:19:11
60.190.227.167	attack	Nov 9 08:16:54 venus sshd\[1137\]: Invalid user daxia from 60.190.227.167 port 53629 Nov 9 08:16:54 venus sshd\[1137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.190.227.167 Nov 9 08:16:56 venus sshd\[1137\]: Failed password for invalid user daxia from 60.190.227.167 port 53629 ssh2 ...	2019-11-09 16:20:01
81.131.10.211	attackspam	RDP Bruteforce	2019-11-09 16:47:03
81.22.45.48	attackspam	11/09/2019-03:13:51.136389 81.22.45.48 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-09 16:35:25
113.171.23.119	attack	Nov 8 10:54:37 server sshd\[28224\]: Invalid user hadoop from 113.171.23.119 Nov 8 10:54:37 server sshd\[28224\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.171.23.119 Nov 8 10:54:38 server sshd\[28224\]: Failed password for invalid user hadoop from 113.171.23.119 port 60414 ssh2 Nov 9 10:17:51 server sshd\[11107\]: Invalid user hadoop from 113.171.23.119 Nov 9 10:17:51 server sshd\[11107\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.171.23.119 ...	2019-11-09 16:42:36
118.89.237.20	attackspambots	Nov 9 09:07:14 server sshd\[24631\]: Invalid user st from 118.89.237.20 Nov 9 09:07:14 server sshd\[24631\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.237.20 Nov 9 09:07:16 server sshd\[24631\]: Failed password for invalid user st from 118.89.237.20 port 43288 ssh2 Nov 9 09:27:16 server sshd\[29674\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.237.20 user=root Nov 9 09:27:18 server sshd\[29674\]: Failed password for root from 118.89.237.20 port 33980 ssh2 ...	2019-11-09 16:28:26
116.6.84.60	attack	Nov 9 07:48:57 *** sshd[18573]: User root from 116.6.84.60 not allowed because not listed in AllowUsers	2019-11-09 16:40:54
103.67.236.191	attackbots	Automatic report - XMLRPC Attack	2019-11-09 17:02:54
222.186.175.154	attack	Nov 9 09:36:38 dcd-gentoo sshd[19666]: User root from 222.186.175.154 not allowed because none of user's groups are listed in AllowGroups Nov 9 09:36:43 dcd-gentoo sshd[19666]: error: PAM: Authentication failure for illegal user root from 222.186.175.154 Nov 9 09:36:38 dcd-gentoo sshd[19666]: User root from 222.186.175.154 not allowed because none of user's groups are listed in AllowGroups Nov 9 09:36:43 dcd-gentoo sshd[19666]: error: PAM: Authentication failure for illegal user root from 222.186.175.154 Nov 9 09:36:38 dcd-gentoo sshd[19666]: User root from 222.186.175.154 not allowed because none of user's groups are listed in AllowGroups Nov 9 09:36:43 dcd-gentoo sshd[19666]: error: PAM: Authentication failure for illegal user root from 222.186.175.154 Nov 9 09:36:43 dcd-gentoo sshd[19666]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.154 port 23392 ssh2 ...	2019-11-09 16:37:57
118.24.242.239	attack	Nov 9 09:16:36 vps647732 sshd[17246]: Failed password for root from 118.24.242.239 port 38980 ssh2 ...	2019-11-09 16:44:42

最近上报的IP列表

222.159.32.53	79.121.109.59	170.130.10.147	213.21.219.74
247.61.22.110	218.12.215.185	40.160.148.230	37.30.179.234
125.85.42.145	213.149.83.144	222.48.201.189	11.7.193.94
225.121.1.196	91.215.235.148	151.111.55.211	21.117.226.224
95.99.64.234	179.143.113.137	207.97.46.191	106.142.132.26