103.104.104.61

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
103.104.104.104	attackspambots	Jan 6 17:28:41 Server1 sshd[13126]: Did not receive identification string from 103.104.104.104 port 46364 Jan 6 17:31:37 Server1 sshd[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.104.104 user=r.r Jan 6 17:31:40 Server1 sshd[13429]: Failed password for r.r from 103.104.104.104 port 44350 ssh2 Jan 6 17:31:41 Server1 sshd[13429]: Received disconnect from 103.104.104.104 port 44350:11: Normal Shutdown, Thank you for playing [preauth] Jan 6 17:31:41 Server1 sshd[13429]: Disconnected from authenticating user r.r 103.104.104.104 port 44350 [preauth] Jan 6 17:32:53 Server1 sshd[13465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.104.104 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.104.104.104	2020-01-08 04:43:31

类型

评论内容

时间

103.104.104.104

attackspambots

Jan  6 17:28:41 Server1 sshd[13126]: Did not receive identification string from 103.104.104.104 port 46364
Jan  6 17:31:37 Server1 sshd[13429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.104.104  user=r.r
Jan  6 17:31:40 Server1 sshd[13429]: Failed password for r.r from 103.104.104.104 port 44350 ssh2
Jan  6 17:31:41 Server1 sshd[13429]: Received disconnect from 103.104.104.104 port 44350:11: Normal Shutdown, Thank you for playing [preauth]
Jan  6 17:31:41 Server1 sshd[13429]: Disconnected from authenticating user r.r 103.104.104.104 port 44350 [preauth]
Jan  6 17:32:53 Server1 sshd[13465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.104.104.104  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.104.104.104

2020-01-08 04:43:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.104.104.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21550
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.104.104.61.			IN	A

;; AUTHORITY SECTION:
.			567	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040101 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 01 20:48:12 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 61.104.104.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 61.104.104.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
186.64.111.114	attackspam	[f2b] sshd bruteforce, retries: 1	2020-09-11 07:36:11
111.71.36.30	attackbots	1599756914 - 09/10/2020 18:55:14 Host: 111.71.36.30/111.71.36.30 Port: 445 TCP Blocked	2020-09-11 07:58:14
80.135.26.81	attack	Firewall Dropped Connection	2020-09-11 07:49:31
51.83.76.25	attackbots	k+ssh-bruteforce	2020-09-11 07:23:00
37.187.21.81	attack	SSH Brute Force	2020-09-11 07:31:34
185.220.101.134	attackbots	2020-09-10 17:32:18.291418-0500 localhost sshd[40294]: Failed password for root from 185.220.101.134 port 9494 ssh2	2020-09-11 07:43:56
80.82.70.214	attack	Sep 11 02:11:31 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\<0UEYsP2ucq5QUkbW\> Sep 11 02:12:49 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\ Sep 11 02:15:44 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\ Sep 11 02:17:15 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\ Sep 11 02:20:30 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.1 ...	2020-09-11 07:23:52
176.148.130.19	attackbotsspam	Sep 10 22:01:06 ssh2 sshd[18387]: User root from rqp06-h01-176-148-130-19.dsl.sta.abo.bbox.fr not allowed because not listed in AllowUsers Sep 10 22:01:06 ssh2 sshd[18387]: Failed password for invalid user root from 176.148.130.19 port 47558 ssh2 Sep 10 22:01:07 ssh2 sshd[18387]: Connection closed by invalid user root 176.148.130.19 port 47558 [preauth] ...	2020-09-11 07:49:47
223.242.246.204	attackspam	spam (f2b h2)	2020-09-11 07:40:47
177.184.202.217	attack	Sep 10 18:55:08 pornomens sshd\[22128\]: Invalid user chad from 177.184.202.217 port 53990 Sep 10 18:55:08 pornomens sshd\[22128\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.184.202.217 Sep 10 18:55:10 pornomens sshd\[22128\]: Failed password for invalid user chad from 177.184.202.217 port 53990 ssh2 ...	2020-09-11 08:00:34
217.55.75.111	attackbots	DATE:2020-09-10 18:54:30, IP:217.55.75.111, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-09-11 07:30:17
115.206.61.239	attackbotsspam	SSH BruteForce Attack	2020-09-11 07:43:11
167.99.137.75	attackbotsspam	Sep 10 22:35:31 vps8769 sshd[7674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.137.75 Sep 10 22:35:33 vps8769 sshd[7674]: Failed password for invalid user unithkd from 167.99.137.75 port 35392 ssh2 ...	2020-09-11 07:51:00
203.212.228.130	attack	Port Scan detected! ...	2020-09-11 07:49:11
207.244.229.214	attackspam	recursive DNS query	2020-09-11 07:48:19

最近上报的IP列表

103.103.68.56	103.104.123.41	103.104.140.54	103.104.16.26
103.104.172.114	103.104.192.99	103.104.193.26	103.104.194.126
103.104.195.166	227.34.168.60	103.112.147.227	103.112.170.29
155.236.22.135	103.112.224.143	103.112.224.164	103.112.244.105
180.95.2.243	103.112.55.60	103.112.9.126	103.113.105.203