103.68.0.74 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.68.0.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6601
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.68.0.74.			IN	A

;; AUTHORITY SECTION:
.			245	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 18:26:53 CST 2022
;; MSG SIZE  rcvd: 104

HOST信息:

b'Host 74.0.68.103.in-addr.arpa not found: 2(SERVFAIL)
'

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 74.0.68.103.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
118.25.21.176	attackspambots	Repeated brute force against a port	2020-05-23 21:04:27
185.147.215.8	attackbots	[2020-05-23 08:47:19] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:61694' - Wrong password [2020-05-23 08:47:19] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-23T08:47:19.646-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="764",SessionID="0x7f5f10787a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/61694",Challenge="0dda7c3b",ReceivedChallenge="0dda7c3b",ReceivedHash="8011f7d3956585122de09030c2b67e47" [2020-05-23 08:48:00] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:56905' - Wrong password [2020-05-23 08:48:00] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-23T08:48:00.630-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3448",SessionID="0x7f5f10787a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/5 ...	2020-05-23 20:53:47
58.57.15.29	attack	May 23 14:45:52 home sshd[7049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.57.15.29 May 23 14:45:54 home sshd[7049]: Failed password for invalid user grid from 58.57.15.29 port 47273 ssh2 May 23 14:49:05 home sshd[7323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.57.15.29 ...	2020-05-23 21:15:35
134.122.98.252	attack	xmlrpc attack	2020-05-23 20:38:41
1.255.153.93	attackbotsspam	May 23 14:02:28 debian-2gb-nbg1-2 kernel: \[12494161.483328\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=1.255.153.93 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=9489 PROTO=TCP SPT=55220 DPT=5900 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-23 21:16:37
198.108.67.106	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2020-05-23 20:54:39
190.255.222.2	attackbots	...	2020-05-23 20:46:52
129.204.207.104	attack	"Unauthorized connection attempt on SSHD detected"	2020-05-23 20:43:47
104.40.138.155	attackspam	WordPress wp-login brute force :: 104.40.138.155 0.088 BYPASS [23/May/2020:12:03:26 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2288 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-23 20:38:12
114.119.166.115	attackbots	[Sat May 23 19:02:50.102575 2020] [:error] [pid 4513:tid 139717659076352] [client 114.119.166.115:5050] [client 114.119.166.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "XskQ6ktsGCoDCfoWTFFX1AAAAhw"] ...	2020-05-23 21:00:43
189.33.79.187	attackbots	May 23 01:59:16 web9 sshd\[16648\]: Invalid user rlm from 189.33.79.187 May 23 01:59:16 web9 sshd\[16648\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.33.79.187 May 23 01:59:18 web9 sshd\[16648\]: Failed password for invalid user rlm from 189.33.79.187 port 52330 ssh2 May 23 02:02:58 web9 sshd\[17070\]: Invalid user ojq from 189.33.79.187 May 23 02:02:58 web9 sshd\[17070\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.33.79.187	2020-05-23 20:50:37
89.248.167.141	attackspam	May 23 15:04:08 debian-2gb-nbg1-2 kernel: \[12497861.393211\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.167.141 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=10523 PROTO=TCP SPT=55057 DPT=2978 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-23 21:10:59
112.85.42.188	attackspam	05/23/2020-08:44:24.761684 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan	2020-05-23 20:44:46
218.92.0.165	attack	Failed password for root from 218.92.0.165 port 28576 ssh2 Failed password for root from 218.92.0.165 port 28576 ssh2 Failed password for root from 218.92.0.165 port 28576 ssh2 Failed password for root from 218.92.0.165 port 28576 ssh2	2020-05-23 21:18:46
45.40.201.5	attackbots	May 23 14:26:53 piServer sshd[22937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.201.5 May 23 14:26:55 piServer sshd[22937]: Failed password for invalid user csu from 45.40.201.5 port 51750 ssh2 May 23 14:33:53 piServer sshd[23590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.201.5 ...	2020-05-23 21:06:31

最近上报的IP列表

103.68.1.46	103.68.104.253	103.68.107.41	103.68.11.26
103.68.107.73	103.68.107.8	101.108.229.79	103.68.112.74
103.68.114.62	103.68.112.109	103.68.108.200	101.108.229.87
101.108.229.89	101.108.229.91	101.108.23.101	101.108.23.103
101.108.23.111	103.68.42.224	103.68.42.23	103.68.42.30