103.68.1.234 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT.Globalriau Data Solusi

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	445/tcp [2020-10-03]1pkt	2020-10-05 07:48:59
attack	445/tcp [2020-10-03]1pkt	2020-10-05 00:08:22
attack	445/tcp [2020-10-03]1pkt	2020-10-04 15:51:39

相同子网IP讨论:

IP	类型	评论内容	时间
103.68.176.74	attackbots	Unauthorized connection attempt detected from IP address 103.68.176.74 to port 1433 [T]	2020-08-16 19:06:47
103.68.156.186	attack	TCP (SYN) 103.68.156.186:20436 -> port 23, len 44	2020-07-22 02:39:22
103.68.164.140	attackbotsspam	Script injection, SQL injection attempts	2020-07-06 21:06:46
103.68.11.18	attack	Jun 24 06:30:45 web1 sshd[17853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:47 web1 sshd[17853]: Failed password for root from 103.68.11.18 port 5367 ssh2 Jun 24 06:30:48 web1 sshd[17866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:50 web1 sshd[17866]: Failed password for root from 103.68.11.18 port 13257 ssh2 Jun 24 06:30:51 web1 sshd[17880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:53 web1 sshd[17880]: Failed password for root from 103.68.11.18 port 28949 ssh2 Jun 24 06:30:54 web1 sshd[17892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.18 user=root Jun 24 06:30:56 web1 sshd[17892]: Failed password for root from 103.68.11.18 port 6870 ssh2 Jun 24 06:30:57 web1 sshd[17907]: pam_unix(ssh ...	2020-06-24 08:37:05
103.68.156.186	attackspam	DATE:2020-05-20 03:39:51, IP:103.68.156.186, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-05-20 10:26:32
103.68.156.186	attackspambots	Unauthorized connection attempt detected from IP address 103.68.156.186 to port 23 [T]	2020-05-09 03:37:48
103.68.18.118	attackbots	xmlrpc attack	2020-02-12 21:03:53
103.68.11.25	attack	Unauthorized connection attempt from IP address 103.68.11.25 on Port 445(SMB)	2020-01-31 21:32:58
103.68.11.52	attackspam	Dec 15 16:47:25 icinga sshd[6229]: Failed password for root from 103.68.11.52 port 5807 ssh2 Dec 15 17:11:01 icinga sshd[28795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.52 Dec 15 17:11:03 icinga sshd[28795]: Failed password for invalid user kanczler from 103.68.11.52 port 33638 ssh2 ...	2019-12-16 02:11:43
103.68.11.52	attackbotsspam	Dec 5 19:55:50 ns382633 sshd\[28571\]: Invalid user samba from 103.68.11.52 port 46482 Dec 5 19:55:50 ns382633 sshd\[28571\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.52 Dec 5 19:55:52 ns382633 sshd\[28571\]: Failed password for invalid user samba from 103.68.11.52 port 46482 ssh2 Dec 5 20:06:59 ns382633 sshd\[30576\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.52 user=root Dec 5 20:07:01 ns382633 sshd\[30576\]: Failed password for root from 103.68.11.52 port 48323 ssh2	2019-12-06 03:19:54
103.68.194.23	attack	[portscan] tcp/1433 [MsSQL] in spfbl.net:'listed' *(RWIN=1024)(10151156)	2019-10-16 03:13:30
103.68.11.139	attackbotsspam	Unauthorized connection attempt from IP address 103.68.11.139 on Port 445(SMB)	2019-10-12 17:33:16
103.68.118.242	attackspam	Viber is the world’s most famous social app. I am using it. Do you use ?https://www.bdtechsupport.com/2019/09/download-viber-apk.html	2019-09-30 17:34:38
103.68.11.51	attackbotsspam	Sep 4 11:02:05 plusreed sshd[31817]: Invalid user sergey from 103.68.11.51 ...	2019-09-05 03:55:58
103.68.11.51	attack	2019-08-31T13:41:05.599417abusebot-6.cloudsearch.cf sshd\[21070\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.68.11.51 user=root	2019-09-01 01:26:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.68.1.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5693
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.68.1.234.			IN	A

;; AUTHORITY SECTION:
.			456	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100301 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 04 15:51:35 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 234.1.68.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 234.1.68.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
104.215.197.210	attack	$f2bV_matches	2020-03-25 02:49:42
159.65.83.68	attackbots	Invalid user nc from 159.65.83.68 port 41546	2020-03-25 02:30:29
121.46.27.218	attackbotsspam	SSH bruteforce	2020-03-25 02:25:31
95.70.178.53	attack	Honeypot attack, port: 445, PTR: 53.178.70.95.dsl.static.turk.net.	2020-03-25 02:27:14
112.197.222.229	attackbotsspam	1585040241 - 03/24/2020 09:57:21 Host: 112.197.222.229/112.197.222.229 Port: 445 TCP Blocked	2020-03-25 02:25:45
51.91.159.46	attack	Mar 24 16:13:54 ourumov-web sshd\[20455\]: Invalid user qy from 51.91.159.46 port 37686 Mar 24 16:13:54 ourumov-web sshd\[20455\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.159.46 Mar 24 16:13:56 ourumov-web sshd\[20455\]: Failed password for invalid user qy from 51.91.159.46 port 37686 ssh2 ...	2020-03-25 02:29:49
190.146.184.215	attackspam	Mar 24 18:20:54 game-panel sshd[18201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.184.215 Mar 24 18:20:56 game-panel sshd[18201]: Failed password for invalid user dedrick from 190.146.184.215 port 54142 ssh2 Mar 24 18:25:11 game-panel sshd[18358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.184.215	2020-03-25 02:25:16
84.10.62.6	attackspambots	Mar 24 18:25:13 powerpi2 sshd[11147]: Invalid user lv from 84.10.62.6 port 42929 Mar 24 18:25:15 powerpi2 sshd[11147]: Failed password for invalid user lv from 84.10.62.6 port 42929 ssh2 Mar 24 18:32:01 powerpi2 sshd[11458]: Invalid user assassin from 84.10.62.6 port 50959 ...	2020-03-25 02:50:12
111.229.109.26	attack	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-03-25 02:33:10
74.124.198.250	attackbotsspam	Mar 24 19:32:14 debian-2gb-nbg1-2 kernel: \[7333817.296700\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=74.124.198.250 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=0 DF PROTO=TCP SPT=110 DPT=59572 WINDOW=14600 RES=0x00 ACK SYN URGP=0	2020-03-25 02:39:27
151.80.144.39	attackbotsspam	Invalid user kazutoyo from 151.80.144.39 port 60952	2020-03-25 02:14:12
196.27.127.61	attackbotsspam	(sshd) Failed SSH login from 196.27.127.61 (ZW/Zimbabwe/300080-host.customer.zol.co.zw): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 24 19:32:09 ubnt-55d23 sshd[26424]: Invalid user sundapeng from 196.27.127.61 port 56797 Mar 24 19:32:10 ubnt-55d23 sshd[26424]: Failed password for invalid user sundapeng from 196.27.127.61 port 56797 ssh2	2020-03-25 02:40:53
183.107.62.150	attack	Mar 24 19:07:28 localhost sshd\[28604\]: Invalid user teste from 183.107.62.150 port 42010 Mar 24 19:07:28 localhost sshd\[28604\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.107.62.150 Mar 24 19:07:29 localhost sshd\[28604\]: Failed password for invalid user teste from 183.107.62.150 port 42010 ssh2	2020-03-25 02:08:21
138.68.168.137	attackspambots	2020-03-24T18:07:52.907199shield sshd\[30137\]: Invalid user gy from 138.68.168.137 port 33476 2020-03-24T18:07:52.913682shield sshd\[30137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137 2020-03-24T18:07:55.128671shield sshd\[30137\]: Failed password for invalid user gy from 138.68.168.137 port 33476 ssh2 2020-03-24T18:11:50.402980shield sshd\[31146\]: Invalid user office from 138.68.168.137 port 42502 2020-03-24T18:11:50.410060shield sshd\[31146\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137	2020-03-25 02:18:32
117.73.2.103	attackspambots	$f2bV_matches	2020-03-25 02:30:49

最近上报的IP列表

116.114.178.104	10.140.134.21	123.193.148.208	209.18.140.164
151.151.221.59	213.208.246.23	138.246.13.150	41.208.101.25
117.36.3.13	68.183.21.239	189.41.198.20	85.179.108.95
125.160.80.24	118.27.95.212	103.82.14.144	196.92.143.188
62.234.116.25	190.202.192.182	189.198.138.114	208.173.2.179