必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
点此参与IP信息讨论
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.131.128.20 proxy 
VPN fraud
 2023-03-27 12:51:53
104.131.131.140 attack 
Oct  9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498
Oct  9 00:27:54 electroncash sshd[3996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.131.140 
Oct  9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498
Oct  9 00:27:56 electroncash sshd[3996]: Failed password for invalid user system from 104.131.131.140 port 51498 ssh2
Oct  9 00:32:04 electroncash sshd[5533]: Invalid user ftpguest from 104.131.131.140 port 54930
...
 2020-10-09 07:16:11
104.131.131.140 attackspambots 
(sshd) Failed SSH login from 104.131.131.140 (US/United States/-): 5 in the last 3600 secs
 2020-10-08 23:44:00
104.131.131.140 attack 
Bruteforce detected by fail2ban
 2020-10-08 15:39:58
104.131.12.184 attack 
Oct  7 23:33:50 pornomens sshd\[27527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184  user=root
Oct  7 23:33:53 pornomens sshd\[27527\]: Failed password for root from 104.131.12.184 port 36354 ssh2
Oct  8 00:03:03 pornomens sshd\[28137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184  user=root
...
 2020-10-08 06:59:54
104.131.12.184 attackbotsspam 
(sshd) Failed SSH login from 104.131.12.184 (US/United States/-): 10 in the last 3600 secs
 2020-10-07 23:23:18
104.131.12.184 attackspambots 
Oct  7 09:07:10 ns381471 sshd[12901]: Failed password for root from 104.131.12.184 port 53172 ssh2
 2020-10-07 15:28:10
104.131.105.31 attack 
[2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password
[2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.263-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5326",Challenge="5c55fa14",ReceivedChallenge="5c55fa14",ReceivedHash="3454a3e3801b3f3bddaf6b8efb1363ed"
[2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password
[2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.344-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/53
...
 2020-10-07 03:02:54
104.131.105.31 attack 
[2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password
[2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.039-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Challenge="4a5492aa",ReceivedChallenge="4a5492aa",ReceivedHash="80e3cb7010cbde3d3c9cdf92d860a2bd"
[2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password
[2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.095-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Ch
...
 2020-10-06 19:02:27
104.131.110.155 attackbotsspam 
Detected by Fail2Ban
 2020-10-05 06:27:55
104.131.110.155 attackspam 
Oct  4 14:08:14 choloepus sshd[27653]: Did not receive identification string from 104.131.110.155 port 43642
Oct  4 14:08:24 choloepus sshd[27776]: Disconnected from invalid user root 104.131.110.155 port 59624 [preauth]
Oct  4 14:08:36 choloepus sshd[27850]: Invalid user oracle from 104.131.110.155 port 44478
...
 2020-10-04 22:29:30
104.131.110.155 attackbotsspam 
$f2bV_matches
 2020-10-04 14:15:27
104.131.110.155 attack 
web-1 [ssh] SSH Attack
 2020-10-04 04:44:08
104.131.110.155 attackbots 
Invalid user oracle from 104.131.110.155 port 45714
 2020-10-03 20:51:43
104.131.110.155 attackspambots 
Oct  3 06:39:36 doubuntu sshd[12773]: Did not receive identification string from 104.131.110.155 port 45172
...
 2020-10-03 06:58:24
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.1.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53490
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.1.113.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 08:19:11 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 113.1.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 113.1.131.104.in-addr.arpa: NXDOMAIN
相关IP信息:
104.131.1.205
104.131.1.195
104.131.1.158
104.131.1.234
104.131.1.215
104.131.1.233
104.131.1.202
104.131.1.232
104.131.1.226
104.131.1.134
104.131.1.76
104.131.1.87
104.131.1.235
104.131.1.41
104.131.1.26
104.131.1.228
104.131.1.177
104.131.1.31
104.131.1.224
104.131.1.30
104.131.1.110
104.131.1.68
104.131.1.214
104.131.1.98
104.131.1.153
104.131.1.39
104.131.1.21
104.131.1.48
104.131.1.73
104.131.1.143
104.131.1.165
104.131.1.116
104.131.1.55
104.131.1.159
104.131.1.225
104.131.1.119
104.131.1.192
104.131.1.148
104.131.1.210
104.131.1.178
104.131.1.27
104.131.1.236
104.131.1.179
104.131.1.12
104.131.1.168
104.131.1.156
104.131.1.180
104.131.1.167
104.131.1.11
104.131.1.197
104.131.1.144
104.131.1.199
104.131.1.84
104.131.1.184
104.131.1.10
104.131.1.208
104.131.1.175
104.131.1.25
104.131.1.145
104.131.1.15
104.131.1.90
104.131.1.212
104.131.1.149
104.131.1.100
104.131.1.129
104.131.1.160
104.131.1.126
104.131.1.14
104.131.1.218
104.131.1.28
104.131.1.86
104.131.1.18
104.131.1.99
104.131.1.230
104.131.1.65
104.131.1.216
104.131.1.7
104.131.1.164
104.131.1.183
104.131.1.122
104.131.1.240
104.131.1.37
104.131.1.246
104.131.1.114
104.131.1.206
104.131.1.74
104.131.1.94
104.131.1.6
104.131.1.203
104.131.1.247
104.131.1.24
104.131.1.8
104.131.1.219
104.131.1.124
104.131.1.223
104.131.1.72
104.131.1.89
104.131.1.217
104.131.1.82
104.131.1.161
104.131.1.141
104.131.1.139
104.131.1.193
104.131.1.106
104.131.1.13
104.131.1.104
104.131.1.222
104.131.1.248
104.131.1.58
104.131.1.54
104.131.1.1
104.131.1.75
104.131.1.127
104.131.1.213
104.131.1.3
104.131.1.201
104.131.1.102
104.131.1.190
104.131.1.188
104.131.1.227
104.131.1.166
104.131.1.49
104.131.1.50
104.131.1.196
104.131.1.66
104.131.1.137
104.131.1.47
104.131.1.105
104.131.1.88
104.131.1.204
104.131.1.138
104.131.1.151
104.131.1.191
104.131.1.130
104.131.1.52
104.131.1.64
104.131.1.254
104.131.1.157
104.131.1.123
104.131.1.78
104.131.1.16
104.131.1.237
104.131.1.96
104.131.1.107
104.131.1.22
104.131.1.60
104.131.1.121
104.131.1.152
104.131.1.51
104.131.1.238
104.131.1.173
104.131.1.169
104.131.1.239
104.131.1.147
104.131.1.194
104.131.1.45
104.131.1.128
104.131.1.245
104.131.1.5
104.131.1.32
104.131.1.241
104.131.1.172
104.131.1.33
104.131.1.120
104.131.1.9
104.131.1.112
104.131.1.189
104.131.1.242
104.131.1.91
104.131.1.146
104.131.1.125
104.131.1.211
104.131.1.132
104.131.1.117
104.131.1.19
104.131.1.44
104.131.1.42
104.131.1.43
104.131.1.71
104.131.1.23
104.131.1.200
104.131.1.59
104.131.1.53
104.131.1.67
104.131.1.115
104.131.1.187
104.131.1.79
104.131.1.133
104.131.1.83
104.131.1.136
104.131.1.198
104.131.1.174
104.131.1.182
104.131.1.185
104.131.1.93
104.131.1.170
104.131.1.142
104.131.1.252
104.131.1.207
104.131.1.231
104.131.1.243
104.131.1.70
104.131.1.244
104.131.1.154
104.131.1.4
104.131.1.81
104.131.1.34
104.131.1.171
104.131.1.63
104.131.1.162
104.131.1.35
104.131.1.118
104.131.1.253
104.131.1.92
104.131.1.17
104.131.1.140
104.131.1.57
104.131.1.209
104.131.1.61
104.131.1.101
104.131.1.2
104.131.1.77
104.131.1.46
104.131.1.229
104.131.1.56
104.131.1.176
104.131.1.40
104.131.1.29
104.131.1.249
104.131.1.62
104.131.1.181
104.131.1.221
104.131.1.38
104.131.1.113
104.131.1.108
104.131.1.150
104.131.1.109
104.131.1.250
104.131.1.69
104.131.1.95
104.131.1.80
104.131.1.135
104.131.1.97
104.131.1.131
104.131.1.155
104.131.1.36
104.131.1.111
104.131.1.163
104.131.1.251
104.131.1.103
104.131.1.186
104.131.1.20
104.131.1.85
104.131.1.220
最新评论:
IP 类型 评论内容 时间
51.68.44.13 attackbotsspam 
Jul 15 00:44:25 [host] sshd[17348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.44.13  user=root
Jul 15 00:44:27 [host] sshd[17348]: Failed password for root from 51.68.44.13 port 47394 ssh2
Jul 15 00:48:48 [host] sshd[17424]: Invalid user deploy from 51.68.44.13
 2019-07-15 10:31:02
84.94.106.38 attackbots 
firewall-block, port(s): 23/tcp
 2019-07-15 10:44:45
129.204.219.180 attack 
Jul 15 04:01:54 legacy sshd[18396]: Failed password for root from 129.204.219.180 port 48396 ssh2
Jul 15 04:07:41 legacy sshd[18546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.219.180
Jul 15 04:07:44 legacy sshd[18546]: Failed password for invalid user ip from 129.204.219.180 port 46626 ssh2
...
 2019-07-15 10:13:53
87.7.205.49 attack 
Jul 14 16:17:32 finn sshd[12271]: Invalid user sammy from 87.7.205.49 port 60271
Jul 14 16:17:32 finn sshd[12271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.7.205.49
Jul 14 16:17:34 finn sshd[12271]: Failed password for invalid user sammy from 87.7.205.49 port 60271 ssh2
Jul 14 16:17:34 finn sshd[12271]: Received disconnect from 87.7.205.49 port 60271:11: Bye Bye [preauth]
Jul 14 16:17:34 finn sshd[12271]: Disconnected from 87.7.205.49 port 60271 [preauth]
Jul 14 16:29:46 finn sshd[15095]: Invalid user andrea from 87.7.205.49 port 63943
Jul 14 16:29:46 finn sshd[15095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.7.205.49
Jul 14 16:29:48 finn sshd[15095]: Failed password for invalid user andrea from 87.7.205.49 port 63943 ssh2
Jul 14 16:29:48 finn sshd[15095]: Received disconnect from 87.7.205.49 port 63943:11: Bye Bye [preauth]
Jul 14 16:29:48 finn sshd[15095]: Disconnected ........
-------------------------------
 2019-07-15 10:14:15
103.18.166.234 attackbotsspam 
Jul 12 22:40:50 rigel postfix/smtpd[9504]: connect from unknown[103.18.166.234]
Jul 12 22:40:52 rigel postfix/smtpd[9504]: warning: unknown[103.18.166.234]: SASL CRAM-MD5 authentication failed: authentication failure
Jul 12 22:40:52 rigel postfix/smtpd[9504]: warning: unknown[103.18.166.234]: SASL PLAIN authentication failed: authentication failure
Jul 12 22:40:53 rigel postfix/smtpd[9504]: warning: unknown[103.18.166.234]: SASL LOGIN authentication failed: authentication failure
Jul 12 22:40:54 rigel postfix/smtpd[9504]: disconnect from unknown[103.18.166.234]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=103.18.166.234
 2019-07-15 10:39:11
212.40.231.103 attackbots 
14.07.2019 23:11:05 - SMTP Spam without Auth on hMailserver 
Detected by ELinOX-hMail-A2F
 2019-07-15 10:09:34
109.202.25.225 attack 
Jul 15 04:42:37 server sshd\[1759\]: Invalid user gu from 109.202.25.225 port 57220
Jul 15 04:42:37 server sshd\[1759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.202.25.225
Jul 15 04:42:39 server sshd\[1759\]: Failed password for invalid user gu from 109.202.25.225 port 57220 ssh2
Jul 15 04:47:23 server sshd\[14501\]: Invalid user rony from 109.202.25.225 port 35266
Jul 15 04:47:23 server sshd\[14501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.202.25.225
 2019-07-15 10:05:01
212.47.228.121 attackspam 
ft-1848-fussball.de 212.47.228.121 \[15/Jul/2019:03:39:08 +0200\] "POST /wp-login.php HTTP/1.1" 200 2312 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
ft-1848-fussball.de 212.47.228.121 \[15/Jul/2019:03:39:09 +0200\] "POST /wp-login.php HTTP/1.1" 200 2277 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
ft-1848-fussball.de 212.47.228.121 \[15/Jul/2019:03:39:09 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 514 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
 2019-07-15 10:42:43
87.98.147.104 attack 
Jul 15 04:34:49 dedicated sshd[17719]: Invalid user del from 87.98.147.104 port 46532
 2019-07-15 10:37:37
187.143.44.16 attack 
19/7/14@17:11:12: FAIL: IoT-Telnet address from=187.143.44.16
...
 2019-07-15 09:59:57
106.13.3.79 attackspam 
Jul 15 00:04:05 nextcloud sshd\[31159\]: Invalid user ld from 106.13.3.79
Jul 15 00:04:05 nextcloud sshd\[31159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.3.79
Jul 15 00:04:06 nextcloud sshd\[31159\]: Failed password for invalid user ld from 106.13.3.79 port 43800 ssh2
...
 2019-07-15 09:57:30
172.111.243.136 attack 
IP: 172.111.243.136
ASN: AS9009 M247 Ltd
Port: Message Submission 587
Date: 14/07/2019 10:11:39 PM UTC
 2019-07-15 10:27:36
185.176.27.34 attack 
14.07.2019 23:17:30 Connection to port 19980 blocked by firewall
 2019-07-15 10:39:34
186.118.138.10 attackspambots 
Jul 15 03:55:30 h2177944 sshd\[2395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.118.138.10  user=root
Jul 15 03:55:32 h2177944 sshd\[2395\]: Failed password for root from 186.118.138.10 port 41061 ssh2
Jul 15 04:02:45 h2177944 sshd\[3106\]: Invalid user wq from 186.118.138.10 port 39315
Jul 15 04:02:45 h2177944 sshd\[3106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.118.138.10
...
 2019-07-15 10:33:16
167.71.14.221 attackspambots 
2323/tcp 23/tcp...
[2019-07-12/14]20pkt,2pt.(tcp)
 2019-07-15 10:36:44

最近上报的IP列表

104.130.85.112 104.131.11.2 104.131.106.80 104.131.120.50
104.131.125.221 104.131.121.157 104.131.110.168 104.131.102.238
125.1.55.169 104.131.16.222 104.131.102.173 104.131.189.108
104.131.21.50 104.131.20.216 104.131.23.66 104.131.211.232
104.131.169.15 104.131.43.215 104.131.29.136 104.131.45.112