必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.131.128.20 proxy
VPN fraud
2023-03-27 12:51:53
104.131.131.140 attack
Oct  9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498
Oct  9 00:27:54 electroncash sshd[3996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.131.140 
Oct  9 00:27:54 electroncash sshd[3996]: Invalid user system from 104.131.131.140 port 51498
Oct  9 00:27:56 electroncash sshd[3996]: Failed password for invalid user system from 104.131.131.140 port 51498 ssh2
Oct  9 00:32:04 electroncash sshd[5533]: Invalid user ftpguest from 104.131.131.140 port 54930
...
2020-10-09 07:16:11
104.131.131.140 attackspambots
(sshd) Failed SSH login from 104.131.131.140 (US/United States/-): 5 in the last 3600 secs
2020-10-08 23:44:00
104.131.131.140 attack
Bruteforce detected by fail2ban
2020-10-08 15:39:58
104.131.12.184 attack
Oct  7 23:33:50 pornomens sshd\[27527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184  user=root
Oct  7 23:33:53 pornomens sshd\[27527\]: Failed password for root from 104.131.12.184 port 36354 ssh2
Oct  8 00:03:03 pornomens sshd\[28137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.12.184  user=root
...
2020-10-08 06:59:54
104.131.12.184 attackbotsspam
(sshd) Failed SSH login from 104.131.12.184 (US/United States/-): 10 in the last 3600 secs
2020-10-07 23:23:18
104.131.12.184 attackspambots
Oct  7 09:07:10 ns381471 sshd[12901]: Failed password for root from 104.131.12.184 port 53172 ssh2
2020-10-07 15:28:10
104.131.105.31 attack
[2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password
[2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.263-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5326",Challenge="5c55fa14",ReceivedChallenge="5c55fa14",ReceivedHash="3454a3e3801b3f3bddaf6b8efb1363ed"
[2020-10-06 09:15:20] NOTICE[1182] chan_sip.c: Registration from '"106" ' failed for '104.131.105.31:5326' - Wrong password
[2020-10-06 09:15:20] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T09:15:20.344-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="106",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/53
...
2020-10-07 03:02:54
104.131.105.31 attack
[2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password
[2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.039-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f8418138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Challenge="4a5492aa",ReceivedChallenge="4a5492aa",ReceivedHash="80e3cb7010cbde3d3c9cdf92d860a2bd"
[2020-10-06 06:50:59] NOTICE[1182] chan_sip.c: Registration from '"94" ' failed for '104.131.105.31:5319' - Wrong password
[2020-10-06 06:50:59] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-06T06:50:59.095-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.131.105.31/5319",Ch
...
2020-10-06 19:02:27
104.131.110.155 attackbotsspam
Detected by Fail2Ban
2020-10-05 06:27:55
104.131.110.155 attackspam
Oct  4 14:08:14 choloepus sshd[27653]: Did not receive identification string from 104.131.110.155 port 43642
Oct  4 14:08:24 choloepus sshd[27776]: Disconnected from invalid user root 104.131.110.155 port 59624 [preauth]
Oct  4 14:08:36 choloepus sshd[27850]: Invalid user oracle from 104.131.110.155 port 44478
...
2020-10-04 22:29:30
104.131.110.155 attackbotsspam
$f2bV_matches
2020-10-04 14:15:27
104.131.110.155 attack
web-1 [ssh] SSH Attack
2020-10-04 04:44:08
104.131.110.155 attackbots
Invalid user oracle from 104.131.110.155 port 45714
2020-10-03 20:51:43
104.131.110.155 attackspambots
Oct  3 06:39:36 doubuntu sshd[12773]: Did not receive identification string from 104.131.110.155 port 45172
...
2020-10-03 06:58:24
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.1.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53490
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.1.113.			IN	A

;; AUTHORITY SECTION:
.			590	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 08:19:11 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 113.1.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 113.1.131.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
110.36.185.32 attackspambots
Unauthorized connection attempt from IP address 110.36.185.32 on Port 445(SMB)
2020-04-10 01:11:09
106.54.50.236 attackspambots
Apr  9 19:00:52 mail sshd[2972]: Invalid user appserver from 106.54.50.236
Apr  9 19:00:52 mail sshd[2972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.50.236
Apr  9 19:00:52 mail sshd[2972]: Invalid user appserver from 106.54.50.236
Apr  9 19:00:54 mail sshd[2972]: Failed password for invalid user appserver from 106.54.50.236 port 44636 ssh2
...
2020-04-10 01:20:38
152.136.165.226 attack
Apr  9 14:56:35 MainVPS sshd[25052]: Invalid user postgres from 152.136.165.226 port 56128
Apr  9 14:56:35 MainVPS sshd[25052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.165.226
Apr  9 14:56:35 MainVPS sshd[25052]: Invalid user postgres from 152.136.165.226 port 56128
Apr  9 14:56:38 MainVPS sshd[25052]: Failed password for invalid user postgres from 152.136.165.226 port 56128 ssh2
Apr  9 15:01:19 MainVPS sshd[1863]: Invalid user nagios from 152.136.165.226 port 54106
...
2020-04-10 00:47:00
1.53.52.68 attackspambots
Unauthorized connection attempt from IP address 1.53.52.68 on Port 445(SMB)
2020-04-10 01:23:23
189.125.93.48 attackbotsspam
Apr  9 09:01:25 mail sshd\[46382\]: Invalid user black from 189.125.93.48
Apr  9 09:01:25 mail sshd\[46382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.125.93.48
...
2020-04-10 00:37:56
43.245.185.71 attackbots
Apr  9 20:38:10 webhost01 sshd[26155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.245.185.71
Apr  9 20:38:11 webhost01 sshd[26155]: Failed password for invalid user owen from 43.245.185.71 port 36948 ssh2
...
2020-04-10 01:05:40
5.59.133.150 attackspam
Unauthorized connection attempt from IP address 5.59.133.150 on Port 445(SMB)
2020-04-10 01:19:13
122.51.242.150 attackspam
Apr  9 15:42:44 OPSO sshd\[19576\]: Invalid user hadoop from 122.51.242.150 port 47634
Apr  9 15:42:44 OPSO sshd\[19576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.242.150
Apr  9 15:42:47 OPSO sshd\[19576\]: Failed password for invalid user hadoop from 122.51.242.150 port 47634 ssh2
Apr  9 15:45:45 OPSO sshd\[20154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.242.150  user=admin
Apr  9 15:45:47 OPSO sshd\[20154\]: Failed password for admin from 122.51.242.150 port 50598 ssh2
2020-04-10 01:26:20
222.186.173.142 attackspam
$f2bV_matches
2020-04-10 01:01:24
101.91.119.132 attackbots
Apr  9 15:01:00 host sshd[18507]: Invalid user deploy from 101.91.119.132 port 47116
...
2020-04-10 01:09:32
106.13.5.134 attackspam
Feb 13 16:12:08 woltan sshd[23122]: Failed password for invalid user ventas from 106.13.5.134 port 60140 ssh2
2020-04-10 00:59:44
2.227.254.144 attack
Apr  9 12:52:03 ip-172-31-62-245 sshd\[18900\]: Invalid user postgres from 2.227.254.144\
Apr  9 12:52:05 ip-172-31-62-245 sshd\[18900\]: Failed password for invalid user postgres from 2.227.254.144 port 62377 ssh2\
Apr  9 12:56:41 ip-172-31-62-245 sshd\[18928\]: Invalid user postgres from 2.227.254.144\
Apr  9 12:56:43 ip-172-31-62-245 sshd\[18928\]: Failed password for invalid user postgres from 2.227.254.144 port 62868 ssh2\
Apr  9 13:01:20 ip-172-31-62-245 sshd\[18978\]: Invalid user nagios from 2.227.254.144\
2020-04-10 00:46:02
193.242.195.222 attackspam
Unauthorized connection attempt from IP address 193.242.195.222 on Port 445(SMB)
2020-04-10 00:55:45
128.199.161.98 attackbots
128.199.161.98 - - [09/Apr/2020:17:05:02 +0200] "POST /wp-login.php HTTP/1.0" 200 2195 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
128.199.161.98 - - [09/Apr/2020:17:05:14 +0200] "POST /wp-login.php HTTP/1.0" 200 2184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-04-10 00:44:19
115.159.25.60 attack
SSH Brute-Force Attack
2020-04-10 00:53:41

最近上报的IP列表

104.130.85.112 104.131.11.2 104.131.106.80 104.131.120.50
104.131.125.221 104.131.121.157 104.131.110.168 104.131.102.238
125.1.55.169 104.131.16.222 104.131.102.173 104.131.189.108
104.131.21.50 104.131.20.216 104.131.23.66 104.131.211.232
104.131.169.15 104.131.43.215 104.131.29.136 104.131.45.112