必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Clifton

省份(region): New Jersey

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbotsspam
Port scan followed by SSH.
2020-09-21 23:01:06
attack
Port scan followed by SSH.
2020-09-21 14:45:36
attack
(sshd) Failed SSH login from 104.131.113.106 (US/United States/-): 5 in the last 3600 secs
2020-05-28 01:36:49
attack
Feb  7 23:31:04 ns37 sshd[19363]: Failed password for root from 104.131.113.106 port 47148 ssh2
Feb  7 23:31:04 ns37 sshd[19363]: Failed password for root from 104.131.113.106 port 47148 ssh2
2020-02-08 07:48:35
attackspam
Jan 17 18:18:18 srv1-bit sshd[2091]: Invalid user administrator from 104.131.113.106 port 52626
Jan 17 18:23:37 srv1-bit sshd[2132]: Invalid user test from 104.131.113.106 port 34394
...
2020-01-18 02:02:47
attack
"SSH brute force auth login attempt."
2019-12-07 22:06:21
attackbotsspam
Dec  6 15:41:32 server sshd\[32561\]: Invalid user admin from 104.131.113.106
Dec  6 15:41:32 server sshd\[32561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106 
Dec  6 15:41:35 server sshd\[32561\]: Failed password for invalid user admin from 104.131.113.106 port 55536 ssh2
Dec  6 17:51:34 server sshd\[3560\]: Invalid user staff from 104.131.113.106
Dec  6 17:51:34 server sshd\[3560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106 
...
2019-12-06 22:54:22
attackspambots
Nov 26 19:39:24 TORMINT sshd\[9335\]: Invalid user gopher from 104.131.113.106
Nov 26 19:39:24 TORMINT sshd\[9335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Nov 26 19:39:26 TORMINT sshd\[9335\]: Failed password for invalid user gopher from 104.131.113.106 port 54718 ssh2
...
2019-11-27 08:56:06
attackbots
IP blocked
2019-11-25 03:52:53
attackbots
Invalid user ftpuser from 104.131.113.106 port 54420
2019-11-23 17:49:46
attack
Nov  9 10:10:11 woltan sshd[8928]: Failed password for invalid user www from 104.131.113.106 port 33412 ssh2
2019-11-10 01:43:21
attackspam
Oct 24 15:25:24 host sshd[56386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct 24 15:25:24 host sshd[56386]: Invalid user usuario from 104.131.113.106 port 34336
Oct 24 15:25:27 host sshd[56386]: Failed password for invalid user usuario from 104.131.113.106 port 34336 ssh2
...
2019-10-25 02:07:43
attack
Oct 24 05:54:53 ns381471 sshd[30020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct 24 05:54:55 ns381471 sshd[30020]: Failed password for invalid user www from 104.131.113.106 port 50076 ssh2
2019-10-24 12:58:33
attack
Oct 22 15:36:05 odroid64 sshd\[10894\]: Invalid user test from 104.131.113.106
Oct 22 15:36:05 odroid64 sshd\[10894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct 22 15:36:08 odroid64 sshd\[10894\]: Failed password for invalid user test from 104.131.113.106 port 51220 ssh2
...
2019-10-24 05:47:22
attackbots
0""
2019-10-23 21:31:37
attackspambots
SSH Brute Force
2019-10-22 07:23:45
attack
Oct 20 11:15:30 localhost sshd\[17036\]: Invalid user admin from 104.131.113.106 port 45134
Oct 20 11:15:30 localhost sshd\[17036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct 20 11:15:32 localhost sshd\[17036\]: Failed password for invalid user admin from 104.131.113.106 port 45134 ssh2
...
2019-10-20 20:01:47
attack
Oct 11 13:17:05 XXX sshd[46868]: Invalid user cpanel from 104.131.113.106 port 55890
2019-10-11 22:13:08
attackspambots
Invalid user jboss from 104.131.113.106 port 56968
2019-10-10 20:38:12
attackspambots
Oct  9 23:55:00 vmanager6029 sshd\[31290\]: Invalid user oracle from 104.131.113.106 port 42720
Oct  9 23:55:00 vmanager6029 sshd\[31290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct  9 23:55:02 vmanager6029 sshd\[31290\]: Failed password for invalid user oracle from 104.131.113.106 port 42720 ssh2
2019-10-10 07:14:36
attackspambots
Oct  8 17:08:46 vps01 sshd[13582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct  8 17:08:48 vps01 sshd[13582]: Failed password for invalid user cacti from 104.131.113.106 port 43354 ssh2
2019-10-08 23:33:11
attack
Aug 29 02:53:22 itv-usvr-01 sshd[24979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106  user=mysql
Aug 29 02:53:24 itv-usvr-01 sshd[24979]: Failed password for mysql from 104.131.113.106 port 36920 ssh2
Aug 29 02:57:40 itv-usvr-01 sshd[25122]: Invalid user rpcuser from 104.131.113.106
Aug 29 02:57:40 itv-usvr-01 sshd[25122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Aug 29 02:57:40 itv-usvr-01 sshd[25122]: Invalid user rpcuser from 104.131.113.106
Aug 29 02:57:42 itv-usvr-01 sshd[25122]: Failed password for invalid user rpcuser from 104.131.113.106 port 52220 ssh2
2019-09-01 23:15:36
attack
Aug 30 23:11:51 TORMINT sshd\[22157\]: Invalid user mysql from 104.131.113.106
Aug 30 23:11:51 TORMINT sshd\[22157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Aug 30 23:11:53 TORMINT sshd\[22157\]: Failed password for invalid user mysql from 104.131.113.106 port 36722 ssh2
...
2019-08-31 11:13:13
attackbotsspam
Invalid user rpcuser from 104.131.113.106 port 36972
2019-08-31 09:16:26
attackbots
Aug 30 09:41:13 lnxweb62 sshd[16091]: Failed password for mysql from 104.131.113.106 port 48380 ssh2
Aug 30 09:45:50 lnxweb62 sshd[18874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Aug 30 09:45:52 lnxweb62 sshd[18874]: Failed password for invalid user rpcuser from 104.131.113.106 port 35454 ssh2
2019-08-30 16:01:02
attackbotsspam
Aug 28 16:59:03 wbs sshd\[21875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106  user=mysql
Aug 28 16:59:05 wbs sshd\[21875\]: Failed password for mysql from 104.131.113.106 port 55476 ssh2
Aug 28 17:03:57 wbs sshd\[22263\]: Invalid user rpcuser from 104.131.113.106
Aug 28 17:03:57 wbs sshd\[22263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Aug 28 17:03:59 wbs sshd\[22263\]: Failed password for invalid user rpcuser from 104.131.113.106 port 42544 ssh2
2019-08-29 12:13:43
attackbotsspam
Invalid user test from 104.131.113.106 port 58770
2019-08-21 07:52:51
attackspam
Aug 19 22:34:18 mail sshd[14308]: Invalid user zabbix from 104.131.113.106
Aug 19 22:34:18 mail sshd[14308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Aug 19 22:34:18 mail sshd[14308]: Invalid user zabbix from 104.131.113.106
Aug 19 22:34:20 mail sshd[14308]: Failed password for invalid user zabbix from 104.131.113.106 port 54598 ssh2
Aug 20 11:13:45 mail sshd[6707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106  user=root
Aug 20 11:13:47 mail sshd[6707]: Failed password for root from 104.131.113.106 port 49428 ssh2
...
2019-08-20 17:45:43
attackbotsspam
IP attempted unauthorised action
2019-08-18 03:27:31
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.113.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46491
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.131.113.106.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019032900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Mar 29 19:54:23 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:
Host 106.113.131.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 106.113.131.104.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
79.143.44.122 attackbotsspam
Invalid user tv from 79.143.44.122 port 50402
2020-04-17 15:18:06
183.89.212.51 attackbotsspam
Dovecot Invalid User Login Attempt.
2020-04-17 14:55:22
61.135.169.12 attackspambots
" "
2020-04-17 15:12:06
223.150.0.87 attackbots
FTP Brute Force
2020-04-17 15:04:31
93.186.170.7 attack
sshd jail - ssh hack attempt
2020-04-17 14:48:17
77.42.127.53 attackspambots
Automatic report - Port Scan Attack
2020-04-17 15:00:57
188.166.247.82 attack
distributed sshd attacks
2020-04-17 14:52:56
119.123.64.121 attackspambots
Apr 17 07:41:23 www sshd\[31520\]: Invalid user mt from 119.123.64.121Apr 17 07:41:25 www sshd\[31520\]: Failed password for invalid user mt from 119.123.64.121 port 26143 ssh2Apr 17 07:45:07 www sshd\[31625\]: Invalid user nd from 119.123.64.121
...
2020-04-17 14:51:50
211.36.213.217 attackspambots
(ftpd) Failed FTP login from 211.36.213.217 (KR/South Korea/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 17 09:12:55 ir1 pure-ftpd: (?@211.36.213.217) [WARNING] Authentication failed for user [anonymous]
2020-04-17 14:41:01
150.109.61.134 attackspambots
$f2bV_matches
2020-04-17 15:10:36
202.137.142.97 attackbotsspam
2020-04-1705:54:271jPI5C-0002nE-Cq\<=info@whatsup2013.chH=\(localhost\)[171.35.160.186]:57164P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3112id=25afb0e3e8c3161a3d78ce9d69aea4a89b927336@whatsup2013.chT="RecentlikefromNicolasa"forswills8100@hotmail.comcalvintyler467@yahoo.com2020-04-1705:55:471jPI6T-0002rc-Mn\<=info@whatsup2013.chH=\(localhost\)[121.28.76.14]:33735P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3110id=a76d7f2c270cd9d5f2b70152a6616b67545c47cd@whatsup2013.chT="fromSantostowaddell76641"forwaddell76641@gmail.comboswellrobert852@gmail.com2020-04-1705:56:031jPI6j-0002tC-Jz\<=info@whatsup2013.chH=\(localhost\)[112.91.62.226]:38842P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3090id=051674272c07d2def9bc0a59ad6a606c5f0220a8@whatsup2013.chT="RecentlikefromSteve"forveyom44548@hideemail.netharryputars7@gmail.com2020-04-1705:54:051jPI4q-0002lY-ED\<=info@whatsup2013.chH
2020-04-17 15:09:32
101.231.146.36 attack
Apr 17 07:29:24 dev0-dcde-rnet sshd[32474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.36
Apr 17 07:29:26 dev0-dcde-rnet sshd[32474]: Failed password for invalid user test2 from 101.231.146.36 port 57224 ssh2
Apr 17 07:40:11 dev0-dcde-rnet sshd[32622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.36
2020-04-17 14:56:24
178.165.72.177 attackbots
sshd jail - ssh hack attempt
2020-04-17 15:06:14
85.214.164.17 attackbots
fail2ban
2020-04-17 15:21:29
106.12.45.30 attack
Apr 17 10:51:37 itv-usvr-01 sshd[25662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.45.30  user=root
Apr 17 10:51:39 itv-usvr-01 sshd[25662]: Failed password for root from 106.12.45.30 port 47536 ssh2
Apr 17 10:56:39 itv-usvr-01 sshd[25863]: Invalid user admin from 106.12.45.30
Apr 17 10:56:39 itv-usvr-01 sshd[25863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.45.30
Apr 17 10:56:39 itv-usvr-01 sshd[25863]: Invalid user admin from 106.12.45.30
Apr 17 10:56:41 itv-usvr-01 sshd[25863]: Failed password for invalid user admin from 106.12.45.30 port 51570 ssh2
2020-04-17 14:44:39

最近上报的IP列表

104.236.81.204 103.54.219.108 76.30.213.208 68.96.196.38
67.68.23.111 54.38.159.215 52.224.13.204 51.38.239.50
46.105.117.4 46.101.88.10 46.29.161.31 45.55.245.201
37.187.120.106 37.59.58.15 36.80.48.9 206.189.202.198
195.154.237.29 193.192.104.174 192.144.158.151 192.144.155.63