必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Clifton

省份(region): New Jersey

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.131.113.106 attackbotsspam
Port scan followed by SSH.
2020-09-21 23:01:06
104.131.113.106 attack
Port scan followed by SSH.
2020-09-21 14:45:36
104.131.113.106 attack
(sshd) Failed SSH login from 104.131.113.106 (US/United States/-): 5 in the last 3600 secs
2020-05-28 01:36:49
104.131.113.106 attack
Feb  7 23:31:04 ns37 sshd[19363]: Failed password for root from 104.131.113.106 port 47148 ssh2
Feb  7 23:31:04 ns37 sshd[19363]: Failed password for root from 104.131.113.106 port 47148 ssh2
2020-02-08 07:48:35
104.131.113.106 attackspam
Jan 17 18:18:18 srv1-bit sshd[2091]: Invalid user administrator from 104.131.113.106 port 52626
Jan 17 18:23:37 srv1-bit sshd[2132]: Invalid user test from 104.131.113.106 port 34394
...
2020-01-18 02:02:47
104.131.113.106 attack
"SSH brute force auth login attempt."
2019-12-07 22:06:21
104.131.113.106 attackbotsspam
Dec  6 15:41:32 server sshd\[32561\]: Invalid user admin from 104.131.113.106
Dec  6 15:41:32 server sshd\[32561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106 
Dec  6 15:41:35 server sshd\[32561\]: Failed password for invalid user admin from 104.131.113.106 port 55536 ssh2
Dec  6 17:51:34 server sshd\[3560\]: Invalid user staff from 104.131.113.106
Dec  6 17:51:34 server sshd\[3560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106 
...
2019-12-06 22:54:22
104.131.113.106 attackspambots
Nov 26 19:39:24 TORMINT sshd\[9335\]: Invalid user gopher from 104.131.113.106
Nov 26 19:39:24 TORMINT sshd\[9335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Nov 26 19:39:26 TORMINT sshd\[9335\]: Failed password for invalid user gopher from 104.131.113.106 port 54718 ssh2
...
2019-11-27 08:56:06
104.131.113.106 attackbots
IP blocked
2019-11-25 03:52:53
104.131.113.106 attackbots
Invalid user ftpuser from 104.131.113.106 port 54420
2019-11-23 17:49:46
104.131.113.106 attack
Nov  9 10:10:11 woltan sshd[8928]: Failed password for invalid user www from 104.131.113.106 port 33412 ssh2
2019-11-10 01:43:21
104.131.113.106 attackspam
Oct 24 15:25:24 host sshd[56386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct 24 15:25:24 host sshd[56386]: Invalid user usuario from 104.131.113.106 port 34336
Oct 24 15:25:27 host sshd[56386]: Failed password for invalid user usuario from 104.131.113.106 port 34336 ssh2
...
2019-10-25 02:07:43
104.131.113.106 attack
Oct 24 05:54:53 ns381471 sshd[30020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct 24 05:54:55 ns381471 sshd[30020]: Failed password for invalid user www from 104.131.113.106 port 50076 ssh2
2019-10-24 12:58:33
104.131.113.106 attack
Oct 22 15:36:05 odroid64 sshd\[10894\]: Invalid user test from 104.131.113.106
Oct 22 15:36:05 odroid64 sshd\[10894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.113.106
Oct 22 15:36:08 odroid64 sshd\[10894\]: Failed password for invalid user test from 104.131.113.106 port 51220 ssh2
...
2019-10-24 05:47:22
104.131.113.106 attackbots
0""
2019-10-23 21:31:37
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.131.113.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25088
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.131.113.239.		IN	A

;; AUTHORITY SECTION:
.			171	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022031901 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 20 11:47:33 CST 2022
;; MSG SIZE  rcvd: 108
HOST信息:
239.113.131.104.in-addr.arpa domain name pointer 60954-49674.cloudwaysapps.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
239.113.131.104.in-addr.arpa	name = 60954-49674.cloudwaysapps.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
52.172.190.222 attackspam
DATE:2020-09-21 19:04:31, IP:52.172.190.222, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)
2020-09-22 04:42:59
51.83.68.213 attackspam
s2.hscode.pl - SSH Attack
2020-09-22 04:39:47
61.177.172.142 attackspam
Sep 21 22:20:06 ip106 sshd[31315]: Failed password for root from 61.177.172.142 port 12564 ssh2
Sep 21 22:20:12 ip106 sshd[31315]: Failed password for root from 61.177.172.142 port 12564 ssh2
...
2020-09-22 04:41:44
75.112.68.166 attackbots
Sep 21 22:25:44 fhem-rasp sshd[10934]: Invalid user student6 from 75.112.68.166 port 58878
...
2020-09-22 04:42:39
139.162.199.184 attack
 UDP 139.162.199.184:55024 -> port 161, len 68
2020-09-22 04:35:55
54.39.215.18 attackspambots
20 attempts against mh-ssh on creek
2020-09-22 04:16:38
167.71.207.126 attackspam
'Fail2Ban'
2020-09-22 04:44:06
159.65.72.148 attack
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.72.148
Invalid user ubuntu from 159.65.72.148 port 43004
Failed password for invalid user ubuntu from 159.65.72.148 port 43004 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.72.148  user=root
Failed password for root from 159.65.72.148 port 54710 ssh2
2020-09-22 04:44:26
193.228.91.11 attackspam
2020-09-21T23:08:41.491798lavrinenko.info sshd[29003]: Invalid user oracle from 193.228.91.11 port 56532
2020-09-21T23:08:43.823629lavrinenko.info sshd[29003]: Failed password for invalid user oracle from 193.228.91.11 port 56532 ssh2
2020-09-21T23:09:43.681968lavrinenko.info sshd[29031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.91.11  user=root
2020-09-21T23:09:45.520224lavrinenko.info sshd[29031]: Failed password for root from 193.228.91.11 port 46326 ssh2
2020-09-21T23:10:38.259732lavrinenko.info sshd[29070]: Invalid user postgres from 193.228.91.11 port 36168
...
2020-09-22 04:33:38
150.136.127.89 attackspam
Sep 21 22:02:30 jane sshd[22674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.127.89 
Sep 21 22:02:32 jane sshd[22674]: Failed password for invalid user runner from 150.136.127.89 port 27177 ssh2
...
2020-09-22 04:18:05
212.70.149.20 attackbots
Sep 21 22:15:49 mail postfix/smtpd\[11603\]: warning: unknown\[212.70.149.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep 21 22:16:14 mail postfix/smtpd\[11603\]: warning: unknown\[212.70.149.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep 21 22:16:40 mail postfix/smtpd\[11603\]: warning: unknown\[212.70.149.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep 21 22:47:04 mail postfix/smtpd\[12485\]: warning: unknown\[212.70.149.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-09-22 04:46:16
109.14.136.74 attack
Sep 21 17:01:42 ssh2 sshd[36046]: User root from 74.136.14.109.rev.sfr.net not allowed because not listed in AllowUsers
Sep 21 17:01:42 ssh2 sshd[36046]: Failed password for invalid user root from 109.14.136.74 port 42428 ssh2
Sep 21 17:01:42 ssh2 sshd[36046]: Connection closed by invalid user root 109.14.136.74 port 42428 [preauth]
...
2020-09-22 04:30:13
51.178.50.20 attackbots
Sep 21 22:41:03 vps639187 sshd\[1047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.50.20  user=root
Sep 21 22:41:05 vps639187 sshd\[1047\]: Failed password for root from 51.178.50.20 port 41696 ssh2
Sep 21 22:43:54 vps639187 sshd\[1166\]: Invalid user usuario2 from 51.178.50.20 port 39392
Sep 21 22:43:54 vps639187 sshd\[1166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.50.20
...
2020-09-22 04:49:43
176.99.125.108 attack
Sep 19 03:08:38 sip sshd[21425]: Failed password for root from 176.99.125.108 port 57466 ssh2
Sep 19 05:00:44 sip sshd[19342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.99.125.108
Sep 19 05:00:46 sip sshd[19342]: Failed password for invalid user user from 176.99.125.108 port 52462 ssh2
2020-09-22 04:27:44
106.54.166.168 attack
Sep 21 10:39:04 dignus sshd[15181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.166.168
Sep 21 10:39:06 dignus sshd[15181]: Failed password for invalid user gitlab from 106.54.166.168 port 52726 ssh2
Sep 21 10:42:16 dignus sshd[15748]: Invalid user postgres from 106.54.166.168 port 38424
Sep 21 10:42:16 dignus sshd[15748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.166.168
Sep 21 10:42:18 dignus sshd[15748]: Failed password for invalid user postgres from 106.54.166.168 port 38424 ssh2
...
2020-09-22 04:51:50

最近上报的IP列表

104.131.108.172 104.131.113.74 104.131.12.61 104.131.127.132
104.131.127.199 104.131.130.231 104.131.131.168 104.131.132.133
104.131.132.148 172.221.218.249 104.131.133.124 104.131.136.214
104.131.137.177 104.131.139.80 104.131.143.147 104.131.15.247
168.253.202.212 104.131.158.169 104.131.159.190 104.131.167.244