104.168.204.108

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.168.204.119	attackbotsspam	Nov 1 16:03:37 mxgate1 postfix/postscreen[28290]: CONNECT from [104.168.204.119]:54945 to [176.31.12.44]:25 Nov 1 16:03:37 mxgate1 postfix/dnsblog[28858]: addr 104.168.204.119 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 1 16:03:42 mxgate1 postfix/postscreen[28290]: PASS NEW [104.168.204.119]:54945 Nov 1 16:03:44 mxgate1 postfix/smtpd[28698]: connect from slot0.hillrorm.com[104.168.204.119] Nov x@x Nov 1 16:03:48 mxgate1 postfix/smtpd[28698]: disconnect from slot0.hillrorm.com[104.168.204.119] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6 Nov 1 16:33:48 mxgate1 postfix/postscreen[29377]: CONNECT from [104.168.204.119]:53464 to [176.31.12.44]:25 Nov 1 16:33:48 mxgate1 postfix/dnsblog[29592]: addr 104.168.204.119 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 1 16:33:49 mxgate1 postfix/postscreen[29377]: PASS OLD [104.168.204.119]:53464 Nov 1 16:33:49 mxgate1 postfix/smtpd[29558]: connect from slot0.hillrorm.com[104.168.204.119........ -------------------------------	2019-11-02 06:52:41
104.168.204.100	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-07-10 17:03:34

类型

评论内容

时间

104.168.204.119

attackbotsspam

Nov  1 16:03:37 mxgate1 postfix/postscreen[28290]: CONNECT from [104.168.204.119]:54945 to [176.31.12.44]:25
Nov  1 16:03:37 mxgate1 postfix/dnsblog[28858]: addr 104.168.204.119 listed by domain b.barracudacentral.org as 127.0.0.2
Nov  1 16:03:42 mxgate1 postfix/postscreen[28290]: PASS NEW [104.168.204.119]:54945
Nov  1 16:03:44 mxgate1 postfix/smtpd[28698]: connect from slot0.hillrorm.com[104.168.204.119]
Nov x@x
Nov  1 16:03:48 mxgate1 postfix/smtpd[28698]: disconnect from slot0.hillrorm.com[104.168.204.119] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
Nov  1 16:33:48 mxgate1 postfix/postscreen[29377]: CONNECT from [104.168.204.119]:53464 to [176.31.12.44]:25
Nov  1 16:33:48 mxgate1 postfix/dnsblog[29592]: addr 104.168.204.119 listed by domain b.barracudacentral.org as 127.0.0.2
Nov  1 16:33:49 mxgate1 postfix/postscreen[29377]: PASS OLD [104.168.204.119]:53464
Nov  1 16:33:49 mxgate1 postfix/smtpd[29558]: connect from slot0.hillrorm.com[104.168.204.119........
-------------------------------

2019-11-02 06:52:41

104.168.204.100

attackbotsspam

Scanning random ports - tries to find possible vulnerable services

2019-07-10 17:03:34

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.204.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35686
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.168.204.108.		IN	A

;; AUTHORITY SECTION:
.			128	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091600 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 20:42:52 CST 2022
;; MSG SIZE  rcvd: 108

HOST信息:

108.204.168.104.in-addr.arpa domain name pointer client-104-168-204-108.hostwindsdns.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
108.204.168.104.in-addr.arpa	name = client-104-168-204-108.hostwindsdns.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
41.44.207.131	attackbotsspam	DATE:2020-10-01 22:38:00, IP:41.44.207.131, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-10-02 13:38:47
40.114.197.106	attackspambots	2020-10-01T22:44:04.044087mail.broermann.family sshd[8088]: Invalid user www from 40.114.197.106 port 60884 2020-10-01T22:44:04.049233mail.broermann.family sshd[8088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.114.197.106 2020-10-01T22:44:04.044087mail.broermann.family sshd[8088]: Invalid user www from 40.114.197.106 port 60884 2020-10-01T22:44:06.644814mail.broermann.family sshd[8088]: Failed password for invalid user www from 40.114.197.106 port 60884 ssh2 2020-10-01T22:48:17.971000mail.broermann.family sshd[8444]: Invalid user pepe from 40.114.197.106 port 42090 ...	2020-10-02 13:36:06
109.237.98.104	attackbots	SpamScore above: 10.0	2020-10-02 13:33:25
125.44.14.0	attack	Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=42223 . dstport=5555 . (3843)	2020-10-02 13:15:27
157.245.163.0	attackbotsspam	Oct 2 00:16:31 firewall sshd[18828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.163.0 Oct 2 00:16:31 firewall sshd[18828]: Invalid user tom from 157.245.163.0 Oct 2 00:16:34 firewall sshd[18828]: Failed password for invalid user tom from 157.245.163.0 port 35322 ssh2 ...	2020-10-02 13:16:41
114.69.249.194	attack	Invalid user liferay from 114.69.249.194 port 49781	2020-10-02 13:22:13
64.227.37.95	attackbots	20 attempts against mh-ssh on leaf	2020-10-02 13:33:47
106.53.68.158	attack	$f2bV_matches	2020-10-02 13:14:27
5.45.132.96	attackspambots	22,88-01/01 [bc00/m121] PostRequest-Spammer scoring: Lusaka01	2020-10-02 13:46:21
103.154.234.241	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-10-02 13:38:16
177.106.21.117	attack	1601584836 - 10/01/2020 22:40:36 Host: 177.106.21.117/177.106.21.117 Port: 445 TCP Blocked	2020-10-02 13:31:05
36.91.97.122	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-10-02 13:24:10
150.136.12.28	attackspam	Oct 2 05:48:04 pornomens sshd\[27355\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.12.28 user=root Oct 2 05:48:06 pornomens sshd\[27355\]: Failed password for root from 150.136.12.28 port 38768 ssh2 Oct 2 06:25:50 pornomens sshd\[27780\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.12.28 user=root ...	2020-10-02 13:36:21
129.126.240.243	attack	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-02 13:07:55
45.148.10.28	attackspambots	TCP (SYN) 45.148.10.28:55843 -> port 22, len 44	2020-10-02 13:18:57

最近上报的IP列表

104.144.26.11	104.144.103.99	38.10.246.204	193.233.143.209
149.18.28.211	149.18.29.157	149.18.29.80	38.15.149.6
149.18.56.177	18.144.85.243	20.104.180.11	178.208.165.213
45.152.202.128	23.236.170.201	95.181.151.28	185.230.47.139
149.18.57.125	14.46.175.216	189.252.203.220	5.161.42.131