104.206.128.74

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): AAA Enterprises

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	UDP 104.206.128.74:57326 -> port 161, len 71	2020-10-06 04:12:44
attackspambots	TCP (SYN) 104.206.128.74:55896 -> port 3389, len 44	2020-10-05 20:11:31
attackbots	TCP (SYN) 104.206.128.74:55896 -> port 3389, len 44	2020-10-05 12:03:44
attackspambots	TCP (SYN) 104.206.128.74:56014 -> port 3389, len 44	2020-10-01 07:39:03
attackspam	TCP (SYN) 104.206.128.74:57743 -> port 21, len 44	2020-10-01 00:07:38
attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-09-30 16:30:19
attack	Unauthorized connection attempt from IP address 104.206.128.74 on Port 3389(RDP)	2020-09-25 11:14:49
attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-09-22 17:58:15
attackspam	TCP (SYN) 104.206.128.74:52670 -> port 3389, len 44	2020-09-20 22:19:09
attackbotsspam	TCP (SYN) 104.206.128.74:52670 -> port 3389, len 44	2020-09-20 14:11:32
attack	Found on Binary Defense / proto=6 . srcport=57585 . dstport=5432 . (3363)	2020-09-20 06:10:54
attackspambots	TCP (SYN) 104.206.128.74:51576 -> port 21, len 44	2020-09-04 13:18:27
attack	TCP (SYN) 104.206.128.74:51576 -> port 21, len 44	2020-09-04 05:47:21
attackspambots	UDP 104.206.128.74:60305 -> port 161, len 71	2020-09-03 03:28:51
attackbots	TCP port : 23	2020-09-02 19:04:55
attack	5432/tcp 3389/tcp 1433/tcp... [2020-06-11/08-11]23pkt,15pt.(tcp),1pt.(udp)	2020-08-12 07:02:48
attack	TCP (SYN) 104.206.128.74:60254 -> port 21, len 44	2020-05-17 08:40:44
attack	scan z	2020-03-24 04:49:56
attack	Unauthorized connection attempt detected from IP address 104.206.128.74 to port 8444	2020-03-17 18:45:16
attackspam	unauthorized connection attempt	2020-02-26 19:20:28
attack	5432/tcp 88/tcp 8444/tcp... [2019-12-23/2020-02-22]47pkt,13pt.(tcp),1pt.(udp)	2020-02-23 07:21:49
attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-19 22:37:37
attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 21:23:27
attackbotsspam	Unauthorized connection attempt detected from IP address 104.206.128.74 to port 3306 [J]	2020-01-29 23:20:33
attackbots	Unauthorized connection attempt detected from IP address 104.206.128.74 to port 5900 [J]	2020-01-24 03:12:32
attack	ET SCAN Suspicious inbound to mySQL port 3306 - port: 3306 proto: TCP cat: Potentially Bad Traffic	2019-12-28 04:39:08
attackspambots	12/09/2019-12:06:01.184815 104.206.128.74 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-12-10 03:44:40
attack	Port scan: Attack repeated for 24 hours	2019-11-28 00:09:39
attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-19 19:15:15
attackspambots	104.206.128.74 was recorded 5 times by 5 hosts attempting to connect to the following ports: 3389,5060,3306,23,1433. Incident counter (4h, 24h, all-time): 5, 7, 40	2019-11-10 07:38:58

相同子网IP讨论:

IP	类型	评论内容	时间
104.206.128.6	attackspambots	Automatic report - Banned IP Access	2020-10-09 02:32:26
104.206.128.6	attackbots	bruteforce, ssh, scan port	2020-10-08 18:31:18
104.206.128.34	attackbots	TCP (SYN) 104.206.128.34:62942 -> port 3389, len 44	2020-10-06 04:52:48
104.206.128.2	attackspambots	TCP (SYN) 104.206.128.2:60162 -> port 1433, len 44	2020-10-06 04:10:28
104.206.128.42	attackbots	TCP (SYN) 104.206.128.42:50739 -> port 23, len 44	2020-10-06 02:55:43
104.206.128.66	attackbotsspam	TCP (SYN) 104.206.128.66:63773 -> port 3306, len 44	2020-10-06 00:59:51
104.206.128.34	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-05 20:55:21
104.206.128.2	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-05 20:09:04
104.206.128.42	attackbots	Icarus honeypot on github	2020-10-05 18:46:02
104.206.128.34	attackbotsspam	Found on Alienvault / proto=6 . srcport=64630 . dstport=5900 . (3726)	2020-10-05 12:44:44
104.206.128.2	attackspambots	Found on Binary Defense / proto=6 . srcport=52605 . dstport=21 FTP . (3566)	2020-10-05 12:01:30
104.206.128.6	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-03 04:43:15
104.206.128.6	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-03 00:05:15
104.206.128.6	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-02 20:36:03
104.206.128.6	attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-10-02 17:08:30

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.206.128.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24300
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.206.128.74.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 14 14:29:52 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

74.128.206.104.in-addr.arpa domain name pointer 74-128.206.104.serverhubrdns.in-addr.arpa.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
74.128.206.104.in-addr.arpa	name = 74-128.206.104.serverhubrdns.in-addr.arpa.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.12.193.169	attack	Mar 12 03:15:20 webhost01 sshd[27661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.193.169 Mar 12 03:15:22 webhost01 sshd[27661]: Failed password for invalid user amit from 106.12.193.169 port 55744 ssh2 ...	2020-03-12 06:10:28
183.98.215.91	attackbots	Mar 12 00:41:44 hosting sshd[14088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.98.215.91 user=root Mar 12 00:41:46 hosting sshd[14088]: Failed password for root from 183.98.215.91 port 51058 ssh2 ...	2020-03-12 06:21:57
102.176.81.99	attackbotsspam	2020-03-11T13:15:35.329758linuxbox-skyline sshd[39026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.176.81.99 user=root 2020-03-11T13:15:36.863812linuxbox-skyline sshd[39026]: Failed password for root from 102.176.81.99 port 58150 ssh2 ...	2020-03-12 06:29:56
89.17.152.142	attackspambots	Mar 11 19:53:45 ns382633 sshd\[685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.17.152.142 user=root Mar 11 19:53:47 ns382633 sshd\[685\]: Failed password for root from 89.17.152.142 port 39566 ssh2 Mar 11 20:09:07 ns382633 sshd\[3732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.17.152.142 user=root Mar 11 20:09:09 ns382633 sshd\[3732\]: Failed password for root from 89.17.152.142 port 48940 ssh2 Mar 11 20:15:25 ns382633 sshd\[5352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.17.152.142 user=root	2020-03-12 06:40:10
185.123.242.125	attackspambots	Chat Spam	2020-03-12 06:27:09
68.183.102.246	attack	Mar 11 23:09:56 * sshd[25566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.102.246 Mar 11 23:09:57 * sshd[25566]: Failed password for invalid user odenthal@1234 from 68.183.102.246 port 35674 ssh2	2020-03-12 06:10:53
114.99.0.204	attackbots	MAIL: User Login Brute Force Attempt	2020-03-12 06:36:16
103.138.109.98	attackspambots	Mar 11 23:10:51 debian-2gb-nbg1-2 kernel: \[6223792.233628\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=103.138.109.98 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=22912 PROTO=TCP SPT=54235 DPT=11823 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-12 06:11:43
107.192.44.114	attackspam	Netgear DGN Device Remote Command Execution Vulnerability	2020-03-12 06:32:33
101.255.54.180	attackbotsspam	Unauthorized connection attempt from IP address 101.255.54.180 on Port 445(SMB)	2020-03-12 06:31:53
51.91.108.98	attackbots	Brute force attempt	2020-03-12 06:20:32
117.2.82.249	attackspambots	Unauthorized connection attempt from IP address 117.2.82.249 on Port 445(SMB)	2020-03-12 06:41:32
73.92.34.214	attackspam	Mar 11 19:15:43 IngegnereFirenze sshd[24048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.92.34.214 user=root ...	2020-03-12 06:24:07
141.105.68.21	attackbots	1583954157 - 03/11/2020 20:15:57 Host: 141.105.68.21/141.105.68.21 Port: 445 TCP Blocked	2020-03-12 06:08:35
89.113.127.22	attack	Unauthorized connection attempt from IP address 89.113.127.22 on Port 445(SMB)	2020-03-12 06:23:16

最近上报的IP列表

103.28.161.26	113.161.80.77	209.200.15.186	103.20.212.240
114.227.3.72	152.136.130.31	213.154.3.69	185.81.157.163
92.119.160.125	120.199.34.58	202.29.60.195	125.166.29.139
68.107.107.48	79.138.8.251	170.130.187.42	221.243.108.130
119.29.246.165	199.249.230.102	162.243.69.215	37.220.53.244