104.220.30.200

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.220.30.236	attack	Forbidden directory scan :: 2019/09/29 22:09:10 [error] 1103#1103: *508475 access forbidden by rule, client: 104.220.30.236, server: [censored_2], request: "GET //wpdevguides.sql HTTP/1.1", host: "[censored_2]", referrer: "http://[censored_2]:80//wpdevguides.sql"	2019-09-29 21:07:50

类型

评论内容

时间

104.220.30.236

attack

Forbidden directory scan :: 2019/09/29 22:09:10 [error] 1103#1103: *508475 access forbidden by rule, client: 104.220.30.236, server: [censored_2], request: "GET //wpdevguides.sql HTTP/1.1", host: "[censored_2]", referrer: "http://[censored_2]:80//wpdevguides.sql"

2019-09-29 21:07:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.220.30.200
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22341
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.220.30.200.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 20:01:39 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 200.30.220.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 200.30.220.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
104.215.182.47	attackbotsspam	Jul 9 18:02:49 gw1 sshd[8673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.215.182.47 Jul 9 18:02:51 gw1 sshd[8673]: Failed password for invalid user boss from 104.215.182.47 port 51758 ssh2 ...	2020-07-09 22:14:39
177.126.139.249	attackbots	Unauthorized connection attempt detected from IP address 177.126.139.249 to port 23	2020-07-09 22:12:15
124.207.98.213	attackspam	Failed password for invalid user ustinya from 124.207.98.213 port 20081 ssh2	2020-07-09 22:13:12
198.20.103.246	attackbots	trying to access non-authorized port	2020-07-09 22:32:06
123.201.78.156	attackbotsspam	Port probing on unauthorized port 8291	2020-07-09 22:01:23
209.97.149.42	attack	20 attempts against mh-ssh on ice	2020-07-09 22:09:07
185.143.73.203	attack	Jul 9 16:26:35 srv01 postfix/smtpd\[8716\]: warning: unknown\[185.143.73.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 16:27:14 srv01 postfix/smtpd\[8716\]: warning: unknown\[185.143.73.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 16:27:53 srv01 postfix/smtpd\[18919\]: warning: unknown\[185.143.73.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 16:28:30 srv01 postfix/smtpd\[8716\]: warning: unknown\[185.143.73.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 16:29:08 srv01 postfix/smtpd\[18919\]: warning: unknown\[185.143.73.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-07-09 22:35:23
112.85.42.188	attackspam	07/09/2020-09:58:54.785861 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan	2020-07-09 22:00:05
51.68.229.67	attackbotsspam	51.68.229.67 - - [09/Jul/2020:15:10:27 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.229.67 - - [09/Jul/2020:15:19:20 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.229.67 - - [09/Jul/2020:15:19:20 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-09 22:24:35
49.235.76.84	attackspam	Jul 9 13:44:52 havingfunrightnow sshd[14528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.76.84 Jul 9 13:44:54 havingfunrightnow sshd[14528]: Failed password for invalid user tjq from 49.235.76.84 port 35806 ssh2 Jul 9 14:08:06 havingfunrightnow sshd[15219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.76.84 ...	2020-07-09 22:27:31
127.0.0.1	attackspambots	Test Connectivity	2020-07-09 22:35:37
185.210.218.206	attack	[2020-07-09 09:55:37] NOTICE[1150] chan_sip.c: Registration from '' failed for '185.210.218.206:57423' - Wrong password [2020-07-09 09:55:37] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-09T09:55:37.585-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="748",SessionID="0x7fcb4c0dfe08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.210.218.206/57423",Challenge="27f1e96b",ReceivedChallenge="27f1e96b",ReceivedHash="384354e6cdac087fc93c5237b10c8d96" [2020-07-09 09:56:06] NOTICE[1150] chan_sip.c: Registration from '' failed for '185.210.218.206:55140' - Wrong password [2020-07-09 09:56:06] SECURITY[1167] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-09T09:56:06.028-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5975",SessionID="0x7fcb4c07a778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.210.2 ...	2020-07-09 22:08:46
107.170.39.154	attack	Jul 9 05:16:16 pixelmemory sshd[3985709]: Invalid user deployer from 107.170.39.154 port 37503 Jul 9 05:16:16 pixelmemory sshd[3985709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.39.154 Jul 9 05:16:16 pixelmemory sshd[3985709]: Invalid user deployer from 107.170.39.154 port 37503 Jul 9 05:16:19 pixelmemory sshd[3985709]: Failed password for invalid user deployer from 107.170.39.154 port 37503 ssh2 Jul 9 05:27:19 pixelmemory sshd[4014478]: Invalid user win from 107.170.39.154 port 36902 ...	2020-07-09 22:16:48
171.233.23.193	attackbotsspam	1594296499 - 07/09/2020 14:08:19 Host: 171.233.23.193/171.233.23.193 Port: 445 TCP Blocked	2020-07-09 22:07:36
18.232.156.17	attackspam	18.232.156.17 - - [09/Jul/2020:06:30:49 -0700] "GET /.env HTTP/1.1" 404 18.232.156.17 - - [09/Jul/2020:06:43:19 -0700] "GET /api/.env HTTP/1.1" 404 18.232.156.17 - - [09/Jul/2020:06:58:28 -0700] "GET /api/.env HTTP/1.1" 404	2020-07-09 22:28:10

最近上报的IP列表

104.220.29.252	101.109.29.175	253.157.151.12	101.109.29.177
101.109.29.180	101.109.29.187	101.109.29.191	61.57.164.93
101.109.29.194	101.109.33.231	101.109.33.243	104.222.228.247
104.222.122.238	104.222.43.223	104.222.249.120	104.222.43.67
104.222.43.150	104.222.43.47	104.222.43.111	104.222.127.250