114.104.6.203 - IPInfo

基本信息:

城市(city): Fuyang

省份(region): Anhui

国家(country): China

运营商(isp): ChinaNet Anhui Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	May 22 22:19:04 onepixel sshd[952936]: Invalid user mvw from 114.104.6.203 port 38378 May 22 22:19:04 onepixel sshd[952936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.104.6.203 May 22 22:19:04 onepixel sshd[952936]: Invalid user mvw from 114.104.6.203 port 38378 May 22 22:19:06 onepixel sshd[952936]: Failed password for invalid user mvw from 114.104.6.203 port 38378 ssh2 May 22 22:24:03 onepixel sshd[953600]: Invalid user vbx from 114.104.6.203 port 42994	2020-05-23 07:00:14

类型

评论内容

时间

attack

May 22 22:19:04 onepixel sshd[952936]: Invalid user mvw from 114.104.6.203 port 38378
May 22 22:19:04 onepixel sshd[952936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.104.6.203 
May 22 22:19:04 onepixel sshd[952936]: Invalid user mvw from 114.104.6.203 port 38378
May 22 22:19:06 onepixel sshd[952936]: Failed password for invalid user mvw from 114.104.6.203 port 38378 ssh2
May 22 22:24:03 onepixel sshd[953600]: Invalid user vbx from 114.104.6.203 port 42994

2020-05-23 07:00:14

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.104.6.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18176
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.104.6.203.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052201 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 23 07:00:10 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 203.6.104.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 203.6.104.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
118.24.82.81	attack	Jan 10 04:51:42 *** sshd[24223]: User root from 118.24.82.81 not allowed because not listed in AllowUsers	2020-01-10 17:22:03
107.112.218.14	attack	Jan 10 05:51:41 grey postfix/smtpd\[395\]: NOQUEUE: reject: RCPT from unknown\[107.112.218.14\]: 554 5.7.1 Service unavailable\; Client host \[107.112.218.14\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=107.112.218.14\; from=\ to=\ proto=ESMTP helo=\<\[107.112.218.127\]\> ...	2020-01-10 17:26:34
190.111.239.144	attackspambots	Jan 10 05:51:11 debian-2gb-nbg1-2 kernel: \[891182.041351\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=190.111.239.144 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=6098 PROTO=TCP SPT=44551 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-10 17:40:19
106.12.48.138	attack	2020-01-10T05:48:55.141531 sshd[23540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 user=root 2020-01-10T05:48:56.846944 sshd[23540]: Failed password for root from 106.12.48.138 port 60068 ssh2 2020-01-10T05:52:04.826107 sshd[23581]: Invalid user tzs from 106.12.48.138 port 54878 2020-01-10T05:52:04.841887 sshd[23581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.138 2020-01-10T05:52:04.826107 sshd[23581]: Invalid user tzs from 106.12.48.138 port 54878 2020-01-10T05:52:06.828187 sshd[23581]: Failed password for invalid user tzs from 106.12.48.138 port 54878 ssh2 ...	2020-01-10 17:09:48
188.166.239.106	attackbotsspam	Jan 10 08:59:06 XXX sshd[18269]: Invalid user Administrator from 188.166.239.106 port 37658	2020-01-10 17:21:47
89.248.172.85	attackbotsspam	01/10/2020-03:52:52.552565 89.248.172.85 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-10 17:20:22
212.64.33.206	attackspambots	$f2bV_matches	2020-01-10 17:30:32
212.64.6.121	attackspambots	WordPress login Brute force / Web App Attack on client site.	2020-01-10 17:18:45
123.131.165.10	attackspam	2020/01/10 05:51:50 \[error\] 30677\#30677: \*9105 limiting requests, excess: 0.391 by zone "one", client: 123.131.165.10, server: default_server, request: "GET /TP/index.php HTTP/1.1", host: "81.32.231.108" ...	2020-01-10 17:18:03
5.58.126.178	attackspam	Jan 10 05:51:41 grey postfix/smtpd\[32651\]: NOQUEUE: reject: RCPT from host-5-58-126-178.bitternet.ua\[5.58.126.178\]: 554 5.7.1 Service unavailable\; Client host \[5.58.126.178\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[5.58.126.178\]\; from=\ to=\<09palur@fasor.hu\> proto=ESMTP helo=\ ...	2020-01-10 17:26:57
14.232.121.199	attackspambots	1578631892 - 01/10/2020 05:51:32 Host: 14.232.121.199/14.232.121.199 Port: 445 TCP Blocked	2020-01-10 17:29:29
125.161.107.26	attack	1578631909 - 01/10/2020 05:51:49 Host: 125.161.107.26/125.161.107.26 Port: 445 TCP Blocked	2020-01-10 17:19:42
159.65.155.227	attack	(sshd) Failed SSH login from 159.65.155.227 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan 10 03:53:37 svr sshd[3809716]: Invalid user list1 from 159.65.155.227 port 43384 Jan 10 03:53:39 svr sshd[3809716]: Failed password for invalid user list1 from 159.65.155.227 port 43384 ssh2 Jan 10 04:03:37 svr sshd[3843049]: Invalid user tny from 159.65.155.227 port 50320 Jan 10 04:03:38 svr sshd[3843049]: Failed password for invalid user tny from 159.65.155.227 port 50320 ssh2 Jan 10 04:06:51 svr sshd[3853626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 user=root	2020-01-10 17:36:24
63.83.78.116	attackspambots	Jan 10 05:51:37 exim[24094]: [1\55] 1ipmGj-0006Gc-KZ H=rub.saparel.com (rub.viragagyas-szegelyek.com) [63.83.78.116] F= rejected after DATA: This message scored 103.2 spam points.	2020-01-10 17:11:33
2.82.138.44	attack	01/09/2020-23:51:57.087363 2.82.138.44 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 8	2020-01-10 17:15:08

最近上报的IP列表

218.142.14.68	2.78.140.236	178.15.61.227	69.59.39.214
103.205.140.76	236.92.246.67	113.3.227.164	38.7.49.144
204.63.100.126	115.236.121.130	11.108.194.1	82.156.103.145
59.60.238.87	102.53.199.194	100.74.47.86	194.249.222.11
184.249.146.173	106.218.19.89	202.238.37.157	203.20.175.104