114.112.104.185

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Linktom Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	unauthorized connection attempt	2020-02-07 16:19:24

相同子网IP讨论:

IP	类型	评论内容	时间
114.112.104.187	attackspam	Unauthorized connection attempt detected from IP address 114.112.104.187 to port 1433 [J]	2020-01-17 20:49:16
114.112.104.187	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.112.104.187/ CN - 1H : (645) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4808 IP : 114.112.104.187 CIDR : 114.112.104.0/22 PREFIX COUNT : 1972 UNIQUE IP COUNT : 6728192 ATTACKS DETECTED ASN4808 : 1H - 3 3H - 9 6H - 11 12H - 19 24H - 34 DateTime : 2019-11-07 07:19:04 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery	2019-11-07 22:04:47
114.112.104.96	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-11 00:41:48
114.112.104.187	attackspambots	port scan/probe/communication attempt	2019-10-10 23:35:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.112.104.185
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45567
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.112.104.185.		IN	A

;; AUTHORITY SECTION:
.			499	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020700 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 16:19:21 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 185.104.112.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 185.104.112.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
93.174.89.111	attackbots	Criminal breakin attempts.	2020-08-16 18:03:00
49.234.213.237	attackspambots	Aug 15 17:51:13 Tower sshd[3970]: refused connect from 159.203.179.230 (159.203.179.230) Aug 15 23:49:29 Tower sshd[3970]: Connection from 49.234.213.237 port 37056 on 192.168.10.220 port 22 rdomain "" Aug 15 23:49:31 Tower sshd[3970]: Failed password for root from 49.234.213.237 port 37056 ssh2 Aug 15 23:49:32 Tower sshd[3970]: Received disconnect from 49.234.213.237 port 37056:11: Bye Bye [preauth] Aug 15 23:49:32 Tower sshd[3970]: Disconnected from authenticating user root 49.234.213.237 port 37056 [preauth]	2020-08-16 17:38:15
182.75.80.6	attack	Aug 16 05:49:42 lnxded63 sshd[20884]: Failed password for root from 182.75.80.6 port 46410 ssh2 Aug 16 05:49:42 lnxded63 sshd[20884]: Failed password for root from 182.75.80.6 port 46410 ssh2	2020-08-16 17:42:40
209.222.30.130	attack	port	2020-08-16 17:49:58
115.23.48.47	attack	Aug 15 21:05:08 eddieflores sshd\[12733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.23.48.47 user=root Aug 15 21:05:10 eddieflores sshd\[12733\]: Failed password for root from 115.23.48.47 port 50678 ssh2 Aug 15 21:09:34 eddieflores sshd\[13120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.23.48.47 user=root Aug 15 21:09:36 eddieflores sshd\[13120\]: Failed password for root from 115.23.48.47 port 33134 ssh2 Aug 15 21:13:58 eddieflores sshd\[13441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.23.48.47 user=root	2020-08-16 17:31:55
51.77.201.36	attackspambots	Aug 16 08:45:12 ns41 sshd[3420]: Failed password for root from 51.77.201.36 port 41262 ssh2 Aug 16 08:45:12 ns41 sshd[3420]: Failed password for root from 51.77.201.36 port 41262 ssh2	2020-08-16 17:47:49
65.74.177.84	attackspam	65.74.177.84 - - [16/Aug/2020:10:00:02 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 65.74.177.84 - - [16/Aug/2020:10:00:04 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 65.74.177.84 - - [16/Aug/2020:10:00:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1950 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-16 17:50:46
109.87.102.162	attackbotsspam	Unauthorized IMAP connection attempt	2020-08-16 18:00:41
49.88.112.67	attack	Brute-force attempt banned	2020-08-16 17:41:19
190.231.64.251	attackspambots	TCP (SYN) 190.231.64.251:52144 -> port 23, len 44	2020-08-16 17:39:18
50.250.75.153	attack	Dovecot Invalid User Login Attempt.	2020-08-16 18:04:35
37.6.110.78	attack	Aug 16 06:49:44 server2 sshd\[26054\]: Invalid user admin from 37.6.110.78 Aug 16 06:49:45 server2 sshd\[26056\]: Invalid user admin from 37.6.110.78 Aug 16 06:49:46 server2 sshd\[26058\]: Invalid user admin from 37.6.110.78 Aug 16 06:49:46 server2 sshd\[26061\]: Invalid user admin from 37.6.110.78 Aug 16 06:49:47 server2 sshd\[26063\]: Invalid user admin from 37.6.110.78 Aug 16 06:49:48 server2 sshd\[26065\]: Invalid user admin from 37.6.110.78	2020-08-16 17:40:16
181.196.57.230	attack	Dovecot Invalid User Login Attempt.	2020-08-16 18:03:57
106.12.123.239	attackspambots	Aug 16 06:48:30 vmd36147 sshd[7291]: Failed password for root from 106.12.123.239 port 37680 ssh2 Aug 16 06:54:06 vmd36147 sshd[24377]: Failed password for root from 106.12.123.239 port 46676 ssh2 ...	2020-08-16 17:43:07
192.241.219.24	attack	Port scan: Attack repeated for 24 hours	2020-08-16 17:54:28

最近上报的IP列表

101.47.199.192	42.119.204.21	31.7.17.46	177.23.19.126
92.111.189.38	5.202.144.172	57.163.240.92	180.209.101.55
218.167.37.132	158.148.87.18	208.145.32.130	180.254.136.170
103.180.241.7	37.150.188.68	86.252.102.16	150.22.173.95
177.80.211.77	120.31.205.203	95.241.196.61	94.247.180.243