114.113.124.108

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing RHTD Network Technology Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	srv01 Mass scanning activity detected Target: 80(http) ..	2020-04-24 22:13:05

相同子网IP讨论:

IP	类型	评论内容	时间
114.113.124.99	attack	Apr 28 03:53:55 ip-172-31-61-156 sshd[16937]: Failed password for root from 114.113.124.99 port 49823 ssh2 Apr 28 03:53:58 ip-172-31-61-156 sshd[16941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.124.99 user=root Apr 28 03:54:00 ip-172-31-61-156 sshd[16941]: Failed password for root from 114.113.124.99 port 50240 ssh2 Apr 28 03:54:10 ip-172-31-61-156 sshd[16947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.124.99 user=root Apr 28 03:54:12 ip-172-31-61-156 sshd[16947]: Failed password for root from 114.113.124.99 port 51718 ssh2 ...	2020-04-28 12:52:22

类型

评论内容

时间

114.113.124.99

attack

Apr 28 03:53:55 ip-172-31-61-156 sshd[16937]: Failed password for root from 114.113.124.99 port 49823 ssh2
Apr 28 03:53:58 ip-172-31-61-156 sshd[16941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.124.99  user=root
Apr 28 03:54:00 ip-172-31-61-156 sshd[16941]: Failed password for root from 114.113.124.99 port 50240 ssh2
Apr 28 03:54:10 ip-172-31-61-156 sshd[16947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.113.124.99  user=root
Apr 28 03:54:12 ip-172-31-61-156 sshd[16947]: Failed password for root from 114.113.124.99 port 51718 ssh2
...

2020-04-28 12:52:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.113.124.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32259
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.113.124.108.		IN	A

;; AUTHORITY SECTION:
.			471	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042400 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 24 22:12:58 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 108.124.113.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 108.124.113.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
66.206.3.42	attackspambots	Unauthorized connection attempt detected from IP address 66.206.3.42 to port 6000 [T]	2020-01-12 07:16:19
45.179.164.163	attackbotsspam	1578776724 - 01/11/2020 22:05:24 Host: 45.179.164.163/45.179.164.163 Port: 445 TCP Blocked	2020-01-12 07:39:40
31.14.40.200	attack	CloudCIX Reconnaissance Scan Detected, PTR: academicabelch.net.	2020-01-12 07:15:36
50.192.122.65	attack	" "	2020-01-12 07:43:02
45.81.148.165	attack	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-01-12 07:14:22
63.143.53.138	attackbots	[2020-01-11 18:41:50] NOTICE[2175] chan_sip.c: Registration from '"125" ' failed for '63.143.53.138:5531' - Wrong password [2020-01-11 18:41:50] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-11T18:41:50.929-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="125",SessionID="0x7f5ac400f638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.53.138/5531",Challenge="21379738",ReceivedChallenge="21379738",ReceivedHash="0def6575a2bdfbf1546fdb0043e9ecd8" [2020-01-11 18:41:51] NOTICE[2175] chan_sip.c: Registration from '"125" ' failed for '63.143.53.138:5531' - Wrong password [2020-01-11 18:41:51] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-11T18:41:51.017-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="125",SessionID="0x7f5ac4718f88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.5 ...	2020-01-12 07:45:43
86.195.34.51	attack	Port 22 Scan, PTR: None	2020-01-12 07:48:05
51.89.136.97	attack	CloudCIX Reconnaissance Scan Detected, PTR: ip-51-89-136.eu.	2020-01-12 07:18:20
106.13.141.135	attack	Jan 11 21:44:10 ns382633 sshd\[9704\]: Invalid user registry from 106.13.141.135 port 52498 Jan 11 21:44:10 ns382633 sshd\[9704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.141.135 Jan 11 21:44:12 ns382633 sshd\[9704\]: Failed password for invalid user registry from 106.13.141.135 port 52498 ssh2 Jan 11 22:05:25 ns382633 sshd\[13855\]: Invalid user vbox from 106.13.141.135 port 47114 Jan 11 22:05:25 ns382633 sshd\[13855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.141.135	2020-01-12 07:36:43
222.186.175.154	attack	Jan 11 13:19:58 sachi sshd\[3069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Jan 11 13:19:59 sachi sshd\[3069\]: Failed password for root from 222.186.175.154 port 27884 ssh2 Jan 11 13:20:14 sachi sshd\[3097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Jan 11 13:20:17 sachi sshd\[3097\]: Failed password for root from 222.186.175.154 port 39176 ssh2 Jan 11 13:20:37 sachi sshd\[3109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root	2020-01-12 07:32:50
37.182.101.145	attackbotsspam	D-Link DAP-1860 Remote Command Injection Vulnerability, PTR: net-37-182-101-145.cust.vodafonedsl.it.	2020-01-12 07:26:28
181.40.73.86	attackbots	Jan 11 22:42:30 lnxweb61 sshd[9401]: Failed password for root from 181.40.73.86 port 61344 ssh2 Jan 11 22:42:30 lnxweb61 sshd[9401]: Failed password for root from 181.40.73.86 port 61344 ssh2	2020-01-12 07:52:45
190.85.15.251	attackbotsspam	Invalid user oxz from 190.85.15.251 port 36104	2020-01-12 07:28:22
103.94.77.51	attack	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-01-12 07:19:02
37.187.5.137	attackspam	Jan 11 21:16:15 zx01vmsma01 sshd[63205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.5.137 Jan 11 21:16:17 zx01vmsma01 sshd[63205]: Failed password for invalid user adrian from 37.187.5.137 port 42424 ssh2 ...	2020-01-12 07:44:21

最近上报的IP列表

193.39.223.36	40.71.192.47	43.240.247.234	102.65.68.130
175.34.172.92	241.21.88.158	178.88.63.155	194.21.230.110
71.177.18.125	229.127.128.40	233.210.96.228	39.49.122.233
77.222.117.55	161.175.214.254	115.149.241.219	180.200.106.66
132.239.62.152	178.35.228.86	183.163.128.37	71.0.178.77