116.196.104.100

基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): Beijing Jingdong 360 Degree E-Commerce Co. Ltd.

主机名(hostname): unknown

机构(organization): China Unicom Beijing Province Network

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Apr 24 02:32:08 ns392434 sshd[3795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 user=root Apr 24 02:32:10 ns392434 sshd[3795]: Failed password for root from 116.196.104.100 port 51480 ssh2 Apr 24 02:45:50 ns392434 sshd[4563]: Invalid user tom from 116.196.104.100 port 37663 Apr 24 02:45:50 ns392434 sshd[4563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Apr 24 02:45:50 ns392434 sshd[4563]: Invalid user tom from 116.196.104.100 port 37663 Apr 24 02:45:52 ns392434 sshd[4563]: Failed password for invalid user tom from 116.196.104.100 port 37663 ssh2 Apr 24 02:51:50 ns392434 sshd[4796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 user=root Apr 24 02:51:51 ns392434 sshd[4796]: Failed password for root from 116.196.104.100 port 39378 ssh2 Apr 24 02:57:41 ns392434 sshd[5017]: Invalid user iq from 116.196.104.100 port 41093	2020-04-26 19:42:02
attackspam	ssh brute force	2020-04-21 16:07:53
attackspambots	Apr 11 23:51:39 ny01 sshd[6780]: Failed password for root from 116.196.104.100 port 55187 ssh2 Apr 11 23:54:21 ny01 sshd[7109]: Failed password for root from 116.196.104.100 port 40913 ssh2	2020-04-12 13:32:12
attackbotsspam	Apr 2 07:57:16 vps647732 sshd[23093]: Failed password for root from 116.196.104.100 port 58428 ssh2 ...	2020-04-02 14:50:22
attackspam	DATE:2020-03-30 07:59:07, IP:116.196.104.100, PORT:ssh SSH brute force auth (docker-dc)	2020-03-30 14:50:31
attackspambots	SSH login attempts.	2020-03-29 15:28:15
attack	Tried sshing with brute force.	2020-02-05 05:47:30
attackbots	Jan 21 17:38:35 hosting sshd[3536]: Invalid user check from 116.196.104.100 port 50512 ...	2020-01-21 23:27:42
attack	Dec 27 08:28:39 silence02 sshd[13838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Dec 27 08:28:41 silence02 sshd[13838]: Failed password for invalid user arlet from 116.196.104.100 port 52722 ssh2 Dec 27 08:33:48 silence02 sshd[13973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100	2019-12-27 15:38:48
attackspambots	2019-09-29T00:37:37.227314suse-nuc sshd[19942]: Invalid user webmaster from 116.196.104.100 port 47336 ...	2019-11-30 02:32:54
attackspam	Nov 26 16:03:07 eventyay sshd[22645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Nov 26 16:03:09 eventyay sshd[22645]: Failed password for invalid user P4sswort!234 from 116.196.104.100 port 41953 ssh2 Nov 26 16:11:12 eventyay sshd[22784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 ...	2019-11-26 23:24:03
attackbots	Nov 16 06:11:52 host sshd[30580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Nov 16 06:11:52 host sshd[30580]: Invalid user aclin from 116.196.104.100 port 41641 Nov 16 06:11:53 host sshd[30580]: Failed password for invalid user aclin from 116.196.104.100 port 41641 ssh2 ...	2019-11-16 13:35:37
attackspam	Nov 9 23:53:17 hcbbdb sshd\[25880\]: Invalid user Asd123!@@ from 116.196.104.100 Nov 9 23:53:17 hcbbdb sshd\[25880\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Nov 9 23:53:18 hcbbdb sshd\[25880\]: Failed password for invalid user Asd123!@@ from 116.196.104.100 port 39286 ssh2 Nov 9 23:57:53 hcbbdb sshd\[26377\]: Invalid user 123@Admin from 116.196.104.100 Nov 9 23:57:53 hcbbdb sshd\[26377\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100	2019-11-10 07:58:33
attackbotsspam	Nov 1 13:50:36 MK-Soft-VM5 sshd[14940]: Failed password for root from 116.196.104.100 port 60610 ssh2 ...	2019-11-02 03:12:59
attackbots	Oct 14 14:42:14 server sshd\[9055\]: Invalid user 123Senior from 116.196.104.100 port 46522 Oct 14 14:42:14 server sshd\[9055\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Oct 14 14:42:16 server sshd\[9055\]: Failed password for invalid user 123Senior from 116.196.104.100 port 46522 ssh2 Oct 14 14:48:05 server sshd\[11920\]: Invalid user Talent@2017 from 116.196.104.100 port 37676 Oct 14 14:48:05 server sshd\[11920\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100	2019-10-15 00:22:13
attackspambots	Oct 7 15:27:06 SilenceServices sshd[29313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Oct 7 15:27:08 SilenceServices sshd[29313]: Failed password for invalid user p@$$w0rd1 from 116.196.104.100 port 46269 ssh2 Oct 7 15:31:15 SilenceServices sshd[30369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100	2019-10-07 23:11:23
attackbots	2019-09-08T22:35:05.601132abusebot.cloudsearch.cf sshd\[27539\]: Invalid user deploy321 from 116.196.104.100 port 40763	2019-09-09 06:49:00
attackspam	Sep 6 08:52:43 plex sshd[14994]: Invalid user oracle from 116.196.104.100 port 41071	2019-09-06 21:52:25
attack	Brute force attempt	2019-08-28 18:13:00
attackbots	Aug 13 23:17:34 aat-srv002 sshd[5441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Aug 13 23:17:36 aat-srv002 sshd[5441]: Failed password for invalid user server from 116.196.104.100 port 50966 ssh2 Aug 13 23:21:01 aat-srv002 sshd[5549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Aug 13 23:21:02 aat-srv002 sshd[5549]: Failed password for invalid user rc from 116.196.104.100 port 35669 ssh2 ...	2019-08-14 12:22:00
attack	Jul 28 14:20:39 mail sshd\[13846\]: Failed password for root from 116.196.104.100 port 49114 ssh2 Jul 28 14:39:40 mail sshd\[14216\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 user=root ...	2019-07-28 22:48:12
attackbots	Jul 27 00:56:36 debian sshd\[21200\]: Invalid user max777 from 116.196.104.100 port 37753 Jul 27 00:56:36 debian sshd\[21200\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 ...	2019-07-27 08:10:47
attackspam	Jul 19 07:20:46 localhost sshd\[35698\]: Invalid user brady from 116.196.104.100 port 46885 Jul 19 07:20:46 localhost sshd\[35698\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 ...	2019-07-19 14:22:28
attackspambots	web-1 [ssh] SSH Attack	2019-07-17 14:12:45
attack	Jul 10 21:05:32 tux-35-217 sshd\[24092\]: Invalid user uno8 from 116.196.104.100 port 47257 Jul 10 21:05:32 tux-35-217 sshd\[24092\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 Jul 10 21:05:33 tux-35-217 sshd\[24092\]: Failed password for invalid user uno8 from 116.196.104.100 port 47257 ssh2 Jul 10 21:08:52 tux-35-217 sshd\[24107\]: Invalid user isis from 116.196.104.100 port 34065 Jul 10 21:08:52 tux-35-217 sshd\[24107\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100 ...	2019-07-11 04:03:37

相同子网IP讨论:

IP	类型	评论内容	时间
116.196.104.139	attack	Jul 23 16:38:33 firewall sshd[12427]: Invalid user magento from 116.196.104.139 Jul 23 16:38:35 firewall sshd[12427]: Failed password for invalid user magento from 116.196.104.139 port 34822 ssh2 Jul 23 16:47:10 firewall sshd[12786]: Invalid user sonarqube from 116.196.104.139 ...	2020-07-24 03:50:43
116.196.104.139	attack	Jul 23 07:59:27 home sshd[245496]: Invalid user chj from 116.196.104.139 port 52564 Jul 23 07:59:27 home sshd[245496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.139 Jul 23 07:59:27 home sshd[245496]: Invalid user chj from 116.196.104.139 port 52564 Jul 23 07:59:29 home sshd[245496]: Failed password for invalid user chj from 116.196.104.139 port 52564 ssh2 Jul 23 08:03:11 home sshd[245869]: Invalid user biadmin from 116.196.104.139 port 40674 ...	2020-07-23 17:28:26
116.196.104.1	attackbots	SSH login attempts with user root at 2020-01-02.	2020-01-03 03:09:53

类型

评论内容

时间

116.196.104.139

attack

Jul 23 16:38:33 firewall sshd[12427]: Invalid user magento from 116.196.104.139
Jul 23 16:38:35 firewall sshd[12427]: Failed password for invalid user magento from 116.196.104.139 port 34822 ssh2
Jul 23 16:47:10 firewall sshd[12786]: Invalid user sonarqube from 116.196.104.139
...

2020-07-24 03:50:43

116.196.104.139

attack

Jul 23 07:59:27 home sshd[245496]: Invalid user chj from 116.196.104.139 port 52564
Jul 23 07:59:27 home sshd[245496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.139 
Jul 23 07:59:27 home sshd[245496]: Invalid user chj from 116.196.104.139 port 52564
Jul 23 07:59:29 home sshd[245496]: Failed password for invalid user chj from 116.196.104.139 port 52564 ssh2
Jul 23 08:03:11 home sshd[245869]: Invalid user biadmin from 116.196.104.139 port 40674
...

2020-07-23 17:28:26

116.196.104.1

attackbots

SSH login attempts with user root at 2020-01-02.

2020-01-03 03:09:53

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.196.104.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13188
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.196.104.100.		IN	A

;; AUTHORITY SECTION:
.			2922	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019033100 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Mar 31 18:37:08 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 100.104.196.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 100.104.196.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
35.233.73.146	attack	35.233.73.146 - - [24/Jun/2020:15:48:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.233.73.146 - - [24/Jun/2020:15:49:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.233.73.146 - - [24/Jun/2020:15:49:01 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-25 01:59:24
83.118.205.162	attackspam	SSH Brute Force	2020-06-25 01:52:58
192.144.129.98	attackspam	Unauthorized connection attempt detected from IP address 192.144.129.98 to port 917	2020-06-25 02:06:26
174.138.0.80	attack	20 attempts against mh-ssh on glow	2020-06-25 01:55:57
27.154.33.210	attackspam	Invalid user deploy from 27.154.33.210 port 59596	2020-06-25 02:06:07
185.106.30.1	attackbotsspam	[24/Jun/2020 x@x [24/Jun/2020 x@x [24/Jun/2020 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.106.30.1	2020-06-25 02:08:19
177.95.92.223	attackbotsspam	Jun 25 00:21:43 webhost01 sshd[7950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.95.92.223 Jun 25 00:21:45 webhost01 sshd[7950]: Failed password for invalid user test from 177.95.92.223 port 53436 ssh2 ...	2020-06-25 01:48:30
104.244.73.251	attackbotsspam	2020-06-24T19:23:56.442655sd-86998 sshd[23178]: Invalid user luan from 104.244.73.251 port 40540 2020-06-24T19:23:56.447566sd-86998 sshd[23178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.73.251 2020-06-24T19:23:56.442655sd-86998 sshd[23178]: Invalid user luan from 104.244.73.251 port 40540 2020-06-24T19:23:58.582241sd-86998 sshd[23178]: Failed password for invalid user luan from 104.244.73.251 port 40540 ssh2 2020-06-24T19:27:17.784288sd-86998 sshd[23552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.73.251 user=root 2020-06-24T19:27:19.512508sd-86998 sshd[23552]: Failed password for root from 104.244.73.251 port 39798 ssh2 ...	2020-06-25 01:52:10
181.48.87.218	attackbots	TCP (SYN) 181.48.87.218:15887 -> port 23, len 40	2020-06-25 01:57:02
213.149.61.120	attackbotsspam	[24/Jun/2020 x@x [24/Jun/2020 x@x [24/Jun/2020 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=213.149.61.120	2020-06-25 01:49:21
1.55.214.139	attackbotsspam	Jun 24 11:04:56 dignus sshd[9432]: Failed password for root from 1.55.214.139 port 49988 ssh2 Jun 24 11:08:25 dignus sshd[9765]: Invalid user gilad from 1.55.214.139 port 49274 Jun 24 11:08:25 dignus sshd[9765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.55.214.139 Jun 24 11:08:27 dignus sshd[9765]: Failed password for invalid user gilad from 1.55.214.139 port 49274 ssh2 Jun 24 11:12:06 dignus sshd[10111]: Invalid user kodi from 1.55.214.139 port 48588 ...	2020-06-25 02:19:34
104.248.152.161	attack	trying to access non-authorized port	2020-06-25 02:09:12
192.35.168.214	attackspam	Scanning an empty webserver with deny all robots.txt	2020-06-25 02:22:38
161.35.196.223	attack	Jun 24 14:00:59 home sshd[25573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.196.223 Jun 24 14:01:01 home sshd[25573]: Failed password for invalid user ashok from 161.35.196.223 port 38696 ssh2 Jun 24 14:04:06 home sshd[25838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.196.223 ...	2020-06-25 01:54:43
192.241.220.151	attack	trying to access non-authorized port	2020-06-25 02:19:13

最近上报的IP列表

139.59.59.194	88.16.157.205	198.108.67.56	122.97.162.122
118.27.32.189	187.157.239.189	205.209.181.196	82.64.57.172
142.44.184.76	185.200.118.38	35.221.129.126	117.102.127.130
123.207.99.21	106.75.91.82	95.63.170.120	14.160.36.126
62.78.84.177	58.242.83.29	153.92.5.199	200.162.160.98