119.6.103.44 - IPInfo

基本信息:

城市(city): Chengdu

省份(region): Sichuan

国家(country): China

运营商(isp): China Unicom Sichuan Province Network

主机名(hostname): unknown

机构(organization): CHINA UNICOM China169 Backbone

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 02:33:17

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.6.103.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45499
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.6.103.44.			IN	A

;; AUTHORITY SECTION:
.			629	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050100 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed May 01 21:36:30 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 44.103.6.119.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 44.103.6.119.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
188.213.49.242	attack	ft-1848-fussball.de 188.213.49.242 [06/Jan/2020:21:52:01 +0100] "POST /wp-login.php HTTP/1.1" 200 7294 "http://ft-1848-fussball.de/wp-login.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)" ft-1848-fussball.de 188.213.49.242 [06/Jan/2020:21:52:04 +0100] "POST /wp-login.php HTTP/1.1" 200 7294 "http://ft-1848-fussball.de/wp-login.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)"	2020-01-07 06:23:34
119.123.30.11	attackspam	Jan 6 21:52:13 grey postfix/smtpd\[30301\]: NOQUEUE: reject: RCPT from unknown\[119.123.30.11\]: 554 5.7.1 Service unavailable\; Client host \[119.123.30.11\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[119.123.30.11\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-01-07 06:18:28
27.72.40.29	attackbotsspam	Unauthorized connection attempt detected from IP address 27.72.40.29 to port 445	2020-01-07 06:14:39
41.160.65.228	attackspam	Brute forcing RDP port 3389	2020-01-07 06:00:20
106.12.178.82	attack	Jan 6 23:12:21 ns381471 sshd[8605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.178.82 Jan 6 23:12:23 ns381471 sshd[8605]: Failed password for invalid user oracle1 from 106.12.178.82 port 43708 ssh2	2020-01-07 06:19:07
194.60.254.166	attackspam	wordpress attack	2020-01-07 06:24:45
197.253.6.249	attackspam	Jan 6 20:52:26 ws25vmsma01 sshd[50829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.253.6.249 Jan 6 20:52:28 ws25vmsma01 sshd[50829]: Failed password for invalid user webguest from 197.253.6.249 port 51507 ssh2 ...	2020-01-07 06:06:17
122.15.82.92	attackspam	$f2bV_matches	2020-01-07 06:21:56
89.134.126.89	attack	Unauthorized connection attempt detected from IP address 89.134.126.89 to port 2220 [J]	2020-01-07 06:20:24
193.29.15.169	attackspambots	193.29.15.169 was recorded 7 times by 4 hosts attempting to connect to the following ports: 53,1900. Incident counter (4h, 24h, all-time): 7, 9, 1865	2020-01-07 06:27:06
110.45.147.55	attackspambots	Jan 6 13:25:00 home sshd[16114]: Invalid user ubnt from 110.45.147.55 port 34026 Jan 6 13:25:01 home sshd[16114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.147.55 Jan 6 13:25:00 home sshd[16114]: Invalid user ubnt from 110.45.147.55 port 34026 Jan 6 13:25:03 home sshd[16114]: Failed password for invalid user ubnt from 110.45.147.55 port 34026 ssh2 Jan 6 13:34:45 home sshd[16175]: Invalid user atir from 110.45.147.55 port 32768 Jan 6 13:34:45 home sshd[16175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.45.147.55 Jan 6 13:34:45 home sshd[16175]: Invalid user atir from 110.45.147.55 port 32768 Jan 6 13:34:47 home sshd[16175]: Failed password for invalid user atir from 110.45.147.55 port 32768 ssh2 Jan 6 13:40:58 home sshd[16216]: Invalid user test1 from 110.45.147.55 port 41286 Jan 6 13:40:58 home sshd[16216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.4	2020-01-07 06:12:37
122.154.241.147	attack	Unauthorized connection attempt detected from IP address 122.154.241.147 to port 2220 [J]	2020-01-07 06:03:00
198.211.120.59	attackbots	01/06/2020-23:04:15.012129 198.211.120.59 Protocol: 17 ET INFO Session Traversal Utilities for NAT (STUN Binding Response)	2020-01-07 06:16:22
49.88.112.62	attackspam	SSH Bruteforce attempt	2020-01-07 05:56:46
222.186.180.41	attackbotsspam	Jan 6 23:16:34 MainVPS sshd[12809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Jan 6 23:16:36 MainVPS sshd[12809]: Failed password for root from 222.186.180.41 port 55280 ssh2 Jan 6 23:16:50 MainVPS sshd[12809]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 55280 ssh2 [preauth] Jan 6 23:16:34 MainVPS sshd[12809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Jan 6 23:16:36 MainVPS sshd[12809]: Failed password for root from 222.186.180.41 port 55280 ssh2 Jan 6 23:16:50 MainVPS sshd[12809]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 55280 ssh2 [preauth] Jan 6 23:16:53 MainVPS sshd[13630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Jan 6 23:16:55 MainVPS sshd[13630]: Failed password for root from 222.186.180.41 port 10936 ss	2020-01-07 06:18:11

最近上报的IP列表

159.65.124.133	61.170.126.79	193.70.117.242	174.219.54.213
22.60.41.34	207.24.233.67	54.39.96.8	197.58.99.155
61.241.199.24	185.67.36.111	166.226.184.184	187.191.114.52
91.167.34.221	250.14.31.177	103.119.66.87	130.40.208.214
132.99.6.88	193.77.242.110	205.109.198.166	221.4.54.100