121.206.183.104

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Fujian Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Apr 8 23:48:13 debian-2gb-nbg1-2 kernel: \[8641508.306659\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=121.206.183.104 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=19347 DF PROTO=TCP SPT=40643 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0	2020-04-09 08:57:40

类型

评论内容

时间

attackspam

Apr  8 23:48:13 debian-2gb-nbg1-2 kernel: \[8641508.306659\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=121.206.183.104 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=19347 DF PROTO=TCP SPT=40643 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0

2020-04-09 08:57:40

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.206.183.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27548
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.206.183.104.		IN	A

;; AUTHORITY SECTION:
.			252	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040801 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 09 08:57:36 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

104.183.206.121.in-addr.arpa domain name pointer 104.183.206.121.broad.sm.fj.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.183.206.121.in-addr.arpa	name = 104.183.206.121.broad.sm.fj.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
192.144.183.188	attackspambots	Invalid user oracle from 192.144.183.188 port 38596	2020-09-29 23:01:28
186.211.102.163	attackspam	Automatic report - Banned IP Access	2020-09-29 22:39:17
112.85.42.67	attack	Sep 29 16:21:58 mail sshd[7685]: refused connect from 112.85.42.67 (112.85.42.67) Sep 29 16:22:49 mail sshd[7756]: refused connect from 112.85.42.67 (112.85.42.67) Sep 29 16:23:43 mail sshd[7840]: refused connect from 112.85.42.67 (112.85.42.67) Sep 29 16:24:37 mail sshd[7955]: refused connect from 112.85.42.67 (112.85.42.67) Sep 29 16:25:29 mail sshd[8068]: refused connect from 112.85.42.67 (112.85.42.67) ...	2020-09-29 22:29:00
88.99.227.205	attackbots	Sep 29 13:10:27 ovpn sshd\[28122\]: Invalid user cron from 88.99.227.205 Sep 29 13:10:27 ovpn sshd\[28122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.99.227.205 Sep 29 13:10:29 ovpn sshd\[28122\]: Failed password for invalid user cron from 88.99.227.205 port 50378 ssh2 Sep 29 13:22:45 ovpn sshd\[31246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.99.227.205 user=root Sep 29 13:22:47 ovpn sshd\[31246\]: Failed password for root from 88.99.227.205 port 47932 ssh2	2020-09-29 22:49:24
163.44.149.204	attackbotsspam	SSH Brute Force	2020-09-29 22:52:46
88.255.217.68	attack	Automatic report - Port Scan Attack	2020-09-29 22:42:53
106.12.30.87	attackspambots	Port scan denied	2020-09-29 22:56:05
200.52.60.192	attack	Sep 28 22:38:03 mellenthin postfix/smtpd[9356]: NOQUEUE: reject: RCPT from unknown[200.52.60.192]: 554 5.7.1 Service unavailable; Client host [200.52.60.192] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/200.52.60.192; from= to= proto=ESMTP helo=	2020-09-29 22:51:59
112.85.42.232	attackspambots	2020-09-29T08:54:28.948136yoshi.linuxbox.ninja sshd[3448216]: Failed password for root from 112.85.42.232 port 57826 ssh2 2020-09-29T08:54:31.708739yoshi.linuxbox.ninja sshd[3448216]: Failed password for root from 112.85.42.232 port 57826 ssh2 2020-09-29T08:54:33.273024yoshi.linuxbox.ninja sshd[3448216]: Failed password for root from 112.85.42.232 port 57826 ssh2 ...	2020-09-29 22:43:47
129.146.81.43	attackbots	2020-09-28 UTC: (31x) - Joshua,ariel,arun,backup,best,contador,dave,dc,demo1,deploy,elastic,git,info,iso,lijia,lucas,max,nagios,nodejs,nproc,query,root(7x),root1,rs,wayne	2020-09-29 22:55:03
41.69.244.159	attack	1601325473 - 09/28/2020 22:37:53 Host: 41.69.244.159/41.69.244.159 Port: 445 TCP Blocked	2020-09-29 22:59:04
167.71.109.96	attackspambots	Sep 29 01:49:31 sshd\[19215\]: Invalid user robot from 167.71.109.96Sep 29 01:49:33 sshd\[19215\]: Failed password for invalid user robot from 167.71.109.96 port 47306 ssh2 ...	2020-09-29 22:25:27
212.227.216.58	attackspam	28.09.2020 22:38:41 - Wordpress fail Detected by ELinOX-ALM	2020-09-29 22:26:58
112.238.189.171	attackbots	DATE:2020-09-28 22:38:43, IP:112.238.189.171, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-09-29 22:21:47
37.252.187.140	attack	(sshd) Failed SSH login from 37.252.187.140 (AT/Austria/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 07:48:03 server sshd[17754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.252.187.140 user=root Sep 29 07:48:05 server sshd[17754]: Failed password for root from 37.252.187.140 port 58840 ssh2 Sep 29 07:59:29 server sshd[20884]: Invalid user postgres from 37.252.187.140 port 34086 Sep 29 07:59:31 server sshd[20884]: Failed password for invalid user postgres from 37.252.187.140 port 34086 ssh2 Sep 29 08:03:08 server sshd[22507]: Invalid user www from 37.252.187.140 port 41996	2020-09-29 22:46:31

最近上报的IP列表

45.121.13.5	162.162.86.173	38.47.32.57	201.190.152.230
224.39.56.126	4.44.200.131	133.103.97.236	180.96.60.95
129.100.109.162	78.172.15.147	252.154.9.164	159.179.215.158
243.20.215.117	236.253.115.88	16.49.18.111	118.95.170.192
177.118.107.49	90.107.254.153	222.252.17.110	89.179.243.3