122.144.200.104

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Science & Technology Network Communication Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	May 21 05:54:03 debian-2gb-nbg1-2 kernel: \[12292067.295701\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.144.200.104 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=2087 DF PROTO=TCP SPT=57520 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0	2020-05-21 15:54:12

类型

评论内容

时间

attackspambots

May 21 05:54:03 debian-2gb-nbg1-2 kernel: \[12292067.295701\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.144.200.104 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=2087 DF PROTO=TCP SPT=57520 DPT=6379 WINDOW=29200 RES=0x00 SYN URGP=0

2020-05-21 15:54:12

相同子网IP讨论:

IP	类型	评论内容	时间
122.144.200.14	attackspam	Jun 18 04:34:40 onepixel sshd[1881813]: Invalid user write from 122.144.200.14 port 5935 Jun 18 04:34:40 onepixel sshd[1881813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.200.14 Jun 18 04:34:40 onepixel sshd[1881813]: Invalid user write from 122.144.200.14 port 5935 Jun 18 04:34:42 onepixel sshd[1881813]: Failed password for invalid user write from 122.144.200.14 port 5935 ssh2 Jun 18 04:38:07 onepixel sshd[1883375]: Invalid user pau from 122.144.200.14 port 5940	2020-06-18 15:56:23
122.144.200.14	attack	Jun 8 14:03:56 host sshd[6928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.200.14 user=root Jun 8 14:03:58 host sshd[6928]: Failed password for root from 122.144.200.14 port 2752 ssh2 ...	2020-06-09 01:22:39

类型

评论内容

时间

122.144.200.14

attackspam

Jun 18 04:34:40 onepixel sshd[1881813]: Invalid user write from 122.144.200.14 port 5935
Jun 18 04:34:40 onepixel sshd[1881813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.200.14 
Jun 18 04:34:40 onepixel sshd[1881813]: Invalid user write from 122.144.200.14 port 5935
Jun 18 04:34:42 onepixel sshd[1881813]: Failed password for invalid user write from 122.144.200.14 port 5935 ssh2
Jun 18 04:38:07 onepixel sshd[1883375]: Invalid user pau from 122.144.200.14 port 5940

2020-06-18 15:56:23

122.144.200.14

attack

Jun  8 14:03:56 host sshd[6928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.200.14  user=root
Jun  8 14:03:58 host sshd[6928]: Failed password for root from 122.144.200.14 port 2752 ssh2
...

2020-06-09 01:22:39

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 122.144.200.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33468
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;122.144.200.104.		IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052101 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 21 15:54:02 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 104.200.144.122.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.200.144.122.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
174.138.0.164	attackspam	B: zzZZzz blocked content access	2019-10-20 07:54:54
110.137.237.198	attackbotsspam	CMS brute force ...	2019-10-20 07:48:09
139.59.79.56	attackbotsspam	Apr 11 23:44:35 server sshd\[135996\]: Invalid user test3 from 139.59.79.56 Apr 11 23:44:35 server sshd\[135996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.79.56 Apr 11 23:44:37 server sshd\[135996\]: Failed password for invalid user test3 from 139.59.79.56 port 35656 ssh2 ...	2019-10-20 07:57:11
162.241.70.145	attackspam	Bad crawling causing excessive 404 errors	2019-10-20 08:21:07
220.165.28.189	attack	Automatic report - Banned IP Access	2019-10-20 07:50:17
61.185.139.72	attackspambots	Automatic report - Banned IP Access	2019-10-20 08:19:20
81.22.45.190	attackbots	Oct 20 01:53:12 mc1 kernel: \[2815551.313967\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=51276 PROTO=TCP SPT=42732 DPT=14770 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 20 01:58:19 mc1 kernel: \[2815858.802380\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=46896 PROTO=TCP SPT=42732 DPT=14866 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 20 01:58:27 mc1 kernel: \[2815866.839605\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=27956 PROTO=TCP SPT=42732 DPT=14514 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-10-20 08:18:36
80.249.161.171	attack	"Dobroslava" 69.94.151.126 hzehjx709625060366905040568460@rc.cumannnabhfear.com http://cumannnabhfear.com/aa.php?a=25yu35661726wp0qrxya82ks5n887mz2f7bkpt	2019-10-20 08:07:39
83.31.250.88	attack	Automatic report - Port Scan Attack	2019-10-20 12:00:40
123.207.2.120	attackbots	2019-10-19T23:16:01.273027abusebot-5.cloudsearch.cf sshd\[12389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.2.120 user=root	2019-10-20 07:55:42
51.68.230.25	attackspambots	Oct 20 01:38:18 vps01 sshd[4179]: Failed password for root from 51.68.230.25 port 34688 ssh2	2019-10-20 07:50:06
202.9.123.194	attackbotsspam	From CCTV User Interface Log ...::ffff:202.9.123.194 - - [19/Oct/2019:16:11:42 +0000] "GET / HTTP/1.1" 200 960 ...	2019-10-20 08:19:35
196.196.219.18	attackbotsspam	Oct 19 12:39:30 tdfoods sshd\[7976\]: Invalid user Auftrag123 from 196.196.219.18 Oct 19 12:39:30 tdfoods sshd\[7976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.219.18 Oct 19 12:39:33 tdfoods sshd\[7976\]: Failed password for invalid user Auftrag123 from 196.196.219.18 port 40844 ssh2 Oct 19 12:43:15 tdfoods sshd\[8272\]: Invalid user angel1234 from 196.196.219.18 Oct 19 12:43:15 tdfoods sshd\[8272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.196.219.18	2019-10-20 07:53:34
106.12.110.157	attack	Oct 20 01:24:47 jane sshd[19132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.110.157 Oct 20 01:24:49 jane sshd[19132]: Failed password for invalid user web from 106.12.110.157 port 34772 ssh2 ...	2019-10-20 08:11:50
179.185.89.64	attack	Oct 20 03:07:46 www sshd\[59950\]: Invalid user gauthier from 179.185.89.64 Oct 20 03:07:46 www sshd\[59950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.185.89.64 Oct 20 03:07:48 www sshd\[59950\]: Failed password for invalid user gauthier from 179.185.89.64 port 26129 ssh2 ...	2019-10-20 08:21:51

最近上报的IP列表

189.125.93.12	122.114.113.158	113.53.164.240	41.42.147.127
171.4.247.120	78.166.58.186	172.217.130.73	120.198.74.42
223.167.18.133	61.68.190.50	188.172.220.71	36.133.97.103
104.198.208.205	124.202.158.24	2.177.226.226	39.98.172.174
42.118.235.154	112.78.117.13	14.165.70.146	34.192.80.126