169.0.237.104 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): Afrihost (Pty) Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt from IP address 169.0.237.104 on Port 445(SMB)	2020-03-05 03:51:02

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 169.0.237.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43029
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;169.0.237.104.			IN	A

;; AUTHORITY SECTION:
.			136	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030402 1800 900 604800 86400

;; Query time: 47 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 05 03:50:59 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

104.237.0.169.in-addr.arpa domain name pointer 169-0-237-104.ip.afrihost.co.za.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.237.0.169.in-addr.arpa	name = 169-0-237-104.ip.afrihost.co.za.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
177.69.118.197	attack	"Fail2Ban detected SSH brute force attempt"	2019-12-19 22:44:36
198.211.110.133	attackspambots	Dec 19 11:40:57 MK-Soft-VM4 sshd[9220]: Failed password for root from 198.211.110.133 port 39394 ssh2 Dec 19 11:47:00 MK-Soft-VM4 sshd[12316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.110.133 ...	2019-12-19 22:34:14
138.201.254.88	spambotsattackproxynormal	Log	2019-12-19 22:29:42
218.90.198.56	attackspam	Unauthorised access (Dec 19) SRC=218.90.198.56 LEN=52 TTL=115 ID=8850 DF TCP DPT=1433 WINDOW=8192 SYN	2019-12-19 22:17:57
87.246.7.35	attackbots		2019-12-19 22:52:11
210.18.176.60	attack	port scan and connect, tcp 1433 (ms-sql-s)	2019-12-19 22:39:10
183.81.68.46	attack	Dec 19 15:39:46 mc1 kernel: \[925201.928191\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=183.81.68.46 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=58668 PROTO=TCP SPT=46751 DPT=23 WINDOW=51439 RES=0x00 SYN URGP=0 Dec 19 15:39:46 mc1 kernel: \[925201.980846\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=183.81.68.46 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=58668 PROTO=TCP SPT=46751 DPT=23 WINDOW=51439 RES=0x00 SYN URGP=0 Dec 19 15:39:46 mc1 kernel: \[925201.995263\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=183.81.68.46 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=58668 PROTO=TCP SPT=46751 DPT=23 WINDOW=51439 RES=0x00 SYN URGP=0 ...	2019-12-19 22:44:17
139.0.126.193	attack	Dec 19 15:39:51 grey postfix/smtpd\[23398\]: NOQUEUE: reject: RCPT from unknown\[139.0.126.193\]: 554 5.7.1 Service unavailable\; Client host \[139.0.126.193\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[139.0.126.193\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-19 22:40:00
80.211.78.132	attackbotsspam	Fail2Ban - SSH Bruteforce Attempt	2019-12-19 22:36:44
175.149.75.60	attack	Dec 19 07:27:48 debian-2gb-nbg1-2 kernel: \[389637.638235\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=175.149.75.60 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=7096 PROTO=TCP SPT=23011 DPT=23 WINDOW=46371 RES=0x00 SYN URGP=0	2019-12-19 22:34:41
79.187.192.249	attackspambots	Invalid user hg from 79.187.192.249 port 33758	2019-12-19 22:24:55
129.226.129.144	attack	Dec 19 15:18:30 eventyay sshd[16572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.129.144 Dec 19 15:18:32 eventyay sshd[16572]: Failed password for invalid user guest from 129.226.129.144 port 50796 ssh2 Dec 19 15:27:37 eventyay sshd[16778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.129.144 ...	2019-12-19 22:31:10
36.112.137.21	attackbotsspam	Lines containing failures of 36.112.137.21 Dec 18 14:11:08 shared06 sshd[17189]: Invalid user josh from 36.112.137.21 port 22458 Dec 18 14:11:08 shared06 sshd[17189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.137.21 Dec 18 14:11:10 shared06 sshd[17189]: Failed password for invalid user josh from 36.112.137.21 port 22458 ssh2 Dec 18 14:11:10 shared06 sshd[17189]: Received disconnect from 36.112.137.21 port 22458:11: Bye Bye [preauth] Dec 18 14:11:10 shared06 sshd[17189]: Disconnected from invalid user josh 36.112.137.21 port 22458 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=36.112.137.21	2019-12-19 22:50:01
49.235.140.231	attackbotsspam	SSH Brute Force, server-1 sshd[17583]: Failed password for invalid user lisa from 49.235.140.231 port 3910 ssh2	2019-12-19 22:16:31
106.12.49.118	attackbotsspam	2019-12-19T14:30:48.138991shield sshd\[27486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.49.118 user=root 2019-12-19T14:30:50.057713shield sshd\[27486\]: Failed password for root from 106.12.49.118 port 57662 ssh2 2019-12-19T14:39:38.509039shield sshd\[31314\]: Invalid user heidrich from 106.12.49.118 port 51156 2019-12-19T14:39:38.513186shield sshd\[31314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.49.118 2019-12-19T14:39:40.858319shield sshd\[31314\]: Failed password for invalid user heidrich from 106.12.49.118 port 51156 ssh2	2019-12-19 22:49:47

最近上报的IP列表

81.3.238.10	20.48.187.216	86.204.20.138	99.89.197.252
78.107.253.104	128.199.170.29	200.75.30.165	36.227.3.134
30.162.153.47	179.52.76.121	85.36.230.215	249.88.54.191
202.149.76.176	76.46.67.154	18.198.191.176	136.232.6.194
112.131.23.247	159.123.56.74	189.253.112.31	123.16.252.246