39.104.23.104 - IPInfo

基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
39.104.235.66	attackbots	IP: 39.104.235.66 Ports affected World Wide Web HTTP (80) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS37963 Hangzhou Alibaba Advertising Co. Ltd. China (CN) CIDR 39.104.0.0/14 Log Date: 6/03/2020 3:26:54 PM UTC	2020-03-07 02:47:54

类型

评论内容

时间

39.104.235.66

attackbots

IP: 39.104.235.66
Ports affected
    World Wide Web HTTP (80) 
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
   AS37963 Hangzhou Alibaba Advertising Co. Ltd.
   China (CN)
   CIDR 39.104.0.0/14
Log Date: 6/03/2020 3:26:54 PM UTC

2020-03-07 02:47:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.104.23.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19049
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;39.104.23.104.			IN	A

;; AUTHORITY SECTION:
.			228	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061401 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 08:19:46 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 104.23.104.39.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.23.104.39.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
179.108.240.119	attackspam	Aug 10 13:47:05 mail.srvfarm.net postfix/smtpd[1652469]: warning: unknown[179.108.240.119]: SASL PLAIN authentication failed: Aug 10 13:47:06 mail.srvfarm.net postfix/smtpd[1652469]: lost connection after AUTH from unknown[179.108.240.119] Aug 10 13:49:43 mail.srvfarm.net postfix/smtpd[1653291]: warning: unknown[179.108.240.119]: SASL PLAIN authentication failed: Aug 10 13:49:44 mail.srvfarm.net postfix/smtpd[1653291]: lost connection after AUTH from unknown[179.108.240.119] Aug 10 13:53:47 mail.srvfarm.net postfix/smtpd[1653890]: warning: unknown[179.108.240.119]: SASL PLAIN authentication failed:	2020-08-10 23:56:13
113.110.228.73	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-11 00:16:14
178.62.75.60	attackbots	Bruteforce detected by fail2ban	2020-08-11 00:33:47
46.172.226.56	attackbots	Aug 10 13:53:40 * sshd[28180]: Invalid user admin from 46.172.226.56 Aug 10 13:53:40 * sshd[28180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.172.226.56 Aug 10 13:53:42 * sshd[28180]: Failed password for invalid user admin from 46.172.226.56 port 52795 ssh2 Aug 10 13:53:42 * sshd[28180]: Received disconnect from 46.172.226.56: 11: Bye Bye [preauth] Aug 10 13:53:42 * sshd[28182]: Invalid user admin from 46.172.226.56 Aug 10 13:53:42 * sshd[28182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.172.226.56 Aug 10 13:53:44 * sshd[28182]: Failed password for invalid user admin from 46.172.226.56 port 52862 ssh2 Aug 10 13:53:44 * sshd[28182]: Received disconnect from 46.172.226.56: 11: Bye Bye [preauth] Aug 10 13:53:45 * sshd[28184]: Invalid user admin from 46.172.226.56 Aug 10 13:53:45 * sshd[28184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu........ -------------------------------	2020-08-11 00:01:47
51.210.44.194	attackspam	Aug 10 14:05:26 ns41 sshd[8645]: Failed password for root from 51.210.44.194 port 56724 ssh2 Aug 10 14:05:26 ns41 sshd[8645]: Failed password for root from 51.210.44.194 port 56724 ssh2	2020-08-11 00:16:37
65.49.210.49	attack	Port Scan detected from 65.49.210.49 (US/United States/California/Los Angeles (Downtown)/65.49.210.49.16clouds.com). 4 hits in the last 75 seconds	2020-08-11 00:29:31
112.85.42.185	attackbots	2020-08-10T18:41:38.404667lavrinenko.info sshd[17645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.185 user=root 2020-08-10T18:41:41.015572lavrinenko.info sshd[17645]: Failed password for root from 112.85.42.185 port 61710 ssh2 2020-08-10T18:41:38.404667lavrinenko.info sshd[17645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.185 user=root 2020-08-10T18:41:41.015572lavrinenko.info sshd[17645]: Failed password for root from 112.85.42.185 port 61710 ssh2 2020-08-10T18:41:45.194837lavrinenko.info sshd[17645]: Failed password for root from 112.85.42.185 port 61710 ssh2 ...	2020-08-11 00:00:13
101.71.3.53	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-10T14:16:04Z and 2020-08-10T14:21:56Z	2020-08-11 00:26:38
209.85.218.66	attackspam	Spam from dubaibased.investment@gmail.com	2020-08-10 23:50:51
198.12.32.123	attackspambots	TCP (SYN) 198.12.32.123:35154 -> port 22, len 60	2020-08-11 00:24:34
125.21.227.181	attackbotsspam	Aug 10 14:00:14 vpn01 sshd[15846]: Failed password for root from 125.21.227.181 port 59312 ssh2 ...	2020-08-10 23:50:15
129.211.66.195	attackspambots	Aug 10 16:44:01 journals sshd\[63162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.66.195 user=root Aug 10 16:44:04 journals sshd\[63162\]: Failed password for root from 129.211.66.195 port 47512 ssh2 Aug 10 16:47:43 journals sshd\[63512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.66.195 user=root Aug 10 16:47:44 journals sshd\[63512\]: Failed password for root from 129.211.66.195 port 58056 ssh2 Aug 10 16:51:09 journals sshd\[63898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.66.195 user=root ...	2020-08-11 00:03:00
49.83.151.151	attack	Lines containing failures of 49.83.151.151 Aug 10 13:53:35 nbi-636 sshd[32623]: Bad protocol version identification '' from 49.83.151.151 port 54644 Aug 10 13:53:38 nbi-636 sshd[32629]: Invalid user admin from 49.83.151.151 port 54935 Aug 10 13:53:38 nbi-636 sshd[32629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.151.151 Aug 10 13:53:40 nbi-636 sshd[32629]: Failed password for invalid user admin from 49.83.151.151 port 54935 ssh2 Aug 10 13:53:42 nbi-636 sshd[32629]: Connection closed by invalid user admin 49.83.151.151 port 54935 [preauth] Aug 10 13:53:45 nbi-636 sshd[32634]: Invalid user admin from 49.83.151.151 port 56797 Aug 10 13:53:45 nbi-636 sshd[32634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.151.151 Aug 10 13:53:47 nbi-636 sshd[32634]: Failed password for invalid user admin from 49.83.151.151 port 56797 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/vi	2020-08-11 00:11:08
216.104.200.173	attackbots	Lines containing failures of 216.104.200.173 Aug 10 13:52:43 shared04 sshd[6877]: Did not receive identification string from 216.104.200.173 port 60618 Aug 10 13:52:48 shared04 sshd[6881]: Invalid user 666666 from 216.104.200.173 port 61093 Aug 10 13:52:48 shared04 sshd[6881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.104.200.173 Aug 10 13:52:50 shared04 sshd[6881]: Failed password for invalid user 666666 from 216.104.200.173 port 61093 ssh2 Aug 10 13:52:51 shared04 sshd[6881]: Connection closed by invalid user 666666 216.104.200.173 port 61093 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=216.104.200.173	2020-08-10 23:53:41
189.91.3.16	attackbotsspam	Aug 10 16:33:27 mail.srvfarm.net postfix/smtps/smtpd[1720774]: warning: unknown[189.91.3.16]: SASL PLAIN authentication failed: Aug 10 16:33:28 mail.srvfarm.net postfix/smtps/smtpd[1720774]: lost connection after AUTH from unknown[189.91.3.16] Aug 10 16:35:18 mail.srvfarm.net postfix/smtpd[1721698]: warning: unknown[189.91.3.16]: SASL PLAIN authentication failed: Aug 10 16:35:19 mail.srvfarm.net postfix/smtpd[1721698]: lost connection after AUTH from unknown[189.91.3.16] Aug 10 16:38:34 mail.srvfarm.net postfix/smtps/smtpd[1718300]: warning: unknown[189.91.3.16]: SASL PLAIN authentication failed:	2020-08-10 23:55:51

最近上报的IP列表

39.100.96.123	24.148.92.239	24.152.50.5	38.123.112.92
38.123.112.154	38.123.113.100	38.123.116.152	38.123.113.232
38.123.115.158	27.22.79.159	27.22.82.32	27.22.92.187
27.22.93.46	27.23.57.111	27.22.133.111	27.23.76.130
27.29.44.77	27.29.44.251	27.29.44.180	27.29.46.158