104.148.119.2 - IPInfo

基本信息:

城市(city): Los Angeles

省份(region): California

国家(country): United States

运营商(isp): n3 Networks

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Autoban 104.148.119.2 AUTH/CONNECT	2019-11-18 17:29:32
attackspam	Bruteforce on SSH Honeypot	2019-11-07 15:15:48

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.148.119.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.148.119.2.			IN	A

;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110700 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 07 15:15:43 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 2.119.148.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.119.148.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
140.143.170.123	attackspam	May 5 16:06:09 server sshd\[122714\]: Invalid user jl from 140.143.170.123 May 5 16:06:09 server sshd\[122714\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.170.123 May 5 16:06:11 server sshd\[122714\]: Failed password for invalid user jl from 140.143.170.123 port 54448 ssh2 ...	2019-07-12 05:56:45
140.143.247.229	attackbotsspam	May 29 06:13:49 server sshd\[117182\]: Invalid user chu from 140.143.247.229 May 29 06:13:49 server sshd\[117182\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.247.229 May 29 06:13:51 server sshd\[117182\]: Failed password for invalid user chu from 140.143.247.229 port 47696 ssh2 ...	2019-07-12 05:43:07
140.143.230.145	attack	May 8 03:20:56 server sshd\[211520\]: Invalid user vo from 140.143.230.145 May 8 03:20:56 server sshd\[211520\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.230.145 May 8 03:20:57 server sshd\[211520\]: Failed password for invalid user vo from 140.143.230.145 port 36574 ssh2 ...	2019-07-12 05:47:13
140.143.222.95	attackspambots	$f2bV_matches	2019-07-12 05:51:55
140.143.203.168	attackspam	May 8 10:48:24 server sshd\[221476\]: Invalid user group from 140.143.203.168 May 8 10:48:24 server sshd\[221476\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.203.168 May 8 10:48:26 server sshd\[221476\]: Failed password for invalid user group from 140.143.203.168 port 38528 ssh2 ...	2019-07-12 05:53:23
14.9.115.224	attackspambots	19/7/11@16:47:10: FAIL: IoT-SSH address from=14.9.115.224 ...	2019-07-12 06:02:17
14.36.104.230	attackbots	May 6 19:53:20 server sshd\[166799\]: Invalid user jc from 14.36.104.230 May 6 19:53:20 server sshd\[166799\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.36.104.230 May 6 19:53:21 server sshd\[166799\]: Failed password for invalid user jc from 14.36.104.230 port 50546 ssh2 ...	2019-07-12 06:05:16
185.220.102.8	attackspam	Jul 11 23:49:45 bouncer sshd\[26101\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.8 user=root Jul 11 23:49:48 bouncer sshd\[26101\]: Failed password for root from 185.220.102.8 port 44099 ssh2 Jul 11 23:49:49 bouncer sshd\[26101\]: Failed password for root from 185.220.102.8 port 44099 ssh2 ...	2019-07-12 06:11:42
82.160.175.251	attackbotsspam	Jul 11 15:53:37 rigel postfix/smtpd[17726]: connect from 82-160-175-251.tktelekom.pl[82.160.175.251] Jul 11 15:53:38 rigel postfix/smtpd[17726]: warning: 82-160-175-251.tktelekom.pl[82.160.175.251]: SASL CRAM-MD5 authentication failed: authentication failure Jul 11 15:53:38 rigel postfix/smtpd[17726]: warning: 82-160-175-251.tktelekom.pl[82.160.175.251]: SASL PLAIN authentication failed: authentication failure Jul 11 15:53:38 rigel postfix/smtpd[17726]: warning: 82-160-175-251.tktelekom.pl[82.160.175.251]: SASL LOGIN authentication failed: authentication failure Jul 11 15:53:38 rigel postfix/smtpd[17726]: disconnect from 82-160-175-251.tktelekom.pl[82.160.175.251] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.160.175.251	2019-07-12 06:09:23
14.18.115.2	attackspambots	May 5 10:51:00 server sshd\[115541\]: Invalid user noc from 14.18.115.2 May 5 10:51:00 server sshd\[115541\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.115.2 May 5 10:51:02 server sshd\[115541\]: Failed password for invalid user noc from 14.18.115.2 port 59856 ssh2 ...	2019-07-12 06:17:30
212.142.226.124	attack	Brute force attempt	2019-07-12 06:04:00
140.143.55.19	attackbotsspam	Jun 26 17:14:24 server sshd\[94688\]: Invalid user gmodserver from 140.143.55.19 Jun 26 17:14:24 server sshd\[94688\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.55.19 Jun 26 17:14:27 server sshd\[94688\]: Failed password for invalid user gmodserver from 140.143.55.19 port 39202 ssh2 ...	2019-07-12 05:37:35
77.43.37.38	attackspam	TCP port 445 (SMB) attempt blocked by firewall. [2019-07-11 16:06:34]	2019-07-12 05:50:38
78.206.153.68	attack	SSH Brute-Force reported by Fail2Ban	2019-07-12 05:46:46
148.163.87.136	attack	Harry, Team4eCom Product description writing for your online store	2019-07-12 05:57:31

最近上报的IP列表

103.112.169.37	102.68.109.129	68.183.42.105	45.117.82.191
31.187.96.68	27.64.60.114	151.101.112.33	14.185.42.250
141.98.80.100	52.71.65.129	51.89.185.101	183.147.22.154
176.51.240.30	80.84.57.116	192.241.240.89	77.54.187.137
85.76.1.245	91.189.92.19	36.7.240.149	134.73.51.220