104.149.152.114

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Psychz Networks

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Sep 25 10:34:21 localhost sshd\[5119\]: Invalid user ems from 104.149.152.114 port 39594 Sep 25 10:34:21 localhost sshd\[5119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.152.114 Sep 25 10:34:23 localhost sshd\[5119\]: Failed password for invalid user ems from 104.149.152.114 port 39594 ssh2	2019-09-25 16:34:32

类型

评论内容

时间

attack

Sep 25 10:34:21 localhost sshd\[5119\]: Invalid user ems from 104.149.152.114 port 39594
Sep 25 10:34:21 localhost sshd\[5119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.149.152.114
Sep 25 10:34:23 localhost sshd\[5119\]: Failed password for invalid user ems from 104.149.152.114 port 39594 ssh2

2019-09-25 16:34:32

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.149.152.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44838
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.149.152.114.		IN	A

;; AUTHORITY SECTION:
.			576	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092500 1800 900 604800 86400

;; Query time: 136 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 25 16:34:27 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

114.152.149.104.in-addr.arpa domain name pointer unassigned.psychz.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
114.152.149.104.in-addr.arpa	name = unassigned.psychz.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
42.112.137.110	attack	Email rejected due to spam filtering	2020-02-28 16:01:11
80.82.77.212	attack	" "	2020-02-28 15:54:40
51.75.206.42	attackbotsspam	Feb 27 21:11:54 eddieflores sshd\[23899\]: Invalid user media from 51.75.206.42 Feb 27 21:11:54 eddieflores sshd\[23899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.ip-51-75-206.eu Feb 27 21:11:56 eddieflores sshd\[23899\]: Failed password for invalid user media from 51.75.206.42 port 35482 ssh2 Feb 27 21:20:25 eddieflores sshd\[24533\]: Invalid user maxwell from 51.75.206.42 Feb 27 21:20:25 eddieflores sshd\[24533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.ip-51-75-206.eu	2020-02-28 15:42:48
58.44.248.165	attack	Automatic report - Port Scan Attack	2020-02-28 15:52:57
185.143.223.173	attack	Feb 28 08:34:55 grey postfix/smtpd\[31571\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.173\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.173\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.170\]\> ...	2020-02-28 16:03:30
84.33.108.165	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-28 15:32:47
223.155.84.224	attackbotsspam	1582865651 - 02/28/2020 11:54:11 Host: 223.155.84.224/223.155.84.224 Port: 11211 UDP Blocked ...	2020-02-28 16:02:17
61.252.141.83	attack	Feb 28 02:36:21 NPSTNNYC01T sshd[7916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.252.141.83 Feb 28 02:36:22 NPSTNNYC01T sshd[7916]: Failed password for invalid user mapred from 61.252.141.83 port 45612 ssh2 Feb 28 02:43:25 NPSTNNYC01T sshd[8440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.252.141.83 ...	2020-02-28 15:45:50
182.93.89.122	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-28 16:13:20
159.65.158.30	attackbots	Feb 28 09:15:12 lukav-desktop sshd\[30427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.30 user=root Feb 28 09:15:14 lukav-desktop sshd\[30427\]: Failed password for root from 159.65.158.30 port 54140 ssh2 Feb 28 09:24:29 lukav-desktop sshd\[23162\]: Invalid user cod2 from 159.65.158.30 Feb 28 09:24:29 lukav-desktop sshd\[23162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.30 Feb 28 09:24:31 lukav-desktop sshd\[23162\]: Failed password for invalid user cod2 from 159.65.158.30 port 34938 ssh2	2020-02-28 15:36:30
212.88.227.236	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/212.88.227.236/ BE - 1H : (2) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BE NAME ASN : ASN6848 IP : 212.88.227.236 CIDR : 212.88.224.0/20 PREFIX COUNT : 97 UNIQUE IP COUNT : 2013952 ATTACKS DETECTED ASN6848 : 1H - 2 3H - 2 6H - 2 12H - 2 24H - 2 DateTime : 2020-02-28 05:54:41 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2020-02-28 15:31:31
164.68.98.145	attack	Feb 28 07:18:12 zeus sshd[9068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.98.145 Feb 28 07:18:13 zeus sshd[9068]: Failed password for invalid user web from 164.68.98.145 port 42414 ssh2 Feb 28 07:26:36 zeus sshd[9226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.68.98.145 Feb 28 07:26:38 zeus sshd[9226]: Failed password for invalid user ec2-user from 164.68.98.145 port 54158 ssh2	2020-02-28 16:08:54
14.232.208.187	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-02-28 15:58:49
199.167.76.25	attack	Automatic report - XMLRPC Attack	2020-02-28 16:08:13
78.186.59.214	attackspam	Honeypot attack, port: 81, PTR: 78.186.59.214.static.ttnet.com.tr.	2020-02-28 16:08:34

最近上报的IP列表

156.78.146.66	16.154.188.253	105.103.245.159	107.239.162.161
127.244.244.244	30.90.109.156	78.164.133.138	243.14.168.144
139.4.136.72	64.57.126.22	124.212.13.246	185.50.197.15
222.181.11.17	185.41.160.235	155.226.60.7	159.35.212.231
195.154.112.70	174.109.61.47	125.24.164.243	103.100.131.182