104.195.140.230

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Canada

运营商(isp): Teksavvy Solutions Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jun 1 14:00:15 fhem-rasp sshd[15108]: Connection closed by invalid user admin 104.195.140.230 port 59224 [preauth] Jun 2 14:08:46 fhem-rasp sshd[8141]: Invalid user osmc from 104.195.140.230 port 33013 ...	2020-06-02 20:36:18

类型

评论内容

时间

attack

Jun  1 14:00:15 fhem-rasp sshd[15108]: Connection closed by invalid user admin 104.195.140.230 port 59224 [preauth]
Jun  2 14:08:46 fhem-rasp sshd[8141]: Invalid user osmc from 104.195.140.230 port 33013
...

2020-06-02 20:36:18

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.195.140.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17559
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.195.140.230.		IN	A

;; AUTHORITY SECTION:
.			292	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060200 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 20:36:14 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

230.140.195.104.in-addr.arpa domain name pointer 104-195-140-230.cpe.teksavvy.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
230.140.195.104.in-addr.arpa	name = 104-195-140-230.cpe.teksavvy.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
156.236.65.187	attackbots	Dec 5 17:04:29 ncomp sshd[19613]: Invalid user proxy1 from 156.236.65.187 Dec 5 17:04:29 ncomp sshd[19613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.65.187 Dec 5 17:04:29 ncomp sshd[19613]: Invalid user proxy1 from 156.236.65.187 Dec 5 17:04:31 ncomp sshd[19613]: Failed password for invalid user proxy1 from 156.236.65.187 port 49412 ssh2	2019-12-06 01:34:45
185.53.88.95	attackspambots	\[2019-12-05 12:01:11\] NOTICE\[2754\] chan_sip.c: Registration from '"900" \' failed for '185.53.88.95:5246' - Wrong password \[2019-12-05 12:01:11\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-05T12:01:11.115-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="900",SessionID="0x7f26c5edd138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.95/5246",Challenge="28c7a8f8",ReceivedChallenge="28c7a8f8",ReceivedHash="506850564dd4f78055c544561fb9abd1" \[2019-12-05 12:01:11\] NOTICE\[2754\] chan_sip.c: Registration from '"900" \' failed for '185.53.88.95:5246' - Wrong password \[2019-12-05 12:01:11\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-05T12:01:11.142-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="900",SessionID="0x7f26c619d468",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.	2019-12-06 01:31:47
188.166.251.87	attackspam	Dec 5 17:06:14 hcbbdb sshd\[17528\]: Invalid user guest from 188.166.251.87 Dec 5 17:06:14 hcbbdb sshd\[17528\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.87 Dec 5 17:06:16 hcbbdb sshd\[17528\]: Failed password for invalid user guest from 188.166.251.87 port 41191 ssh2 Dec 5 17:13:30 hcbbdb sshd\[18304\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.87 user=root Dec 5 17:13:32 hcbbdb sshd\[18304\]: Failed password for root from 188.166.251.87 port 44822 ssh2	2019-12-06 01:42:30
218.150.220.230	attackspam	2019-12-05T15:02:34.540464abusebot-5.cloudsearch.cf sshd\[12782\]: Invalid user bjorn from 218.150.220.230 port 59318	2019-12-06 01:09:02
201.93.87.250	attack	Lines containing failures of 201.93.87.250 Dec 3 15:13:57 keyhelp sshd[1595]: Invalid user kamas from 201.93.87.250 port 58949 Dec 3 15:13:57 keyhelp sshd[1595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.93.87.250 Dec 3 15:14:00 keyhelp sshd[1595]: Failed password for invalid user kamas from 201.93.87.250 port 58949 ssh2 Dec 3 15:14:00 keyhelp sshd[1595]: Received disconnect from 201.93.87.250 port 58949:11: Bye Bye [preauth] Dec 3 15:14:00 keyhelp sshd[1595]: Disconnected from invalid user kamas 201.93.87.250 port 58949 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=201.93.87.250	2019-12-06 01:37:50
196.218.180.89	attackspambots	Unauthorized connection attempt from IP address 196.218.180.89 on Port 445(SMB)	2019-12-06 01:40:53
68.183.184.186	attackbots	$f2bV_matches	2019-12-06 01:14:09
94.23.50.194	attackbots	2019-12-05T16:24:07.549633centos sshd\[15958\]: Invalid user cacti from 94.23.50.194 port 53893 2019-12-05T16:24:07.554327centos sshd\[15958\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns301667.ip-94-23-50.eu 2019-12-05T16:24:09.349105centos sshd\[15958\]: Failed password for invalid user cacti from 94.23.50.194 port 53893 ssh2	2019-12-06 01:04:40
188.131.142.109	attack	invalid user	2019-12-06 01:45:55
187.162.51.63	attackbotsspam	Dec 5 10:11:10 home sshd[5709]: Invalid user taurai from 187.162.51.63 port 35420 Dec 5 10:11:10 home sshd[5709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63 Dec 5 10:11:10 home sshd[5709]: Invalid user taurai from 187.162.51.63 port 35420 Dec 5 10:11:12 home sshd[5709]: Failed password for invalid user taurai from 187.162.51.63 port 35420 ssh2 Dec 5 10:20:53 home sshd[5807]: Invalid user maeva from 187.162.51.63 port 39118 Dec 5 10:20:53 home sshd[5807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.51.63 Dec 5 10:20:53 home sshd[5807]: Invalid user maeva from 187.162.51.63 port 39118 Dec 5 10:20:55 home sshd[5807]: Failed password for invalid user maeva from 187.162.51.63 port 39118 ssh2 Dec 5 10:26:13 home sshd[5832]: Invalid user teri from 187.162.51.63 port 44116 Dec 5 10:26:13 home sshd[5832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162	2019-12-06 01:49:08
114.242.245.251	attackspambots	2019-12-05T16:46:25.944631abusebot-7.cloudsearch.cf sshd\[26011\]: Invalid user asterisk from 114.242.245.251 port 49908	2019-12-06 00:59:10
134.209.252.119	attackspambots	Dec 5 17:15:48 lnxmysql61 sshd[25660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.252.119	2019-12-06 01:03:33
168.205.79.24	attack	19/12/5@10:02:40: FAIL: IoT-Telnet address from=168.205.79.24 ...	2019-12-06 01:01:20
139.199.22.148	attackspam	Dec 5 06:50:01 php1 sshd\[1572\]: Invalid user rpm from 139.199.22.148 Dec 5 06:50:01 php1 sshd\[1572\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.22.148 Dec 5 06:50:03 php1 sshd\[1572\]: Failed password for invalid user rpm from 139.199.22.148 port 51306 ssh2 Dec 5 06:57:13 php1 sshd\[2574\]: Invalid user misawa from 139.199.22.148 Dec 5 06:57:13 php1 sshd\[2574\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.22.148	2019-12-06 01:00:51
5.183.181.19	attackspambots	port scan and connect, tcp 1433 (ms-sql-s)	2019-12-06 01:28:07

最近上报的IP列表

81.60.218.166	174.185.95.163	205.246.167.22	191.162.21.214
221.143.110.75	24.42.92.238	189.124.117.129	32.48.242.97
153.119.107.108	92.118.13.121	118.105.100.0	95.135.161.137
47.90.215.164	136.195.154.249	196.34.120.182	18.13.33.230
72.109.236.242	214.195.22.198	118.69.182.217	162.79.221.141