104.195.140.230

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Canada

运营商(isp): Teksavvy Solutions Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jun 1 14:00:15 fhem-rasp sshd[15108]: Connection closed by invalid user admin 104.195.140.230 port 59224 [preauth] Jun 2 14:08:46 fhem-rasp sshd[8141]: Invalid user osmc from 104.195.140.230 port 33013 ...	2020-06-02 20:36:18

类型

评论内容

时间

attack

Jun  1 14:00:15 fhem-rasp sshd[15108]: Connection closed by invalid user admin 104.195.140.230 port 59224 [preauth]
Jun  2 14:08:46 fhem-rasp sshd[8141]: Invalid user osmc from 104.195.140.230 port 33013
...

2020-06-02 20:36:18

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.195.140.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17559
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.195.140.230.		IN	A

;; AUTHORITY SECTION:
.			292	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060200 1800 900 604800 86400

;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 20:36:14 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

230.140.195.104.in-addr.arpa domain name pointer 104-195-140-230.cpe.teksavvy.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
230.140.195.104.in-addr.arpa	name = 104-195-140-230.cpe.teksavvy.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
31.27.38.242	attackspambots	Feb 15 10:59:09 ns382633 sshd\[20193\]: Invalid user ta from 31.27.38.242 port 54778 Feb 15 10:59:09 ns382633 sshd\[20193\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.27.38.242 Feb 15 10:59:11 ns382633 sshd\[20193\]: Failed password for invalid user ta from 31.27.38.242 port 54778 ssh2 Feb 15 11:22:42 ns382633 sshd\[24130\]: Invalid user postgres from 31.27.38.242 port 48192 Feb 15 11:22:42 ns382633 sshd\[24130\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.27.38.242	2020-02-15 18:36:36
185.143.223.161	attackbots	Feb 15 11:12:30 relay postfix/smtpd\[28817\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\> Feb 15 11:12:30 relay postfix/smtpd\[28817\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\> Feb 15 11:12:30 relay postfix/smtpd\[28817\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\> Feb 15 11:12:30 relay postfix/smtpd\[28817\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 \: Relay access denied\; from=\	2020-02-15 18:34:29
58.215.13.154	attackbotsspam	Brute force attempt	2020-02-15 18:24:44
192.99.37.138	attackbotsspam	20 attempts against mh-misbehave-ban on leaf	2020-02-15 18:18:23
45.83.67.235	attackspam	port scan and connect, tcp 22 (ssh)	2020-02-15 18:32:03
139.59.56.125	attack	Feb 15 06:21:38 [host] sshd[22051]: pam_unix(sshd: Feb 15 06:21:39 [host] sshd[22051]: Failed passwor Feb 15 06:26:48 [host] sshd[22160]: Invalid user g	2020-02-15 18:35:43
45.143.220.4	attackspambots	[2020-02-15 00:17:33] NOTICE[1148][C-000094b3] chan_sip.c: Call from '' (45.143.220.4:29613) to extension '1650390237920793' rejected because extension not found in context 'public'. [2020-02-15 00:17:33] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-15T00:17:33.246-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="1650390237920793",SessionID="0x7fd82c7af4d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.4/5060",ACLName="no_extension_match" [2020-02-15 00:21:45] NOTICE[1148][C-000094ba] chan_sip.c: Call from '' (45.143.220.4:24514) to extension '1450390237920793' rejected because extension not found in context 'public'. [2020-02-15 00:21:45] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-15T00:21:45.337-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="1450390237920793",SessionID="0x7fd82cd36058",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ...	2020-02-15 18:40:12
111.248.60.231	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-15 18:24:13
139.255.37.93	attackspambots	ssh failed login	2020-02-15 18:34:50
118.171.67.165	attackspambots	Fail2Ban Ban Triggered	2020-02-15 18:27:07
103.219.112.47	attackbotsspam	Jan 18 19:07:13 ms-srv sshd[34214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.112.47 Jan 18 19:07:15 ms-srv sshd[34214]: Failed password for invalid user debian from 103.219.112.47 port 40900 ssh2	2020-02-15 18:52:05
178.62.248.130	attack	$f2bV_matches	2020-02-15 18:14:16
125.64.94.221	attackspambots	unauthorized connection attempt	2020-02-15 18:50:52
218.92.0.171	attackbotsspam	SSH bruteforce (Triggered fail2ban)	2020-02-15 18:47:28
111.246.86.126	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-15 18:46:49

最近上报的IP列表

81.60.218.166	174.185.95.163	205.246.167.22	191.162.21.214
221.143.110.75	24.42.92.238	189.124.117.129	32.48.242.97
153.119.107.108	92.118.13.121	118.105.100.0	95.135.161.137
47.90.215.164	136.195.154.249	196.34.120.182	18.13.33.230
72.109.236.242	214.195.22.198	118.69.182.217	162.79.221.141