104.200.144.191

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Total Server Solutions L.L.C.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jul 22 11:50:26 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure	2019-07-23 11:10:31

类型

评论内容

时间

attack

Jul 22 11:50:26 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure
Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure
Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure

2019-07-23 11:10:31

相同子网IP讨论:

IP	类型	评论内容	时间
104.200.144.166	attackspam	SSH Brute Force	2020-04-29 13:37:26
104.200.144.21	attack	Feb 12 00:33:21 mercury smtpd[14994]: 66a183f2249afe8f smtp event=failed-command address=104.200.144.21 host=sendpoker.com command="RCPT to:" result="550 Invalid recipient" ...	2020-03-04 02:42:53
104.200.144.166	attack	Feb 16 05:12:15 sachi sshd\[2133\]: Invalid user roz from 104.200.144.166 Feb 16 05:12:15 sachi sshd\[2133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 16 05:12:17 sachi sshd\[2133\]: Failed password for invalid user roz from 104.200.144.166 port 60464 ssh2 Feb 16 05:15:14 sachi sshd\[2427\]: Invalid user spencer from 104.200.144.166 Feb 16 05:15:14 sachi sshd\[2427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166	2020-02-16 23:43:58
104.200.144.166	attackspam	Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: Invalid user jtx from 104.200.144.166 Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: Invalid user jtx from 104.200.144.166 Feb 9 06:38:13 srv-ubuntu-dev3 sshd[69672]: Failed password for invalid user jtx from 104.200.144.166 port 56382 ssh2 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: Invalid user eie from 104.200.144.166 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: Invalid user eie from 104.200.144.166 Feb 9 06:41:19 srv-ubuntu-dev3 sshd[70089]: Failed password for invalid user eie from 104.200.144.166 port 58026 ssh2 Feb 9 06:44:27 srv-ubuntu-dev3 sshd[70413]: Invalid user uqk from 104.200.144.166 ...	2020-02-09 20:38:10
104.200.144.166	attack	Jan 3 21:23:48 ws25vmsma01 sshd[53744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Jan 3 21:23:50 ws25vmsma01 sshd[53744]: Failed password for invalid user jyd from 104.200.144.166 port 33162 ssh2 ...	2020-01-04 06:12:45
104.200.144.1	attack	SSH login attempts with user root at 2020-01-02.	2020-01-03 03:34:35
104.200.144.166	attack	2020-01-01T07:08:35.234788shield sshd\[22116\]: Invalid user freusen from 104.200.144.166 port 34482 2020-01-01T07:08:35.239076shield sshd\[22116\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 2020-01-01T07:08:37.103556shield sshd\[22116\]: Failed password for invalid user freusen from 104.200.144.166 port 34482 ssh2 2020-01-01T07:11:03.942293shield sshd\[23017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 user=root 2020-01-01T07:11:05.455850shield sshd\[23017\]: Failed password for root from 104.200.144.166 port 33920 ssh2	2020-01-01 15:13:11

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.200.144.191
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29755
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.200.144.191.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 23 11:10:25 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 191.144.200.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 191.144.200.104.in-addr.arpa: NXDOMAIN

IP	类型	评论内容	时间
148.70.250.207	attack	Jan 19 12:49:59 ny01 sshd[21067]: Failed password for root from 148.70.250.207 port 60959 ssh2 Jan 19 12:53:02 ny01 sshd[21392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.250.207 Jan 19 12:53:05 ny01 sshd[21392]: Failed password for invalid user t1 from 148.70.250.207 port 44084 ssh2	2020-01-20 02:04:39
222.186.42.4	attack	$f2bV_matches_ltvn	2020-01-20 02:33:35
121.168.115.36	attack	$f2bV_matches	2020-01-20 02:12:45
219.77.90.134	attackbotsspam	Honeypot attack, port: 5555, PTR: n219077090134.netvigator.com.	2020-01-20 02:20:15
173.226.178.69	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-20 02:28:27
109.236.138.90	attackspambots	Honeypot attack, port: 5555, PTR: 109.236.138.90.wls.msr91gkk3.adsl.dyn.edpnet.net.	2020-01-20 02:18:53
1.0.168.140	attack	Honeypot attack, port: 445, PTR: node-80c.pool-1-0.dynamic.totinternet.net.	2020-01-20 02:05:06
193.242.176.243	attackbots	Unauthorized connection attempt detected from IP address 193.242.176.243 to port 81 [J]	2020-01-20 02:14:59
182.191.79.107	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-20 02:29:33
42.82.125.188	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-01-20 02:16:44
113.175.198.236	attackspam	1579438454 - 01/19/2020 13:54:14 Host: 113.175.198.236/113.175.198.236 Port: 445 TCP Blocked	2020-01-20 02:31:40
187.159.86.81	attackbotsspam	Unauthorized connection attempt detected from IP address 187.159.86.81 to port 2323 [J]	2020-01-20 02:35:30
5.206.17.206	attack	1579438476 - 01/19/2020 13:54:36 Host: 5.206.17.206/5.206.17.206 Port: 445 TCP Blocked	2020-01-20 02:13:00
1.85.43.154	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-20 02:14:29
196.223.157.7	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-20 02:33:59

最近上报的IP列表

177.42.196.13	58.136.144.22	51.158.113.194	167.92.120.11
126.189.111.239	117.172.79.198	123.28.85.10	190.113.178.68
175.149.14.66	125.25.224.146	108.34.173.186	46.177.195.249
202.142.178.114	37.202.127.12	14.115.89.56	186.153.213.181
190.137.205.3	112.16.203.56	223.145.230.224	179.113.217.217