104.207.142.198

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.207.142.31	attackbots	Dec 17 19:54:18 Ubuntu-1404-trusty-64-minimal sshd\[19800\]: Invalid user opsvik from 104.207.142.31 Dec 17 19:54:18 Ubuntu-1404-trusty-64-minimal sshd\[19800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.207.142.31 Dec 17 19:54:20 Ubuntu-1404-trusty-64-minimal sshd\[19800\]: Failed password for invalid user opsvik from 104.207.142.31 port 51248 ssh2 Dec 17 20:03:46 Ubuntu-1404-trusty-64-minimal sshd\[32169\]: Invalid user http from 104.207.142.31 Dec 17 20:03:46 Ubuntu-1404-trusty-64-minimal sshd\[32169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.207.142.31	2019-12-18 03:26:37
104.207.142.31	attackspambots	Invalid user testlinux from 104.207.142.31 port 32858	2019-12-12 18:49:06
104.207.142.31	attackbots	Dec 11 23:56:14 plusreed sshd[18975]: Invalid user husain from 104.207.142.31 ...	2019-12-12 13:06:13

类型

评论内容

时间

104.207.142.31

attackbots

Dec 17 19:54:18 Ubuntu-1404-trusty-64-minimal sshd\[19800\]: Invalid user opsvik from 104.207.142.31
Dec 17 19:54:18 Ubuntu-1404-trusty-64-minimal sshd\[19800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.207.142.31
Dec 17 19:54:20 Ubuntu-1404-trusty-64-minimal sshd\[19800\]: Failed password for invalid user opsvik from 104.207.142.31 port 51248 ssh2
Dec 17 20:03:46 Ubuntu-1404-trusty-64-minimal sshd\[32169\]: Invalid user http from 104.207.142.31
Dec 17 20:03:46 Ubuntu-1404-trusty-64-minimal sshd\[32169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.207.142.31

2019-12-18 03:26:37

104.207.142.31

attackspambots

Invalid user testlinux from 104.207.142.31 port 32858

2019-12-12 18:49:06

104.207.142.31

attackbots

Dec 11 23:56:14 plusreed sshd[18975]: Invalid user husain from 104.207.142.31
...

2019-12-12 13:06:13

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.207.142.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44845
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.207.142.198.		IN	A

;; AUTHORITY SECTION:
.			222	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:52:37 CST 2022
;; MSG SIZE  rcvd: 108

HOST信息:

198.142.207.104.in-addr.arpa domain name pointer 104.207.142.198.vultr.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
198.142.207.104.in-addr.arpa	name = 104.207.142.198.vultr.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
45.133.99.7	attackbots	(smtpauth) Failed SMTP AUTH login from 45.133.99.7 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-04-04 09:44:01 login authenticator failed for ([45.133.99.7]) [45.133.99.7]: 535 Incorrect authentication data (set_id=cjfree1@dekoningbouw.nl) 2020-04-04 09:44:06 login authenticator failed for ([45.133.99.7]) [45.133.99.7]: 535 Incorrect authentication data (set_id=cjfree1) 2020-04-04 09:45:52 login authenticator failed for ([45.133.99.7]) [45.133.99.7]: 535 Incorrect authentication data (set_id=info@lifehosting.net) 2020-04-04 09:45:57 login authenticator failed for ([45.133.99.7]) [45.133.99.7]: 535 Incorrect authentication data (set_id=info) 2020-04-04 09:52:19 login authenticator failed for ([45.133.99.7]) [45.133.99.7]: 535 Incorrect authentication data (set_id=info@dekoningbouw.nl)	2020-04-04 15:58:04
216.245.196.222	attackspam	[2020-04-04 04:11:03] NOTICE[12114][C-00001346] chan_sip.c: Call from '' (216.245.196.222:5071) to extension '1011442037695493' rejected because extension not found in context 'public'. [2020-04-04 04:11:03] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T04:11:03.474-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1011442037695493",SessionID="0x7f020c0b1098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.245.196.222/5071",ACLName="no_extension_match" [2020-04-04 04:15:10] NOTICE[12114][C-0000134c] chan_sip.c: Call from '' (216.245.196.222:5071) to extension '00442037695493' rejected because extension not found in context 'public'. [2020-04-04 04:15:10] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T04:15:10.777-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00442037695493",SessionID="0x7f020c04b958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IP ...	2020-04-04 16:17:02
92.118.38.82	attackspambots	2020-04-04 10:48:45 dovecot_login authenticator failed for \(User\) \[92.118.38.82\]: 535 Incorrect authentication data \(set_id=lucia@org.ua\)2020-04-04 10:49:19 dovecot_login authenticator failed for \(User\) \[92.118.38.82\]: 535 Incorrect authentication data \(set_id=marta@org.ua\)2020-04-04 10:49:53 dovecot_login authenticator failed for \(User\) \[92.118.38.82\]: 535 Incorrect authentication data \(set_id=faith@org.ua\) ...	2020-04-04 15:52:10
144.217.60.239	attackspam	MLV GET /wp-config.php.save	2020-04-04 15:47:07
151.80.144.255	attackbots	Apr 4 08:15:27 pve sshd[25596]: Failed password for root from 151.80.144.255 port 54961 ssh2 Apr 4 08:19:07 pve sshd[26195]: Failed password for root from 151.80.144.255 port 58315 ssh2	2020-04-04 16:07:06
45.133.99.6	attackspam	Apr 4 09:50:36 srv01 postfix/smtpd\[23240\]: warning: unknown\[45.133.99.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 4 09:50:55 srv01 postfix/smtpd\[23238\]: warning: unknown\[45.133.99.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 4 09:54:36 srv01 postfix/smtpd\[11676\]: warning: unknown\[45.133.99.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 4 09:54:53 srv01 postfix/smtpd\[23238\]: warning: unknown\[45.133.99.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 4 09:55:11 srv01 postfix/smtpd\[23240\]: warning: unknown\[45.133.99.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-04-04 15:58:19
45.133.99.16	attack	Apr 4 06:40:57 mail.srvfarm.net postfix/smtpd[3130896]: warning: unknown[45.133.99.16]: SASL PLAIN authentication failed: Apr 4 06:40:57 mail.srvfarm.net postfix/smtpd[3130896]: lost connection after AUTH from unknown[45.133.99.16] Apr 4 06:41:02 mail.srvfarm.net postfix/smtpd[3111169]: lost connection after CONNECT from unknown[45.133.99.16] Apr 4 06:41:06 mail.srvfarm.net postfix/smtpd[3132373]: lost connection after AUTH from unknown[45.133.99.16] Apr 4 06:41:07 mail.srvfarm.net postfix/smtpd[3130902]: lost connection after AUTH from unknown[45.133.99.16]	2020-04-04 15:57:14
31.13.32.186	attack	Invalid user admin from 31.13.32.186 port 58044	2020-04-04 16:12:15
88.155.205.29	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 04-04-2020 04:55:10.	2020-04-04 15:48:43
54.36.182.244	attackspambots	<6 unauthorized SSH connections	2020-04-04 16:07:55
142.93.63.82	attackspambots	Invalid user mft from 142.93.63.82 port 44360	2020-04-04 16:36:07
217.112.142.67	attack	Apr 4 05:24:54 mail.srvfarm.net postfix/smtpd[3108039]: NOQUEUE: reject: RCPT from unknown[217.112.142.67]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 05:26:26 mail.srvfarm.net postfix/smtpd[3105561]: NOQUEUE: reject: RCPT from unknown[217.112.142.67]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 05:27:41 mail.srvfarm.net postfix/smtpd[3109527]: NOQUEUE: reject: RCPT from unknown[217.112.142.67]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 05:34:51 mail.srvfarm.net postfix/smtpd[3109481]: NOQUEUE: reject: RCPT from unknown[217	2020-04-04 15:49:25
162.243.164.246	attackbotsspam	Apr 4 09:22:35 tuxlinux sshd[64930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.164.246 user=root Apr 4 09:22:36 tuxlinux sshd[64930]: Failed password for root from 162.243.164.246 port 46062 ssh2 Apr 4 09:22:35 tuxlinux sshd[64930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.164.246 user=root Apr 4 09:22:36 tuxlinux sshd[64930]: Failed password for root from 162.243.164.246 port 46062 ssh2 Apr 4 09:44:50 tuxlinux sshd[65477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.164.246 user=root ...	2020-04-04 16:33:42
150.158.116.14	attack	Apr 4 07:26:47 mout sshd[19832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.158.116.14 user=root Apr 4 07:26:49 mout sshd[19832]: Failed password for root from 150.158.116.14 port 35894 ssh2	2020-04-04 15:46:11
182.61.48.143	attackbotsspam	Invalid user student from 182.61.48.143 port 33834	2020-04-04 16:30:57

最近上报的IP列表

101.109.220.149	104.207.142.124	104.207.143.133	104.207.143.142
104.207.142.74	104.207.143.201	104.207.143.144	104.207.142.136
104.207.143.233	104.207.143.248	104.207.144.248	104.207.143.239
101.109.220.160	104.207.144.204	104.207.144.254	104.207.145.117
104.207.144.98	104.207.144.7	104.207.146.178	104.207.145.18

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表