104.209.18.139

基本信息:

城市(city): San Jose

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.209.184.31	attack	Feb 25 08:20:02 debian-2gb-nbg1-2 kernel: \[4874401.720306\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.209.184.31 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=16599 PROTO=TCP SPT=54478 DPT=3391 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-25 21:08:59

类型

评论内容

时间

104.209.184.31

attack

Feb 25 08:20:02 debian-2gb-nbg1-2 kernel: \[4874401.720306\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.209.184.31 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=16599 PROTO=TCP SPT=54478 DPT=3391 WINDOW=1024 RES=0x00 SYN URGP=0

2020-02-25 21:08:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.209.18.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31198
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.209.18.139.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024121001 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 11:45:42 CST 2024
;; MSG SIZE  rcvd: 107

HOST信息:

Host 139.18.209.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.18.209.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
138.68.254.244	attack	Oct 8 10:29:52 vps639187 sshd\[8125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.254.244 user=root Oct 8 10:29:54 vps639187 sshd\[8125\]: Failed password for root from 138.68.254.244 port 43284 ssh2 Oct 8 10:33:40 vps639187 sshd\[8215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.254.244 user=root ...	2020-10-08 18:48:25
1.192.192.4	attackspam	26/tcp 111/tcp 999/tcp... [2020-08-26/10-07]10pkt,10pt.(tcp)	2020-10-08 18:22:09
194.5.177.67	attack	Lines containing failures of 194.5.177.67 Oct 7 20:37:48 nodeA4 sshd[17651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.5.177.67 user=r.r Oct 7 20:37:50 nodeA4 sshd[17651]: Failed password for r.r from 194.5.177.67 port 47458 ssh2 Oct 7 20:37:50 nodeA4 sshd[17651]: Received disconnect from 194.5.177.67 port 47458:11: Bye Bye [preauth] Oct 7 20:37:50 nodeA4 sshd[17651]: Disconnected from authenticating user r.r 194.5.177.67 port 47458 [preauth] Oct 7 20:46:00 nodeA4 sshd[18539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.5.177.67 user=r.r Oct 7 20:46:02 nodeA4 sshd[18539]: Failed password for r.r from 194.5.177.67 port 59788 ssh2 Oct 7 20:46:02 nodeA4 sshd[18539]: Received disconnect from 194.5.177.67 port 59788:11: Bye Bye [preauth] Oct 7 20:46:02 nodeA4 sshd[18539]: Disconnected from authenticating user r.r 194.5.177.67 port 59788 [preauth] Oct 7 20:50:47 nodeA4 ........ ------------------------------	2020-10-08 18:13:26
218.92.0.175	attackspambots	Oct 8 07:11:28 shivevps sshd[2727]: Failed password for root from 218.92.0.175 port 26876 ssh2 Oct 8 07:11:31 shivevps sshd[2727]: Failed password for root from 218.92.0.175 port 26876 ssh2 Oct 8 07:11:35 shivevps sshd[2727]: Failed password for root from 218.92.0.175 port 26876 ssh2 ...	2020-10-08 18:12:26
129.204.249.11	attackspam	SSH_attack	2020-10-08 18:32:21
134.73.5.191	attackbotsspam	2020-10-08T13:01:22.947869billing sshd[4108]: Failed password for root from 134.73.5.191 port 47200 ssh2 2020-10-08T13:03:47.625521billing sshd[9642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.191 user=root 2020-10-08T13:03:49.872048billing sshd[9642]: Failed password for root from 134.73.5.191 port 54128 ssh2 ...	2020-10-08 18:14:10
119.29.144.4	attackspam	"Unauthorized connection attempt on SSHD detected"	2020-10-08 18:19:45
103.45.184.64	attack	[portscan] tcp/1433 [MsSQL] *(RWIN=16384)(10080947)	2020-10-08 18:50:37
109.199.164.71	attackbots	Automatic report BANNED IP	2020-10-08 18:42:28
220.186.159.148	attack	Oct 8 11:40:27 v22019038103785759 sshd\[28472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.159.148 user=root Oct 8 11:40:30 v22019038103785759 sshd\[28472\]: Failed password for root from 220.186.159.148 port 37490 ssh2 Oct 8 11:45:26 v22019038103785759 sshd\[28924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.159.148 user=root Oct 8 11:45:28 v22019038103785759 sshd\[28924\]: Failed password for root from 220.186.159.148 port 37332 ssh2 Oct 8 11:49:36 v22019038103785759 sshd\[29246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.159.148 user=root ...	2020-10-08 18:16:11
77.21.184.35	attack	Oct 8 02:25:53 ns381471 sshd[29595]: Failed password for root from 77.21.184.35 port 58229 ssh2	2020-10-08 18:49:08
165.84.180.47	attack	sshd: Failed password for .... from 165.84.180.47 port 48309 ssh2 (10 attempts)	2020-10-08 18:24:24
176.213.140.45	attackspambots	TCP (SYN) 176.213.140.45:18402 -> port 23, len 44	2020-10-08 18:24:55
171.229.131.87	attackspam	TCP (SYN) 171.229.131.87:12932 -> port 23, len 44	2020-10-08 18:28:30
183.134.104.172	attackbotsspam	[MultiHost/MultiPort scan (8)] tcp/1433, tcp/21, tcp/22, tcp/23, tcp/465, tcp/554, tcp/993, udp/5353 [scan/connect: 8 time(s)] in blocklist.de:'listed [unkn]' *(RWIN=8192,-)(10080947)	2020-10-08 18:21:02

最近上报的IP列表

24.111.227.141	219.58.153.60	46.7.203.75	208.193.28.93
130.133.30.246	18.104.77.229	152.173.163.221	22.186.17.216
211.77.159.41	29.6.2.34	44.15.112.105	87.187.214.178
39.179.216.252	72.54.88.211	53.188.68.247	195.0.7.197
137.183.71.218	5.143.245.251	65.189.0.34	200.127.146.204