104.237.252.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DedFiberCo

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	[MK-VM4] Blocked by UFW	2020-04-08 02:42:10

相同子网IP讨论:

IP	类型	评论内容	时间
104.237.252.28	attack	2020-05-29T22:23:30.168107vps773228.ovh.net sshd[2250]: Failed password for root from 104.237.252.28 port 36088 ssh2 2020-05-29T22:36:55.735512vps773228.ovh.net sshd[2576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.252.28 user=root 2020-05-29T22:36:58.204330vps773228.ovh.net sshd[2576]: Failed password for root from 104.237.252.28 port 42732 ssh2 2020-05-29T22:50:25.184787vps773228.ovh.net sshd[2939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.252.28 user=root 2020-05-29T22:50:27.182319vps773228.ovh.net sshd[2939]: Failed password for root from 104.237.252.28 port 49392 ssh2 ...	2020-05-30 05:32:46
104.237.252.115	attackbotsspam	Nov 29 09:29:17 mercury auth[16206]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=104.237.252.115 ...	2020-03-04 03:20:59

类型

评论内容

时间

104.237.252.28

attack

2020-05-29T22:23:30.168107vps773228.ovh.net sshd[2250]: Failed password for root from 104.237.252.28 port 36088 ssh2
2020-05-29T22:36:55.735512vps773228.ovh.net sshd[2576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.252.28  user=root
2020-05-29T22:36:58.204330vps773228.ovh.net sshd[2576]: Failed password for root from 104.237.252.28 port 42732 ssh2
2020-05-29T22:50:25.184787vps773228.ovh.net sshd[2939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.252.28  user=root
2020-05-29T22:50:27.182319vps773228.ovh.net sshd[2939]: Failed password for root from 104.237.252.28 port 49392 ssh2
...

2020-05-30 05:32:46

104.237.252.115

attackbotsspam

Nov 29 09:29:17 mercury auth[16206]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=104.237.252.115
...

2020-03-04 03:20:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.237.252.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21734
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.237.252.139.		IN	A

;; AUTHORITY SECTION:
.			408	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040701 1800 900 604800 86400

;; Query time: 126 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 08 02:42:05 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

139.252.237.104.in-addr.arpa domain name pointer 104-237-252-139-host.colocrossing.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
139.252.237.104.in-addr.arpa	name = 104-237-252-139-host.colocrossing.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
117.102.86.125	attackbots	445/tcp 445/tcp [2019-11-19/2020-01-10]2pkt	2020-01-10 19:23:05
46.243.119.61	attack	1433/tcp 445/tcp... [2019-11-12/2020-01-10]5pkt,2pt.(tcp)	2020-01-10 19:42:53
170.178.171.73	attackspambots	1433/tcp 445/tcp... [2019-12-03/2020-01-10]5pkt,2pt.(tcp)	2020-01-10 19:37:54
175.147.195.74	attackbotsspam	23/tcp 23/tcp [2020-01-08/10]2pkt	2020-01-10 20:03:48
1.4.198.24	attackspambots	Unauthorized connection attempt from IP address 1.4.198.24 on Port 445(SMB)	2020-01-10 19:34:18
138.99.216.171	attackspambots	IP: 138.99.216.171 Ports affected Simple Mail Transfer (25) http protocol over TLS/SSL (443) Message Submission (587) World Wide Web HTTP (80) IMAP over TLS protocol (993) Abuse Confidence rating 100% Found in DNSBL('s) ASN Details AS43350 NForce Entertainment B.V. Belize (BZ) CIDR 138.99.216.0/24 Log Date: 10/01/2020 8:08:27 AM UTC	2020-01-10 20:00:35
213.132.246.230	attackbotsspam	2019-01-19 00:01:02 H=\(\[213.132.246.230\]\) \[213.132.246.230\]:64822 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-19 00:01:15 H=\(\[213.132.246.230\]\) \[213.132.246.230\]:7832 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-19 00:01:21 H=\(\[213.132.246.230\]\) \[213.132.246.230\]:36773 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-01-10 19:59:30
93.152.159.11	attackspambots	Jan 10 10:46:50 odroid64 sshd\[20160\]: Invalid user zf from 93.152.159.11 Jan 10 10:46:50 odroid64 sshd\[20160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.152.159.11 ...	2020-01-10 19:31:34
119.40.33.22	attack	Jan 10 07:28:20 marvibiene sshd[32452]: Invalid user elw from 119.40.33.22 port 56737 Jan 10 07:28:20 marvibiene sshd[32452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.33.22 Jan 10 07:28:20 marvibiene sshd[32452]: Invalid user elw from 119.40.33.22 port 56737 Jan 10 07:28:22 marvibiene sshd[32452]: Failed password for invalid user elw from 119.40.33.22 port 56737 ssh2 ...	2020-01-10 19:42:06
46.17.166.151	attackspambots	Lines containing failures of 46.17.166.151 Jan 9 02:39:24 srv sshd[240668]: Invalid user ftp from 46.17.166.151 port 48386 Jan 9 02:39:24 srv sshd[240668]: Received disconnect from 46.17.166.151 port 48386:11: Bye Bye [preauth] Jan 9 02:39:24 srv sshd[240668]: Disconnected from invalid user ftp 46.17.166.151 port 48386 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=46.17.166.151	2020-01-10 19:32:55
185.175.93.14	attackbotsspam	01/10/2020-12:23:43.854919 185.175.93.14 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-01-10 19:35:49
171.246.116.86	attack	Jan 10 07:46:22 grey postfix/smtpd\[16363\]: NOQUEUE: reject: RCPT from unknown\[171.246.116.86\]: 554 5.7.1 Service unavailable\; Client host \[171.246.116.86\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[171.246.116.86\]\; from=\ to=\ proto=ESMTP helo=\<\[171.246.116.86\]\> ...	2020-01-10 19:32:27
114.119.37.38	attack	445/tcp 1433/tcp... [2019-12-30/2020-01-10]8pkt,2pt.(tcp)	2020-01-10 19:39:30
177.134.195.200	attackspam	Unauthorized connection attempt detected from IP address 177.134.195.200 to port 81	2020-01-10 19:43:40
218.107.133.49	attack	Jan 10 12:23:39 mail postfix/smtpd[13393]: warning: unknown[218.107.133.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 10 12:23:48 mail postfix/smtpd[13393]: warning: unknown[218.107.133.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 10 12:24:00 mail postfix/smtpd[13393]: warning: unknown[218.107.133.49]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-01-10 19:40:47

最近上报的IP列表

117.67.111.223	23.108.50.69	110.184.31.205	23.104.184.243
181.46.233.232	62.122.156.74	62.68.59.214	14.254.138.50
59.53.17.73	5.189.167.107	85.174.104.116	190.204.233.140
103.204.60.29	101.95.131.122	10.142.71.191	171.239.179.203
201.156.218.95	36.93.3.254	77.42.81.148	187.192.6.108