196.52.43.104 - IPInfo

基本信息:

城市(city): Edison

省份(region): New Jersey

国家(country): United States

运营商(isp): Net Systems Research LLC

主机名(hostname): unknown

机构(organization): LeaseWeb Netherlands B.V.

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Icarus honeypot on github	2020-10-02 05:25:56
attack	Port scanning [2 denied]	2020-10-01 21:45:42
attackbots	Port scanning [2 denied]	2020-10-01 14:02:14
attackbots	Unauthorized connection attempt detected from IP address 196.52.43.104 to port 3389 [T]	2020-09-01 15:33:42
attackspambots	Port scan denied	2020-08-29 22:09:33
attack	Unauthorized connection attempt detected from IP address 196.52.43.104 to port 8531	2020-08-08 16:43:29
attack	Port scan: Attack repeated for 24 hours	2020-08-07 08:30:07
attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-08-02 02:43:40
attackbotsspam	TCP (SYN) 196.52.43.104:52277 -> port 995, len 44	2020-07-29 18:41:24
attack	TCP (SYN) 196.52.43.104:52108 -> port 22, len 44	2020-07-21 14:32:41
attackspam	TCP (SYN) 196.52.43.104:63064 -> port 8080, len 44	2020-07-01 05:30:49
attackbotsspam	TCP (SYN) 196.52.43.104:58436 -> port 9595, len 44	2020-06-09 17:38:22
attack	Port scan denied	2020-05-27 17:46:41
attack	Port Scan: Events[2] countPorts[2]: 68 47808 ..	2020-04-18 06:15:03
attackbotsspam	firewall-block, port(s): 5000/tcp	2020-03-27 05:42:58
attack	Unauthorized connection attempt detected from IP address 196.52.43.104 to port 995 [J]	2020-01-25 18:28:58
attackbotsspam	Unauthorized connection attempt detected from IP address 196.52.43.104 to port 554 [J]	2020-01-19 07:13:11
attack	Unauthorized connection attempt detected from IP address 196.52.43.104 to port 3390	2020-01-04 18:57:45
attackbotsspam	20249/tcp 62078/tcp 5632/udp... [2019-10-25/12-24]33pkt,27pt.(tcp),4pt.(udp)	2019-12-25 00:37:57
attackspam	Unauthorized access to SSH at 24/Dec/2019:13:43:28 +0000. Received: (SSH-2.0-ZGrab ZGrab SSH Survey)	2019-12-24 22:35:35
attackspambots	11/09/2019-01:25:55.717116 196.52.43.104 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-09 17:23:01
attackspambots	Automatic report - Port Scan Attack	2019-10-17 00:54:32
attackspam	Port Scan: TCP/5902	2019-10-06 06:24:03
attackspambots	Unauthorised access (Aug 2) SRC=196.52.43.104 LEN=44 TTL=247 ID=54321 TCP DPT=445 WINDOW=65535 SYN	2019-08-03 04:50:13

相同子网IP讨论:

IP	类型	评论内容	时间
196.52.43.60	attack	Automatic report - Banned IP Access	2020-10-14 07:46:54
196.52.43.115	attackbots	TCP (SYN) 196.52.43.115:56130 -> port 2160, len 44	2020-10-13 17:32:04
196.52.43.114	attack	Unauthorized connection attempt from IP address 196.52.43.114 on port 995	2020-10-10 03:03:56
196.52.43.114	attackspam	Found on Binary Defense / proto=6 . srcport=63823 . dstport=8443 . (1427)	2020-10-09 18:52:06
196.52.43.121	attackspam	Automatic report - Banned IP Access	2020-10-09 02:05:24
196.52.43.121	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-08 18:02:18
196.52.43.126	attack	TCP (SYN) 196.52.43.126:54968 -> port 443, len 44	2020-10-08 03:08:25
196.52.43.128	attack	Icarus honeypot on github	2020-10-07 20:47:59
196.52.43.126	attack	ICMP MH Probe, Scan /Distributed -	2020-10-07 19:22:26
196.52.43.122	attack	TCP (SYN) 196.52.43.122:52843 -> port 135, len 44	2020-10-07 01:36:24
196.52.43.114	attackbots	ET SCAN Suspicious inbound to Oracle SQL port 1521 - port: 1521 proto: tcp cat: Potentially Bad Trafficbytes: 60	2020-10-07 00:53:57
196.52.43.122	attackspam	Found on CINS badguys / proto=6 . srcport=55544 . dstport=37777 . (1018)	2020-10-06 17:29:58
196.52.43.114	attackspam	IP 196.52.43.114 attacked honeypot on port: 593 at 10/6/2020 12:39:34 AM	2020-10-06 16:47:14
196.52.43.116	attackspambots	8899/tcp 990/tcp 9080/tcp... [2020-08-03/10-03]83pkt,59pt.(tcp),5pt.(udp)	2020-10-05 06:15:24
196.52.43.123	attackspambots	6363/tcp 9042/tcp 9000/tcp... [2020-08-04/10-03]65pkt,50pt.(tcp),2pt.(udp)	2020-10-05 06:00:35

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.52.43.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17506
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;196.52.43.104.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 03 11:53:26 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

104.43.52.196.in-addr.arpa domain name pointer 196.52.43.104.netsystemsresearch.com.

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
104.43.52.196.in-addr.arpa	name = 196.52.43.104.netsystemsresearch.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
58.234.45.190	attack	Aug 8 22:32:03 melroy-server sshd[2341]: Failed password for root from 58.234.45.190 port 48307 ssh2 ...	2020-08-09 06:38:13
122.51.18.119	attack	2020-08-08T22:20:43.070458abusebot-2.cloudsearch.cf sshd[10217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.18.119 user=root 2020-08-08T22:20:45.147806abusebot-2.cloudsearch.cf sshd[10217]: Failed password for root from 122.51.18.119 port 58568 ssh2 2020-08-08T22:23:42.652792abusebot-2.cloudsearch.cf sshd[10221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.18.119 user=root 2020-08-08T22:23:44.637358abusebot-2.cloudsearch.cf sshd[10221]: Failed password for root from 122.51.18.119 port 49090 ssh2 2020-08-08T22:26:43.635644abusebot-2.cloudsearch.cf sshd[10278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.18.119 user=root 2020-08-08T22:26:45.467501abusebot-2.cloudsearch.cf sshd[10278]: Failed password for root from 122.51.18.119 port 39618 ssh2 2020-08-08T22:29:44.868424abusebot-2.cloudsearch.cf sshd[10287]: pam_unix(sshd:auth): authe ...	2020-08-09 06:41:47
139.155.86.130	attack	Aug 8 22:19:50 ncomp sshd[17513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.86.130 user=root Aug 8 22:19:52 ncomp sshd[17513]: Failed password for root from 139.155.86.130 port 39338 ssh2 Aug 8 22:26:31 ncomp sshd[17603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.86.130 user=root Aug 8 22:26:34 ncomp sshd[17603]: Failed password for root from 139.155.86.130 port 48310 ssh2	2020-08-09 06:26:48
112.16.211.200	attack	Aug 8 17:35:20 NPSTNNYC01T sshd[16804]: Failed password for root from 112.16.211.200 port 44326 ssh2 Aug 8 17:37:10 NPSTNNYC01T sshd[16986]: Failed password for root from 112.16.211.200 port 36752 ssh2 ...	2020-08-09 06:58:14
203.195.204.106	attackbots	Aug 8 21:26:15 gospond sshd[28573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.204.106 user=root Aug 8 21:26:17 gospond sshd[28573]: Failed password for root from 203.195.204.106 port 42010 ssh2 ...	2020-08-09 06:37:13
118.244.195.141	attackbotsspam	Aug 9 00:10:05 vps639187 sshd\[15800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.244.195.141 user=root Aug 9 00:10:06 vps639187 sshd\[15800\]: Failed password for root from 118.244.195.141 port 11802 ssh2 Aug 9 00:14:09 vps639187 sshd\[15895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.244.195.141 user=root ...	2020-08-09 06:30:48
111.161.41.86	attackbots	SERVER-WEBAPP Joomla JDatabaseDriverMysqli unserialize code execution attempt	2020-08-09 06:40:51
134.175.132.12	attackspambots	Aug 8 22:08:59 rush sshd[3268]: Failed password for root from 134.175.132.12 port 42512 ssh2 Aug 8 22:13:45 rush sshd[3514]: Failed password for root from 134.175.132.12 port 54632 ssh2 ...	2020-08-09 06:22:36
180.166.150.114	attackbotsspam	(sshd) Failed SSH login from 180.166.150.114 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 8 23:44:05 amsweb01 sshd[5714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.150.114 user=root Aug 8 23:44:06 amsweb01 sshd[5714]: Failed password for root from 180.166.150.114 port 22472 ssh2 Aug 8 23:48:38 amsweb01 sshd[6379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.150.114 user=root Aug 8 23:48:40 amsweb01 sshd[6379]: Failed password for root from 180.166.150.114 port 40247 ssh2 Aug 8 23:52:22 amsweb01 sshd[7012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.150.114 user=root	2020-08-09 06:56:45
51.195.136.14	attackspam	Aug 8 18:54:57 ws12vmsma01 sshd[62046]: Failed password for root from 51.195.136.14 port 55994 ssh2 Aug 8 18:59:05 ws12vmsma01 sshd[62631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-2b23bbbe.vps.ovh.net user=root Aug 8 18:59:07 ws12vmsma01 sshd[62631]: Failed password for root from 51.195.136.14 port 39670 ssh2 ...	2020-08-09 06:35:51
37.187.54.45	attackbotsspam	Aug 8 22:54:45 ns382633 sshd\[2500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.45 user=root Aug 8 22:54:47 ns382633 sshd\[2500\]: Failed password for root from 37.187.54.45 port 45576 ssh2 Aug 8 23:03:06 ns382633 sshd\[4308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.45 user=root Aug 8 23:03:09 ns382633 sshd\[4308\]: Failed password for root from 37.187.54.45 port 41796 ssh2 Aug 8 23:06:14 ns382633 sshd\[5177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.54.45 user=root	2020-08-09 06:27:35
222.186.173.142	attackspambots	Aug 9 00:31:59 abendstille sshd\[17262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Aug 9 00:31:59 abendstille sshd\[17264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Aug 9 00:32:01 abendstille sshd\[17262\]: Failed password for root from 222.186.173.142 port 6596 ssh2 Aug 9 00:32:02 abendstille sshd\[17264\]: Failed password for root from 222.186.173.142 port 10984 ssh2 Aug 9 00:32:05 abendstille sshd\[17262\]: Failed password for root from 222.186.173.142 port 6596 ssh2 ...	2020-08-09 06:38:33
111.93.205.186	attack	Aug 8 22:40:10 rush sshd[4657]: Failed password for root from 111.93.205.186 port 50099 ssh2 Aug 8 22:45:06 rush sshd[4868]: Failed password for root from 111.93.205.186 port 55666 ssh2 ...	2020-08-09 06:53:00
129.226.68.181	attackbotsspam	Aug 8 21:27:15 ip-172-31-61-156 sshd[10297]: Failed password for root from 129.226.68.181 port 50032 ssh2 Aug 8 21:29:27 ip-172-31-61-156 sshd[10391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.68.181 user=root Aug 8 21:29:30 ip-172-31-61-156 sshd[10391]: Failed password for root from 129.226.68.181 port 56718 ssh2 Aug 8 21:29:27 ip-172-31-61-156 sshd[10391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.68.181 user=root Aug 8 21:29:30 ip-172-31-61-156 sshd[10391]: Failed password for root from 129.226.68.181 port 56718 ssh2 ...	2020-08-09 06:52:39
79.98.158.105	attackbots	Sent packet to closed port: 85	2020-08-09 06:43:48

最近上报的IP列表

77.75.32.163	114.98.239.5	191.252.58.208	142.93.212.101
195.231.2.207	159.89.199.236	157.230.228.147	187.158.150.23
116.118.110.69	54.88.112.216	103.12.114.38	69.12.66.237
66.155.71.149	213.32.253.72	190.154.163.60	112.90.184.68
202.188.29.92	202.65.184.122	185.229.243.50	151.101.166.133