96.80.240.14 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Comcast Cable Communications LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/96.80.240.14/ US - 1H : (325) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN7922 IP : 96.80.240.14 CIDR : 96.64.0.0/11 PREFIX COUNT : 1512 UNIQUE IP COUNT : 70992640 ATTACKS DETECTED ASN7922 : 1H - 3 3H - 7 6H - 9 12H - 20 24H - 37 DateTime : 2019-10-29 04:56:51 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-29 13:25:51

类型

评论内容

时间

attack

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/96.80.240.14/ 
 
 US - 1H : (325)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN7922 
 
 IP : 96.80.240.14 
 
 CIDR : 96.64.0.0/11 
 
 PREFIX COUNT : 1512 
 
 UNIQUE IP COUNT : 70992640 
 
 
 ATTACKS DETECTED ASN7922 :  
  1H - 3 
  3H - 7 
  6H - 9 
 12H - 20 
 24H - 37 
 
 DateTime : 2019-10-29 04:56:51 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-10-29 13:25:51

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 96.80.240.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51430
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;96.80.240.14.			IN	A

;; AUTHORITY SECTION:
.			494	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102801 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 29 13:25:48 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

14.240.80.96.in-addr.arpa domain name pointer 96-80-240-14-static.hfc.comcastbusiness.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.240.80.96.in-addr.arpa	name = 96-80-240-14-static.hfc.comcastbusiness.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
104.41.131.135	attackbotsspam	Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=53323 . dstport=5061 . (2874)	2020-09-19 21:28:00
222.186.175.183	attack	[SID1] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.	2020-09-19 21:46:51
61.144.103.146	attackbots	TCP (SYN) 61.144.103.146:40219 -> port 22, len 44	2020-09-19 21:28:26
160.238.26.21	attackbots	Unauthorized connection attempt from IP address 160.238.26.21 on Port 445(SMB)	2020-09-19 21:55:55
152.32.229.54	attackbots	$f2bV_matches	2020-09-19 22:04:50
14.235.203.122	attack	Unauthorized connection attempt from IP address 14.235.203.122 on Port 445(SMB)	2020-09-19 21:30:37
94.102.51.28	attackspam	TCP (SYN) 94.102.51.28:51127 -> port 32714, len 44	2020-09-19 21:45:32
116.49.132.142	attackspambots	Sep 19 00:06:56 ssh2 sshd[7728]: User root from n11649132142.netvigator.com not allowed because not listed in AllowUsers Sep 19 00:06:56 ssh2 sshd[7728]: Failed password for invalid user root from 116.49.132.142 port 38680 ssh2 Sep 19 00:06:57 ssh2 sshd[7728]: Connection closed by invalid user root 116.49.132.142 port 38680 [preauth] ...	2020-09-19 21:31:46
190.144.216.206	attackspambots	Icarus honeypot on github	2020-09-19 21:54:19
142.93.101.46	attack	Sep 19 15:43:29 nextcloud sshd\[13636\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.46 user=root Sep 19 15:43:31 nextcloud sshd\[13636\]: Failed password for root from 142.93.101.46 port 40324 ssh2 Sep 19 15:59:11 nextcloud sshd\[30368\]: Invalid user user123 from 142.93.101.46 Sep 19 15:59:11 nextcloud sshd\[30368\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.46	2020-09-19 22:00:31
59.108.246.162	attack	Automatic Fail2ban report - Trying login SSH	2020-09-19 21:25:25
1.32.42.67	attackbots	Sep 19 00:49:57 * sshd[25208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.32.42.67 Sep 19 00:49:59 * sshd[25208]: Failed password for invalid user support from 1.32.42.67 port 51091 ssh2	2020-09-19 21:55:22
114.207.139.221	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-19 21:24:05
177.207.216.148	attack	Sep 19 15:32:04 localhost sshd\[28830\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.207.216.148 user=root Sep 19 15:32:06 localhost sshd\[28830\]: Failed password for root from 177.207.216.148 port 54785 ssh2 Sep 19 15:38:31 localhost sshd\[29272\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.207.216.148 user=root Sep 19 15:38:34 localhost sshd\[29272\]: Failed password for root from 177.207.216.148 port 54081 ssh2 Sep 19 15:40:43 localhost sshd\[29546\]: Invalid user es from 177.207.216.148 Sep 19 15:40:43 localhost sshd\[29546\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.207.216.148 ...	2020-09-19 21:41:34
5.39.95.38	attackspam	DATE:2020-09-19 15:03:53, IP:5.39.95.38, PORT:ssh SSH brute force auth (docker-dc)	2020-09-19 21:25:42

最近上报的IP列表

3.188.113.158	247.38.149.50	157.26.18.150	28.212.130.139
85.72.177.8	137.114.223.67	81.158.106.229	13.210.189.6
33.193.97.239	87.121.98.39	78.118.7.221	236.85.218.74
77.40.96.8	172.67.115.63	217.15.85.18	78.38.233.124
220.90.110.164	59.39.65.38	218.75.26.156	177.184.66.13