104.219.42.161

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.219.42.137	attackbotsspam	Jan 18 06:06:37 v2hgb sshd[24639]: Invalid user hive from 104.219.42.137 port 38158 Jan 18 06:06:37 v2hgb sshd[24639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.219.42.137 Jan 18 06:06:39 v2hgb sshd[24639]: Failed password for invalid user hive from 104.219.42.137 port 38158 ssh2 Jan 18 06:06:40 v2hgb sshd[24639]: Received disconnect from 104.219.42.137 port 38158:11: Bye Bye [preauth] Jan 18 06:06:40 v2hgb sshd[24639]: Disconnected from invalid user hive 104.219.42.137 port 38158 [preauth] Jan 18 06:22:11 v2hgb sshd[25834]: Invalid user aguirre from 104.219.42.137 port 50522 Jan 18 06:22:11 v2hgb sshd[25834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.219.42.137 Jan 18 06:22:13 v2hgb sshd[25834]: Failed password for invalid user aguirre from 104.219.42.137 port 50522 ssh2 Jan 18 06:22:13 v2hgb sshd[25834]: Received disconnect from 104.219.42.137 port 50522:11: Bye Bye [........ -------------------------------	2020-01-20 04:40:32

类型

评论内容

时间

104.219.42.137

attackbotsspam

Jan 18 06:06:37 v2hgb sshd[24639]: Invalid user hive from 104.219.42.137 port 38158
Jan 18 06:06:37 v2hgb sshd[24639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.219.42.137 
Jan 18 06:06:39 v2hgb sshd[24639]: Failed password for invalid user hive from 104.219.42.137 port 38158 ssh2
Jan 18 06:06:40 v2hgb sshd[24639]: Received disconnect from 104.219.42.137 port 38158:11: Bye Bye [preauth]
Jan 18 06:06:40 v2hgb sshd[24639]: Disconnected from invalid user hive 104.219.42.137 port 38158 [preauth]
Jan 18 06:22:11 v2hgb sshd[25834]: Invalid user aguirre from 104.219.42.137 port 50522
Jan 18 06:22:11 v2hgb sshd[25834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.219.42.137 
Jan 18 06:22:13 v2hgb sshd[25834]: Failed password for invalid user aguirre from 104.219.42.137 port 50522 ssh2
Jan 18 06:22:13 v2hgb sshd[25834]: Received disconnect from 104.219.42.137 port 50522:11: Bye Bye [........
-------------------------------

2020-01-20 04:40:32

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.219.42.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31618
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.219.42.161.			IN	A

;; AUTHORITY SECTION:
.			337	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 12:16:58 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 161.42.219.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.42.219.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
81.83.133.201	attackspambots	2020-02-10T01:15:36.679274vostok sshd\[29578\]: Invalid user wzz from 81.83.133.201 port 34562 2020-02-10T01:15:36.682554vostok sshd\[29578\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=d515385c9.access.telenet.be \| Triggered by Fail2Ban at Vostok web server	2020-02-10 14:47:00
118.25.87.27	attackspam	Feb 10 07:00:48 MK-Soft-VM3 sshd[7058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.87.27 Feb 10 07:00:50 MK-Soft-VM3 sshd[7058]: Failed password for invalid user czr from 118.25.87.27 port 33580 ssh2 ...	2020-02-10 14:54:54
124.158.151.226	attack	Honeypot attack, port: 445, PTR: 226.151.158.124.in-addr.arpa.	2020-02-10 14:45:06
222.222.141.171	attackspambots	Feb 10 07:14:55 silence02 sshd[26084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.141.171 Feb 10 07:14:57 silence02 sshd[26084]: Failed password for invalid user zuq from 222.222.141.171 port 36111 ssh2 Feb 10 07:23:11 silence02 sshd[26655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.222.141.171	2020-02-10 14:46:15
52.172.26.23	attackbotsspam	Feb 10 07:12:01 silence02 sshd[25894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.26.23 Feb 10 07:12:03 silence02 sshd[25894]: Failed password for invalid user jjq from 52.172.26.23 port 33740 ssh2 Feb 10 07:16:03 silence02 sshd[26189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.172.26.23	2020-02-10 14:35:10
148.0.44.103	attackbotsspam	Feb 10 07:18:59 django sshd[27296]: reveeclipse mapping checking getaddrinfo for 103.44.0.148.d.dyn.claro.net.do [148.0.44.103] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 10 07:18:59 django sshd[27296]: Invalid user uzs from 148.0.44.103 Feb 10 07:18:59 django sshd[27296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.0.44.103 Feb 10 07:19:01 django sshd[27296]: Failed password for invalid user uzs from 148.0.44.103 port 54489 ssh2 Feb 10 07:19:02 django sshd[27297]: Received disconnect from 148.0.44.103: 11: Bye Bye Feb 10 07:26:15 django sshd[28141]: reveeclipse mapping checking getaddrinfo for 103.44.0.148.d.dyn.claro.net.do [148.0.44.103] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 10 07:26:15 django sshd[28141]: Invalid user yga from 148.0.44.103 Feb 10 07:26:15 django sshd[28141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.0.44.103 ........ ----------------------------------------------- https://www.blocklist.de/	2020-02-10 15:03:22
51.38.49.5	attackbotsspam	$f2bV_matches	2020-02-10 14:55:40
176.209.122.126	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 10-02-2020 04:55:10.	2020-02-10 15:18:07
138.197.164.222	attackbotsspam	Feb 10 06:29:19 icinga sshd[36137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222 Feb 10 06:29:21 icinga sshd[36137]: Failed password for invalid user lbv from 138.197.164.222 port 42868 ssh2 Feb 10 06:33:07 icinga sshd[40113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222 ...	2020-02-10 14:34:23
49.88.226.69	attack	Feb 10 05:55:16 grey postfix/smtpd\[17200\]: NOQUEUE: reject: RCPT from unknown\[49.88.226.69\]: 554 5.7.1 Service unavailable\; Client host \[49.88.226.69\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=49.88.226.69\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-10 15:14:12
27.76.247.153	attackspambots	Honeypot attack, port: 81, PTR: localhost.	2020-02-10 14:40:38
178.62.222.65	attackspam	$f2bV_matches	2020-02-10 15:18:27
62.219.225.64	attackspambots	Honeypot attack, port: 81, PTR: bzq-219-225-64.pop.bezeqint.net.	2020-02-10 14:37:11
165.154.30.213	attackbotsspam	scan r	2020-02-10 14:54:23
120.92.33.13	attackspambots	Feb 9 20:15:47 hpm sshd\[14601\]: Invalid user qff from 120.92.33.13 Feb 9 20:15:47 hpm sshd\[14601\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.33.13 Feb 9 20:15:50 hpm sshd\[14601\]: Failed password for invalid user qff from 120.92.33.13 port 59902 ssh2 Feb 9 20:20:06 hpm sshd\[15164\]: Invalid user veg from 120.92.33.13 Feb 9 20:20:06 hpm sshd\[15164\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.33.13	2020-02-10 14:44:08

最近上报的IP列表

104.248.0.210	104.219.251.187	104.22.0.227	104.219.254.11
104.22.1.172	104.22.1.125	104.22.1.149	104.219.42.73
104.22.0.99	104.22.1.109	104.22.0.27	104.22.1.99
104.22.10.100	104.22.1.27	104.22.10.138	104.248.1.174
190.190.209.16	104.22.10.120	104.22.10.125	104.22.10.244