119.27.169.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	May 3 04:56:03 server sshd\[19629\]: Invalid user qu from 119.27.169.42 May 3 04:56:03 server sshd\[19629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.169.42 May 3 04:56:05 server sshd\[19629\]: Failed password for invalid user qu from 119.27.169.42 port 59870 ssh2 ...	2019-07-17 08:55:42

类型

评论内容

时间

attackbotsspam

May  3 04:56:03 server sshd\[19629\]: Invalid user qu from 119.27.169.42
May  3 04:56:03 server sshd\[19629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.169.42
May  3 04:56:05 server sshd\[19629\]: Failed password for invalid user qu from 119.27.169.42 port 59870 ssh2
...

2019-07-17 08:55:42

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.27.169.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32651
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;119.27.169.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon May 06 03:42:48 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 42.169.27.119.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 42.169.27.119.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
110.164.151.100	attackbots	Unauthorized connection attempt from IP address 110.164.151.100 on Port 445(SMB)	2020-09-18 00:48:40
181.129.14.218	attackspambots	(sshd) Failed SSH login from 181.129.14.218 (CO/Colombia/adsl-181-129-14-218.une.net.co): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 17 18:39:07 amsweb01 sshd[20887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218 user=root Sep 17 18:39:08 amsweb01 sshd[20887]: Failed password for root from 181.129.14.218 port 63070 ssh2 Sep 17 18:42:01 amsweb01 sshd[21334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218 user=root Sep 17 18:42:03 amsweb01 sshd[21334]: Failed password for root from 181.129.14.218 port 15173 ssh2 Sep 17 18:44:19 amsweb01 sshd[21892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218 user=root	2020-09-18 01:05:08
195.206.107.154	attack	[2020-09-16 17:11:19] NOTICE[1239] chan_sip.c: Registration from '"138"' failed for '195.206.107.154:6085' - Wrong password [2020-09-16 17:11:19] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:11:19.507-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="138",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.206.107.154/6085",Challenge="09451f9c",ReceivedChallenge="09451f9c",ReceivedHash="eb89dedf189c146f799bff821edc1d8d" [2020-09-16 17:16:03] NOTICE[1239] chan_sip.c: Registration from '"139"' failed for '195.206.107.154:15253' - Wrong password [2020-09-16 17:16:03] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T17:16:03.338-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="139",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195 ...	2020-09-18 01:12:07
145.255.5.101	attack	Honeypot attack, port: 445, PTR: 145.255.5.101.static.ufanet.ru.	2020-09-18 00:51:34
198.199.92.246	attackspam	trying to access non-authorized port	2020-09-18 00:46:42
128.70.223.234	attackbots	Port probing on unauthorized port 445	2020-09-18 01:15:33
39.45.202.249	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-18 00:54:28
124.207.98.213	attackspam	Sep 17 14:25:05 email sshd\[16451\]: Invalid user cvsuser from 124.207.98.213 Sep 17 14:25:05 email sshd\[16451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.98.213 Sep 17 14:25:07 email sshd\[16451\]: Failed password for invalid user cvsuser from 124.207.98.213 port 15524 ssh2 Sep 17 14:32:37 email sshd\[17793\]: Invalid user user1 from 124.207.98.213 Sep 17 14:32:37 email sshd\[17793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.207.98.213 ...	2020-09-18 00:49:47
140.143.57.195	attackspam	2020-09-17T17:49:41.180330mail.broermann.family sshd[5714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.195 user=root 2020-09-17T17:49:43.273900mail.broermann.family sshd[5714]: Failed password for root from 140.143.57.195 port 46620 ssh2 2020-09-17T17:53:19.731350mail.broermann.family sshd[5876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.195 user=root 2020-09-17T17:53:22.084032mail.broermann.family sshd[5876]: Failed password for root from 140.143.57.195 port 55882 ssh2 2020-09-17T18:00:25.779048mail.broermann.family sshd[6188]: Invalid user mikel from 140.143.57.195 port 46180 ...	2020-09-18 00:42:48
112.85.42.174	attack	2020-09-17T19:40:58.762372afi-git.jinr.ru sshd[10848]: Failed password for root from 112.85.42.174 port 33578 ssh2 2020-09-17T19:41:02.305330afi-git.jinr.ru sshd[10848]: Failed password for root from 112.85.42.174 port 33578 ssh2 2020-09-17T19:41:05.957801afi-git.jinr.ru sshd[10848]: Failed password for root from 112.85.42.174 port 33578 ssh2 2020-09-17T19:41:05.957959afi-git.jinr.ru sshd[10848]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 33578 ssh2 [preauth] 2020-09-17T19:41:05.957974afi-git.jinr.ru sshd[10848]: Disconnecting: Too many authentication failures [preauth] ...	2020-09-18 00:48:09
140.143.39.177	attackbots	Sep 17 14:53:36 Ubuntu-1404-trusty-64-minimal sshd\[24750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.39.177 user=root Sep 17 14:53:37 Ubuntu-1404-trusty-64-minimal sshd\[24750\]: Failed password for root from 140.143.39.177 port 24153 ssh2 Sep 17 15:06:24 Ubuntu-1404-trusty-64-minimal sshd\[30606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.39.177 user=root Sep 17 15:06:27 Ubuntu-1404-trusty-64-minimal sshd\[30606\]: Failed password for root from 140.143.39.177 port 49195 ssh2 Sep 17 15:10:45 Ubuntu-1404-trusty-64-minimal sshd\[6700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.39.177 user=root	2020-09-18 00:43:16
159.65.8.65	attack	(sshd) Failed SSH login from 159.65.8.65 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 17 01:49:34 server sshd[17173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.65 user=root Sep 17 01:49:36 server sshd[17173]: Failed password for root from 159.65.8.65 port 38972 ssh2 Sep 17 01:54:39 server sshd[18518]: Invalid user Apps from 159.65.8.65 port 56882 Sep 17 01:54:41 server sshd[18518]: Failed password for invalid user Apps from 159.65.8.65 port 56882 ssh2 Sep 17 01:58:52 server sshd[20750]: Invalid user git1 from 159.65.8.65 port 38438	2020-09-18 00:52:17
139.155.35.47	attackbotsspam	Automatic report - Banned IP Access	2020-09-18 00:51:57
164.90.154.123	attackbots	Invalid user oracle from 164.90.154.123 port 39266	2020-09-18 01:13:36
183.136.225.45	attack	TCP (SYN) 183.136.225.45:50546 -> port 49151, len 44	2020-09-18 00:43:55

最近上报的IP列表

95.182.64.41	103.35.109.138	222.187.221.84	138.197.180.16
175.107.192.204	155.0.56.9	74.208.239.79	147.46.78.126
121.141.5.199	170.238.51.217	191.114.160.1	187.72.66.1
35.190.167.223	185.100.102.16	219.145.117.2	5.188.86.195
201.234.81.181	107.173.51.220	200.111.101.242	213.6.16.226