148.70.52.44 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Sep 19 22:30:18 mail sshd\[638\]: Invalid user jack from 148.70.52.44 port 25660 Sep 19 22:30:18 mail sshd\[638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.52.44 Sep 19 22:30:20 mail sshd\[638\]: Failed password for invalid user jack from 148.70.52.44 port 25660 ssh2 Sep 19 22:30:45 mail sshd\[724\]: Invalid user donald from 148.70.52.44 port 27078 Sep 19 22:30:45 mail sshd\[724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.52.44	2019-09-20 05:00:17

类型

评论内容

时间

attackbotsspam

Sep 19 22:30:18 mail sshd\[638\]: Invalid user jack from 148.70.52.44 port 25660
Sep 19 22:30:18 mail sshd\[638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.52.44
Sep 19 22:30:20 mail sshd\[638\]: Failed password for invalid user jack from 148.70.52.44 port 25660 ssh2
Sep 19 22:30:45 mail sshd\[724\]: Invalid user donald from 148.70.52.44 port 27078
Sep 19 22:30:45 mail sshd\[724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.52.44

2019-09-20 05:00:17

相同子网IP讨论:

IP	类型	评论内容	时间
148.70.52.60	attack	Unauthorized connection attempt detected from IP address 148.70.52.60 to port 6678 [T]	2020-05-09 03:25:37
148.70.52.60	attackspam	Apr 20 17:07:42 v22018086721571380 sshd[23485]: Failed password for invalid user aw from 148.70.52.60 port 58280 ssh2	2020-04-21 03:12:32

类型

评论内容

时间

148.70.52.60

attack

Unauthorized connection attempt detected from IP address 148.70.52.60 to port 6678 [T]

2020-05-09 03:25:37

148.70.52.60

attackspam

Apr 20 17:07:42 v22018086721571380 sshd[23485]: Failed password for invalid user aw from 148.70.52.60 port 58280 ssh2

2020-04-21 03:12:32

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.70.52.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32909
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.70.52.44.			IN	A

;; AUTHORITY SECTION:
.			399	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091902 1800 900 604800 86400

;; Query time: 160 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 20 05:00:12 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 44.52.70.148.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.52.70.148.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
61.50.252.193	attack	Honeypot attack, port: 5555, PTR: PTR record not found	2020-09-04 18:49:12
157.230.53.57	attack	TCP ports : 9076 / 10008 / 24560	2020-09-04 18:48:40
165.90.239.203	attackbotsspam	Automatic report - Port Scan Attack	2020-09-04 18:55:03
193.70.0.42	attackspam	Sep 4 03:46:35 [host] sshd[30928]: Invalid user i Sep 4 03:46:35 [host] sshd[30928]: pam_unix(sshd: Sep 4 03:46:37 [host] sshd[30928]: Failed passwor	2020-09-04 18:25:35
186.23.105.150	attack	Sep 3 18:44:43 mellenthin postfix/smtpd[20378]: NOQUEUE: reject: RCPT from unknown[186.23.105.150]: 554 5.7.1 Service unavailable; Client host [186.23.105.150] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.23.105.150; from= to= proto=ESMTP helo=	2020-09-04 18:18:36
183.82.34.246	attackbotsspam	Sep 4 03:44:34 ajax sshd[20046]: Failed password for root from 183.82.34.246 port 45136 ssh2	2020-09-04 18:50:19
106.54.133.103	attackspam	Invalid user prueba from 106.54.133.103 port 38544	2020-09-04 18:36:28
51.178.55.56	attackbotsspam	TCP ports : 1124 / 9505 / 11733 / 25416	2020-09-04 18:52:50
49.88.112.117	attack	Sep 4 12:29:30 OPSO sshd\[17040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.117 user=root Sep 4 12:29:32 OPSO sshd\[17040\]: Failed password for root from 49.88.112.117 port 55504 ssh2 Sep 4 12:29:35 OPSO sshd\[17040\]: Failed password for root from 49.88.112.117 port 55504 ssh2 Sep 4 12:29:37 OPSO sshd\[17040\]: Failed password for root from 49.88.112.117 port 55504 ssh2 Sep 4 12:33:49 OPSO sshd\[17738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.117 user=root	2020-09-04 18:44:46
181.20.123.11	attackspambots	Honeypot attack, port: 445, PTR: 181-20-123-11.speedy.com.ar.	2020-09-04 18:57:00
71.117.128.50	attack	2020-09-04T09:18:22.303387mail.broermann.family sshd[8333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=pool-71-117-128-50.prvdri.fios.verizon.net 2020-09-04T09:18:22.296346mail.broermann.family sshd[8333]: Invalid user al from 71.117.128.50 port 48978 2020-09-04T09:18:24.575267mail.broermann.family sshd[8333]: Failed password for invalid user al from 71.117.128.50 port 48978 ssh2 2020-09-04T09:20:55.382018mail.broermann.family sshd[8440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=pool-71-117-128-50.prvdri.fios.verizon.net user=root 2020-09-04T09:20:57.657555mail.broermann.family sshd[8440]: Failed password for root from 71.117.128.50 port 33296 ssh2 ...	2020-09-04 18:13:58
45.141.84.87	attack	45.141.84.87 - - [11/Jul/2020:15:09:03 +0000] "\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 166 "-" "-"	2020-09-04 18:15:25
41.38.165.34	attackbotsspam	TCP (SYN) 41.38.165.34:42914 -> port 1433, len 44	2020-09-04 18:55:55
45.234.131.3	attackbotsspam	Unauthorized connection attempt from IP address 45.234.131.3 on Port 445(SMB)	2020-09-04 18:22:03
213.141.131.22	attackspambots	2020-09-04T14:17:06.914543paragon sshd[123011]: Invalid user xavier from 213.141.131.22 port 60208 2020-09-04T14:17:06.918693paragon sshd[123011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.141.131.22 2020-09-04T14:17:06.914543paragon sshd[123011]: Invalid user xavier from 213.141.131.22 port 60208 2020-09-04T14:17:08.742066paragon sshd[123011]: Failed password for invalid user xavier from 213.141.131.22 port 60208 ssh2 2020-09-04T14:19:36.854548paragon sshd[123059]: Invalid user usuario from 213.141.131.22 port 44834 ...	2020-09-04 18:41:19

最近上报的IP列表

106.12.32.48	2607:5300:203:71b::	94.199.212.76	125.150.173.190
51.254.165.68	36.75.66.81	27.72.47.240	148.240.235.160
141.98.102.243	136.55.86.110	222.133.37.18	9.212.185.185
13.248.183.112	13.32.239.33	119.42.81.149	59.196.93.224
109.193.243.71	153.201.152.44	77.236.155.204	194.172.130.162