194.9.70.18 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Ukraine

运营商(isp): Global Technology Ukraine Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	TCP (SYN) 194.9.70.18:48591 -> port 22, len 40	2020-05-29 02:44:56

相同子网IP讨论:

IP	类型	评论内容	时间
194.9.70.70	attack	May 4 09:58:49 web8 sshd\[14590\]: Invalid user login from 194.9.70.70 May 4 09:58:49 web8 sshd\[14590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.9.70.70 May 4 09:58:51 web8 sshd\[14590\]: Failed password for invalid user login from 194.9.70.70 port 44978 ssh2 May 4 10:02:50 web8 sshd\[16684\]: Invalid user dak from 194.9.70.70 May 4 10:02:50 web8 sshd\[16684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.9.70.70	2020-05-04 19:12:30

类型

评论内容

时间

194.9.70.70

attack

May  4 09:58:49 web8 sshd\[14590\]: Invalid user login from 194.9.70.70
May  4 09:58:49 web8 sshd\[14590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.9.70.70
May  4 09:58:51 web8 sshd\[14590\]: Failed password for invalid user login from 194.9.70.70 port 44978 ssh2
May  4 10:02:50 web8 sshd\[16684\]: Invalid user dak from 194.9.70.70
May  4 10:02:50 web8 sshd\[16684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.9.70.70

2020-05-04 19:12:30

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.9.70.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17816
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;194.9.70.18.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052800 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 29 02:44:53 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

18.70.9.194.in-addr.arpa domain name pointer localhost.localhost.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
18.70.9.194.in-addr.arpa	name = localhost.localhost.

Authoritative answers can be found from:

IP	类型	评论内容	时间
199.103.24.6	attack	Scan port	2024-03-06 13:45:33
181.88.206.82	attack	Hacking	2024-03-01 13:35:58
193.46.255.151	attack	22 login attempts, using various (invalid) user names, within ~ 12 hrs. Login attempted to our router	2024-03-06 19:13:06
104.152.52.127	attack	Scan port	2024-03-01 13:31:25
87.236.176.128	attackproxy	port attack	2024-03-05 14:02:24
87.236.176.46	botsattackproxy	port attack	2024-03-07 14:02:37
43.133.68.16	attack	port attack	2024-03-12 13:55:55
91.92.250.119	attack	hack	2024-02-29 13:32:31
45.227.254.8	attack	port attack	2024-03-07 16:04:58
199.103.24.4	attack	Scan port	2024-02-26 20:27:50
87.236.176.250	botsattack	Hacking	2024-02-28 13:33:49
178.128.150.191	attack	port attack	2024-03-07 13:46:04
102.165.16.31	attack	Hacking	2024-02-28 13:29:58
192.241.219.51	attack	hack	2024-02-29 13:30:16
172.233.57.157	attack	Hack	2024-02-27 22:10:14

最近上报的IP列表

118.231.199.132	29.49.216.70	46.38.255.121	35.159.99.176
188.177.170.251	203.170.193.71	182.254.161.202	106.110.25.46
180.76.177.130	219.159.21.162	125.220.81.126	174.138.34.178
14.114.32.59	142.11.206.59	129.204.83.3	126.37.34.170
103.120.117.107	92.99.58.222	62.4.31.189	41.239.217.208