城市(city): unknown
省份(region): unknown
国家(country): Thailand
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 202.29.70.46 | attack | $f2bV_matches |
2020-02-11 03:03:09 |
| 202.29.70.42 | attack | Dec 23 15:59:54 vpn01 sshd[18072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 Dec 23 15:59:56 vpn01 sshd[18072]: Failed password for invalid user named from 202.29.70.42 port 43104 ssh2 ... |
2019-12-23 23:15:13 |
| 202.29.70.42 | attackbots | Dec 20 00:55:35 eventyay sshd[31962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 Dec 20 00:55:37 eventyay sshd[31962]: Failed password for invalid user Paint@2017 from 202.29.70.42 port 43640 ssh2 Dec 20 01:01:37 eventyay sshd[32123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 ... |
2019-12-20 08:08:02 |
| 202.29.70.42 | attackspambots | $f2bV_matches |
2019-12-13 04:59:26 |
| 202.29.70.42 | attack | Too many connections or unauthorized access detected from Arctic banned ip |
2019-12-12 22:05:38 |
| 202.29.70.42 | attackbots | Dec 10 09:02:06 game-panel sshd[25546]: Failed password for backup from 202.29.70.42 port 39138 ssh2 Dec 10 09:08:17 game-panel sshd[25871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 Dec 10 09:08:18 game-panel sshd[25871]: Failed password for invalid user gdm from 202.29.70.42 port 44660 ssh2 |
2019-12-10 17:35:46 |
| 202.29.70.42 | attackspambots | Nov 16 09:26:18 * sshd[2272]: Failed password for backup from 202.29.70.42 port 45636 ssh2 |
2019-11-16 19:21:52 |
| 202.29.70.42 | attack | $f2bV_matches |
2019-11-14 17:36:37 |
| 202.29.70.42 | attackbotsspam | Nov 12 13:19:49 eddieflores sshd\[20213\]: Invalid user kurtz from 202.29.70.42 Nov 12 13:19:49 eddieflores sshd\[20213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th Nov 12 13:19:51 eddieflores sshd\[20213\]: Failed password for invalid user kurtz from 202.29.70.42 port 55566 ssh2 Nov 12 13:23:54 eddieflores sshd\[20527\]: Invalid user 1234566 from 202.29.70.42 Nov 12 13:23:54 eddieflores sshd\[20527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th |
2019-11-13 07:24:42 |
| 202.29.70.42 | attackbots | SSH Brute Force |
2019-11-11 08:49:21 |
| 202.29.70.42 | attackbots | Nov 6 13:41:30 vps666546 sshd\[16846\]: Invalid user millers from 202.29.70.42 port 52912 Nov 6 13:41:30 vps666546 sshd\[16846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 Nov 6 13:41:32 vps666546 sshd\[16846\]: Failed password for invalid user millers from 202.29.70.42 port 52912 ssh2 Nov 6 13:45:33 vps666546 sshd\[16983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 user=root Nov 6 13:45:35 vps666546 sshd\[16983\]: Failed password for root from 202.29.70.42 port 59494 ssh2 ... |
2019-11-06 21:09:36 |
| 202.29.70.42 | attackspambots | Oct 18 06:51:30 www sshd\[13459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 user=root Oct 18 06:51:32 www sshd\[13459\]: Failed password for root from 202.29.70.42 port 54028 ssh2 Oct 18 06:55:42 www sshd\[13510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 user=root ... |
2019-10-18 13:08:01 |
| 202.29.70.46 | attackspambots | $f2bV_matches |
2019-10-04 03:05:10 |
| 202.29.70.42 | attackspambots | Sep 22 04:03:27 lcprod sshd\[3452\]: Invalid user admin from 202.29.70.42 Sep 22 04:03:27 lcprod sshd\[3452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th Sep 22 04:03:30 lcprod sshd\[3452\]: Failed password for invalid user admin from 202.29.70.42 port 40614 ssh2 Sep 22 04:07:52 lcprod sshd\[3918\]: Invalid user user3 from 202.29.70.42 Sep 22 04:07:52 lcprod sshd\[3918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th |
2019-09-23 03:21:58 |
| 202.29.70.42 | attackspam | Sep 7 10:47:25 ny01 sshd[13368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 Sep 7 10:47:26 ny01 sshd[13368]: Failed password for invalid user test from 202.29.70.42 port 56582 ssh2 Sep 7 10:52:17 ny01 sshd[14156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42 |
2019-09-08 05:03:22 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.29.70.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47160
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;202.29.70.13. IN A
;; AUTHORITY SECTION:
. 534 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 20:31:37 CST 2022
;; MSG SIZE rcvd: 105
Host 13.70.29.202.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 13.70.29.202.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 116.97.54.231 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 22-12-2019 09:25:14. |
2019-12-22 18:10:58 |
| 86.200.110.225 | attackspambots | Dec 16 23:58:33 cumulus sshd[19555]: Did not receive identification string from 86.200.110.225 port 48258 Dec 16 23:58:33 cumulus sshd[19556]: Did not receive identification string from 86.200.110.225 port 45244 Dec 16 23:59:13 cumulus sshd[19590]: Received disconnect from 86.200.110.225 port 48374:11: Bye Bye [preauth] Dec 16 23:59:13 cumulus sshd[19590]: Disconnected from 86.200.110.225 port 48374 [preauth] Dec 16 23:59:13 cumulus sshd[19591]: Received disconnect from 86.200.110.225 port 45350:11: Bye Bye [preauth] Dec 16 23:59:13 cumulus sshd[19591]: Disconnected from 86.200.110.225 port 45350 [preauth] Dec 17 00:04:30 cumulus sshd[19974]: Invalid user admin from 86.200.110.225 port 48440 Dec 17 00:04:30 cumulus sshd[19974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.200.110.225 Dec 17 00:04:31 cumulus sshd[19973]: Invalid user admin from 86.200.110.225 port 45398 Dec 17 00:04:31 cumulus sshd[19973]: pam_unix(sshd:auth)........ ------------------------------- |
2019-12-22 18:18:24 |
| 106.12.56.151 | attackspam | Dec 17 03:04:19 zimbra sshd[32426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.151 user=r.r Dec 17 03:04:21 zimbra sshd[32426]: Failed password for r.r from 106.12.56.151 port 50112 ssh2 Dec 17 03:04:21 zimbra sshd[32426]: Received disconnect from 106.12.56.151 port 50112:11: Bye Bye [preauth] Dec 17 03:04:21 zimbra sshd[32426]: Disconnected from 106.12.56.151 port 50112 [preauth] Dec 17 08:46:32 zimbra sshd[29504]: Invalid user leiba from 106.12.56.151 Dec 17 08:46:32 zimbra sshd[29504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.151 Dec 17 08:46:35 zimbra sshd[29504]: Failed password for invalid user leiba from 106.12.56.151 port 41540 ssh2 Dec 17 08:46:36 zimbra sshd[29504]: Received disconnect from 106.12.56.151 port 41540:11: Bye Bye [preauth] Dec 17 08:46:36 zimbra sshd[29504]: Disconnected from 106.12.56.151 port 41540 [preauth] Dec 17 08:53:41 zimbra ss........ ------------------------------- |
2019-12-22 18:22:33 |
| 104.168.201.226 | attackbotsspam | Host Scan |
2019-12-22 18:05:15 |
| 139.155.93.180 | attackspam | Dec 22 08:03:13 srv01 sshd[2569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.93.180 user=root Dec 22 08:03:15 srv01 sshd[2569]: Failed password for root from 139.155.93.180 port 59058 ssh2 Dec 22 08:09:44 srv01 sshd[3160]: Invalid user ssh from 139.155.93.180 port 48972 Dec 22 08:09:44 srv01 sshd[3160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.93.180 Dec 22 08:09:44 srv01 sshd[3160]: Invalid user ssh from 139.155.93.180 port 48972 Dec 22 08:09:46 srv01 sshd[3160]: Failed password for invalid user ssh from 139.155.93.180 port 48972 ssh2 ... |
2019-12-22 18:21:14 |
| 167.114.230.252 | attack | Dec 22 11:28:33 ArkNodeAT sshd\[18612\]: Invalid user james from 167.114.230.252 Dec 22 11:28:33 ArkNodeAT sshd\[18612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.230.252 Dec 22 11:28:35 ArkNodeAT sshd\[18612\]: Failed password for invalid user james from 167.114.230.252 port 51920 ssh2 |
2019-12-22 18:28:53 |
| 116.236.14.218 | attackbots | Dec 22 12:31:05 server sshd\[13672\]: Invalid user nino from 116.236.14.218 Dec 22 12:31:05 server sshd\[13672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.14.218 Dec 22 12:31:07 server sshd\[13672\]: Failed password for invalid user nino from 116.236.14.218 port 59812 ssh2 Dec 22 12:41:10 server sshd\[16208\]: Invalid user ident from 116.236.14.218 Dec 22 12:41:10 server sshd\[16208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.14.218 ... |
2019-12-22 18:38:52 |
| 37.187.248.39 | attackbotsspam | Invalid user refsnes from 37.187.248.39 port 43700 |
2019-12-22 18:23:43 |
| 106.12.27.46 | attackbots | Dec 22 11:02:33 legacy sshd[14395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.27.46 Dec 22 11:02:35 legacy sshd[14395]: Failed password for invalid user zoom from 106.12.27.46 port 55392 ssh2 Dec 22 11:09:35 legacy sshd[14621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.27.46 ... |
2019-12-22 18:22:10 |
| 149.129.247.235 | attackbotsspam | Dec 22 09:21:49 MK-Soft-VM7 sshd[31521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.247.235 Dec 22 09:21:51 MK-Soft-VM7 sshd[31521]: Failed password for invalid user support from 149.129.247.235 port 54774 ssh2 ... |
2019-12-22 18:30:12 |
| 112.85.42.181 | attackspambots | Dec 22 05:00:22 TORMINT sshd\[19806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root Dec 22 05:00:25 TORMINT sshd\[19806\]: Failed password for root from 112.85.42.181 port 43585 ssh2 Dec 22 05:00:51 TORMINT sshd\[19819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root ... |
2019-12-22 18:04:58 |
| 118.70.118.14 | attackspambots | Port scan on 1 port(s): 8291 |
2019-12-22 18:21:50 |
| 76.80.1.2 | attack | Lines containing failures of 76.80.1.2 Dec 17 05:16:37 supported sshd[17919]: Invalid user rin from 76.80.1.2 port 47363 Dec 17 05:16:37 supported sshd[17919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.80.1.2 Dec 17 05:16:39 supported sshd[17919]: Failed password for invalid user rin from 76.80.1.2 port 47363 ssh2 Dec 17 05:16:39 supported sshd[17919]: Received disconnect from 76.80.1.2 port 47363:11: Bye Bye [preauth] Dec 17 05:16:39 supported sshd[17919]: Disconnected from invalid user rin 76.80.1.2 port 47363 [preauth] Dec 17 05:33:57 supported sshd[19928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.80.1.2 user=r.r Dec 17 05:33:58 supported sshd[19928]: Failed password for r.r from 76.80.1.2 port 36023 ssh2 Dec 17 05:33:59 supported sshd[19928]: Received disconnect from 76.80.1.2 port 36023:11: Bye Bye [preauth] Dec 17 05:33:59 supported sshd[19928]: Disconnected from au........ ------------------------------ |
2019-12-22 18:18:38 |
| 175.5.119.214 | attackbotsspam | FTP Brute Force |
2019-12-22 18:31:55 |
| 92.119.160.52 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-12-22 18:29:07 |