必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Uninet

主机名(hostname): unknown

机构(organization): Princess of Naradhiwas University

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
Dec 23 15:59:54 vpn01 sshd[18072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Dec 23 15:59:56 vpn01 sshd[18072]: Failed password for invalid user named from 202.29.70.42 port 43104 ssh2
...
2019-12-23 23:15:13
attackbots
Dec 20 00:55:35 eventyay sshd[31962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Dec 20 00:55:37 eventyay sshd[31962]: Failed password for invalid user Paint@2017 from 202.29.70.42 port 43640 ssh2
Dec 20 01:01:37 eventyay sshd[32123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
...
2019-12-20 08:08:02
attackspambots
$f2bV_matches
2019-12-13 04:59:26
attack
Too many connections or unauthorized access detected from Arctic banned ip
2019-12-12 22:05:38
attackbots
Dec 10 09:02:06 game-panel sshd[25546]: Failed password for backup from 202.29.70.42 port 39138 ssh2
Dec 10 09:08:17 game-panel sshd[25871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Dec 10 09:08:18 game-panel sshd[25871]: Failed password for invalid user gdm from 202.29.70.42 port 44660 ssh2
2019-12-10 17:35:46
attackspambots
Nov 16 09:26:18 * sshd[2272]: Failed password for backup from 202.29.70.42 port 45636 ssh2
2019-11-16 19:21:52
attack
$f2bV_matches
2019-11-14 17:36:37
attackbotsspam
Nov 12 13:19:49 eddieflores sshd\[20213\]: Invalid user kurtz from 202.29.70.42
Nov 12 13:19:49 eddieflores sshd\[20213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th
Nov 12 13:19:51 eddieflores sshd\[20213\]: Failed password for invalid user kurtz from 202.29.70.42 port 55566 ssh2
Nov 12 13:23:54 eddieflores sshd\[20527\]: Invalid user 1234566 from 202.29.70.42
Nov 12 13:23:54 eddieflores sshd\[20527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th
2019-11-13 07:24:42
attackbots
SSH Brute Force
2019-11-11 08:49:21
attackbots
Nov  6 13:41:30 vps666546 sshd\[16846\]: Invalid user millers from 202.29.70.42 port 52912
Nov  6 13:41:30 vps666546 sshd\[16846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Nov  6 13:41:32 vps666546 sshd\[16846\]: Failed password for invalid user millers from 202.29.70.42 port 52912 ssh2
Nov  6 13:45:33 vps666546 sshd\[16983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42  user=root
Nov  6 13:45:35 vps666546 sshd\[16983\]: Failed password for root from 202.29.70.42 port 59494 ssh2
...
2019-11-06 21:09:36
attackspambots
Oct 18 06:51:30 www sshd\[13459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42  user=root
Oct 18 06:51:32 www sshd\[13459\]: Failed password for root from 202.29.70.42 port 54028 ssh2
Oct 18 06:55:42 www sshd\[13510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42  user=root
...
2019-10-18 13:08:01
attackspambots
Sep 22 04:03:27 lcprod sshd\[3452\]: Invalid user admin from 202.29.70.42
Sep 22 04:03:27 lcprod sshd\[3452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th
Sep 22 04:03:30 lcprod sshd\[3452\]: Failed password for invalid user admin from 202.29.70.42 port 40614 ssh2
Sep 22 04:07:52 lcprod sshd\[3918\]: Invalid user user3 from 202.29.70.42
Sep 22 04:07:52 lcprod sshd\[3918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th
2019-09-23 03:21:58
attackspam
Sep  7 10:47:25 ny01 sshd[13368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Sep  7 10:47:26 ny01 sshd[13368]: Failed password for invalid user test from 202.29.70.42 port 56582 ssh2
Sep  7 10:52:17 ny01 sshd[14156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
2019-09-08 05:03:22
attack
Sep  3 21:25:09 web8 sshd\[18137\]: Invalid user wu from 202.29.70.42
Sep  3 21:25:09 web8 sshd\[18137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Sep  3 21:25:11 web8 sshd\[18137\]: Failed password for invalid user wu from 202.29.70.42 port 44630 ssh2
Sep  3 21:30:25 web8 sshd\[20710\]: Invalid user xmpp from 202.29.70.42
Sep  3 21:30:25 web8 sshd\[20710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
2019-09-04 07:42:04
attackbotsspam
Aug  2 12:24:49 unicornsoft sshd\[3016\]: Invalid user vbox from 202.29.70.42
Aug  2 12:24:49 unicornsoft sshd\[3016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Aug  2 12:24:51 unicornsoft sshd\[3016\]: Failed password for invalid user vbox from 202.29.70.42 port 49622 ssh2
2019-08-02 23:08:26
attackspam
Jul 25 08:41:48 plusreed sshd[14354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42  user=root
Jul 25 08:41:50 plusreed sshd[14354]: Failed password for root from 202.29.70.42 port 50282 ssh2
...
2019-07-25 20:47:07
attackspam
Jul 25 02:52:55 plusreed sshd[5184]: Invalid user sftpuser from 202.29.70.42
...
2019-07-25 15:08:09
attackbotsspam
Jul 18 19:54:11 s64-1 sshd[8156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
Jul 18 19:54:13 s64-1 sshd[8156]: Failed password for invalid user sam from 202.29.70.42 port 40986 ssh2
Jul 18 19:59:34 s64-1 sshd[8290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.42
...
2019-07-19 02:08:03
attackspambots
2019-07-16T18:55:12.887965abusebot-7.cloudsearch.cf sshd\[12022\]: Invalid user nyx from 202.29.70.42 port 59688
2019-07-17 02:58:06
attackbotsspam
2019-06-22T15:56:23.704600enmeeting.mahidol.ac.th sshd\[1870\]: Invalid user han from 202.29.70.42 port 41712
2019-06-22T15:56:23.718692enmeeting.mahidol.ac.th sshd\[1870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt.pnu.ac.th
2019-06-22T15:56:25.681350enmeeting.mahidol.ac.th sshd\[1870\]: Failed password for invalid user han from 202.29.70.42 port 41712 ssh2
...
2019-06-22 19:47:19
相同子网IP讨论:
IP 类型 评论内容 时间
202.29.70.46 attack
$f2bV_matches
2020-02-11 03:03:09
202.29.70.46 attackspambots
$f2bV_matches
2019-10-04 03:05:10
202.29.70.46 attackspambots
Aug 23 19:10:38 fr01 sshd[11699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.46  user=root
Aug 23 19:10:41 fr01 sshd[11699]: Failed password for root from 202.29.70.46 port 58372 ssh2
Aug 23 19:10:45 fr01 sshd[11701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.46  user=root
Aug 23 19:10:47 fr01 sshd[11701]: Failed password for root from 202.29.70.46 port 40266 ssh2
Aug 23 19:10:50 fr01 sshd[11743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.46  user=root
Aug 23 19:10:52 fr01 sshd[11743]: Failed password for root from 202.29.70.46 port 50392 ssh2
...
2019-08-24 05:19:19
202.29.70.46 attackbots
2019-08-15T17:50:55.587310wiz-ks3 sshd[12175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt2.pnu.ac.th  user=root
2019-08-15T17:50:57.308866wiz-ks3 sshd[12175]: Failed password for root from 202.29.70.46 port 37784 ssh2
2019-08-15T17:51:20.150274wiz-ks3 sshd[12177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt2.pnu.ac.th  user=root
2019-08-15T17:51:21.636145wiz-ks3 sshd[12177]: Failed password for root from 202.29.70.46 port 41570 ssh2
2019-08-15T17:51:40.447160wiz-ks3 sshd[12180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt2.pnu.ac.th  user=root
2019-08-15T17:51:42.013136wiz-ks3 sshd[12180]: Failed password for root from 202.29.70.46 port 45362 ssh2
2019-08-15T17:52:00.771609wiz-ks3 sshd[12182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mgt2.pnu.ac.th  user=root
2019-08-15T17:52:03.416521wiz-ks3 sshd[12182]: Failed password
2019-08-21 14:41:28
202.29.70.46 attack
Aug  9 08:54:29 MK-Soft-Root1 sshd\[12240\]: Invalid user butter from 202.29.70.46 port 59262
Aug  9 08:54:29 MK-Soft-Root1 sshd\[12240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.70.46
Aug  9 08:54:31 MK-Soft-Root1 sshd\[12240\]: Failed password for invalid user butter from 202.29.70.46 port 59262 ssh2
...
2019-08-09 23:21:14
202.29.70.46 attackbots
2019-08-07T17:42:51.870187abusebot-8.cloudsearch.cf sshd\[10709\]: Invalid user oracle from 202.29.70.46 port 35974
2019-08-08 03:52:59
202.29.70.46 attackbots
Invalid user test from 202.29.70.46 port 57534
2019-07-28 04:51:57
202.29.70.46 attack
Triggered by Fail2Ban at Ares web server
2019-07-20 08:48:14
202.29.70.46 attackbots
2019-06-29T18:46:34.661429Z 0057d11129e5 New connection: 202.29.70.46:50118 (172.17.0.4:2222) [session: 0057d11129e5]
2019-06-29T18:46:50.869745Z 45b181e92b7d New connection: 202.29.70.46:45264 (172.17.0.4:2222) [session: 45b181e92b7d]
2019-06-30 11:47:55
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.29.70.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64723
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.29.70.42.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 05 17:47:45 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:
42.70.29.202.in-addr.arpa domain name pointer mgt.pnu.ac.th.
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
42.70.29.202.in-addr.arpa	name = mgt.pnu.ac.th.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
188.247.73.225 attackbots
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-26 02:54:32
177.91.200.7 attack
SSH invalid-user multiple login try
2019-11-26 02:57:14
87.101.95.107 attackbotsspam
Fail2Ban Ban Triggered
2019-11-26 02:19:07
62.210.167.67 attackbotsspam
Automatic report - SSH Brute-Force Attack
2019-11-26 02:29:08
60.168.128.2 attackbotsspam
Invalid user kjrlaug from 60.168.128.2 port 42276
2019-11-26 02:55:44
41.83.130.209 attack
Nov 25 16:34:36 elektron postfix/smtpd\[27635\]: warning: unknown\[41.83.130.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 25 16:34:44 elektron postfix/smtpd\[27635\]: warning: unknown\[41.83.130.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 25 16:34:55 elektron postfix/smtpd\[27635\]: warning: unknown\[41.83.130.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 25 16:35:10 elektron postfix/smtpd\[21364\]: warning: unknown\[41.83.130.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 25 16:35:18 elektron postfix/smtpd\[27635\]: warning: unknown\[41.83.130.209\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-26 02:56:24
178.128.226.52 attackspambots
Nov 25 17:52:44 root sshd[18241]: Failed password for root from 178.128.226.52 port 39700 ssh2
Nov 25 17:58:44 root sshd[18324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.226.52 
Nov 25 17:58:46 root sshd[18324]: Failed password for invalid user trazo from 178.128.226.52 port 45892 ssh2
...
2019-11-26 02:38:08
49.88.112.68 attackspambots
Nov 25 20:24:22 sauna sshd[232996]: Failed password for root from 49.88.112.68 port 24772 ssh2
...
2019-11-26 02:27:07
43.240.125.198 attackspambots
Nov 25 07:50:30 wbs sshd\[18395\]: Invalid user point from 43.240.125.198
Nov 25 07:50:30 wbs sshd\[18395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.240.125.198
Nov 25 07:50:32 wbs sshd\[18395\]: Failed password for invalid user point from 43.240.125.198 port 41976 ssh2
Nov 25 07:58:00 wbs sshd\[18959\]: Invalid user uy123 from 43.240.125.198
Nov 25 07:58:00 wbs sshd\[18959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.240.125.198
2019-11-26 02:19:19
206.189.155.76 attackspam
206.189.155.76 - - \[25/Nov/2019:16:05:27 +0000\] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
206.189.155.76 - - \[25/Nov/2019:16:05:32 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-11-26 02:37:55
77.53.247.42 attackbotsspam
Telnet Server BruteForce Attack
2019-11-26 02:16:49
24.121.204.206 attackspambots
24.121.204.206 was recorded 6 times by 1 hosts attempting to connect to the following ports: 51413. Incident counter (4h, 24h, all-time): 6, 12, 12
2019-11-26 02:53:10
5.69.203.128 attackbots
Nov 25 07:26:17 kmh-mb-001 sshd[20722]: Invalid user tb from 5.69.203.128 port 57707
Nov 25 07:26:17 kmh-mb-001 sshd[20722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.69.203.128
Nov 25 07:26:19 kmh-mb-001 sshd[20722]: Failed password for invalid user tb from 5.69.203.128 port 57707 ssh2
Nov 25 07:26:19 kmh-mb-001 sshd[20722]: Received disconnect from 5.69.203.128 port 57707:11: Bye Bye [preauth]
Nov 25 07:26:19 kmh-mb-001 sshd[20722]: Disconnected from 5.69.203.128 port 57707 [preauth]
Nov 25 07:33:36 kmh-mb-001 sshd[20933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.69.203.128  user=r.r
Nov 25 07:33:38 kmh-mb-001 sshd[20933]: Failed password for r.r from 5.69.203.128 port 60208 ssh2
Nov 25 07:33:38 kmh-mb-001 sshd[20933]: Received disconnect from 5.69.203.128 port 60208:11: Bye Bye [preauth]
Nov 25 07:33:38 kmh-mb-001 sshd[20933]: Disconnected from 5.69.203.128 port 60208 [pr........
-------------------------------
2019-11-26 02:42:35
200.52.19.138 attack
Fail2Ban Ban Triggered
2019-11-26 02:31:30
185.176.27.2 attack
11/25/2019-19:42:35.753964 185.176.27.2 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-26 02:52:24

最近上报的IP列表

182.180.151.2 118.24.178.116 113.160.185.144 104.18.31.233
14.177.64.104 220.194.237.43 212.225.196.16 192.241.129.190
155.223.63.120 119.28.189.208 62.56.251.204 184.105.139.68
180.211.162.254 162.243.150.140 204.244.124.57 113.176.70.233
112.133.229.242 182.75.82.54 178.89.178.221 200.97.28.54