219.73.2.14 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): Hong Kong Telecommunications (HKT) Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Honeypot attack, port: 5555, PTR: n219073002014.netvigator.com.	2020-03-30 16:48:49

相同子网IP讨论:

IP	类型	评论内容	时间
219.73.28.98	attackbots	Honeypot hit.	2020-08-14 13:10:09
219.73.28.136	attackbotsspam	Jul 21 19:12:21 vz239 sshd[10892]: Invalid user admin from 219.73.28.136 Jul 21 19:12:24 vz239 sshd[10892]: Failed password for invalid user admin from 219.73.28.136 port 41426 ssh2 Jul 21 19:12:24 vz239 sshd[10892]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth] Jul 21 19:12:29 vz239 sshd[10896]: Failed password for r.r from 219.73.28.136 port 41546 ssh2 Jul 21 19:12:29 vz239 sshd[10896]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth] Jul 21 19:12:31 vz239 sshd[10898]: Invalid user admin from 219.73.28.136 Jul 21 19:12:32 vz239 sshd[10898]: Failed password for invalid user admin from 219.73.28.136 port 41835 ssh2 Jul 21 19:12:33 vz239 sshd[10898]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth] Jul 21 19:12:34 vz239 sshd[10901]: Invalid user admin from 219.73.28.136 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=219.73.28.136	2020-07-22 03:11:19
219.73.2.214	attack	TCP (SYN) 219.73.2.214:29329 -> port 23, len 40	2020-06-27 22:27:44

类型

评论内容

时间

219.73.28.98

attackbots

Honeypot hit.

2020-08-14 13:10:09

219.73.28.136

attackbotsspam

Jul 21 19:12:21 vz239 sshd[10892]: Invalid user admin from 219.73.28.136
Jul 21 19:12:24 vz239 sshd[10892]: Failed password for invalid user admin from 219.73.28.136 port 41426 ssh2
Jul 21 19:12:24 vz239 sshd[10892]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth]
Jul 21 19:12:29 vz239 sshd[10896]: Failed password for r.r from 219.73.28.136 port 41546 ssh2
Jul 21 19:12:29 vz239 sshd[10896]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth]
Jul 21 19:12:31 vz239 sshd[10898]: Invalid user admin from 219.73.28.136
Jul 21 19:12:32 vz239 sshd[10898]: Failed password for invalid user admin from 219.73.28.136 port 41835 ssh2
Jul 21 19:12:33 vz239 sshd[10898]: Received disconnect from 219.73.28.136: 11: Bye Bye [preauth]
Jul 21 19:12:34 vz239 sshd[10901]: Invalid user admin from 219.73.28.136


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=219.73.28.136

2020-07-22 03:11:19

219.73.2.214

attack

 TCP (SYN) 219.73.2.214:29329 -> port 23, len 40

2020-06-27 22:27:44

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.73.2.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22343
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;219.73.2.14.			IN	A

;; AUTHORITY SECTION:
.			526	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020033000 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 30 16:48:41 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

14.2.73.219.in-addr.arpa domain name pointer n219073002014.netvigator.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.2.73.219.in-addr.arpa	name = n219073002014.netvigator.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
68.251.142.26	attack	Bruteforce on SSH Honeypot	2019-10-04 14:18:31
192.99.36.76	attackbotsspam	Lines containing failures of 192.99.36.76 Oct 2 21:26:37 shared06 sshd[32751]: Invalid user gr from 192.99.36.76 port 33978 Oct 2 21:26:37 shared06 sshd[32751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.36.76 Oct 2 21:26:39 shared06 sshd[32751]: Failed password for invalid user gr from 192.99.36.76 port 33978 ssh2 Oct 2 21:26:39 shared06 sshd[32751]: Received disconnect from 192.99.36.76 port 33978:11: Bye Bye [preauth] Oct 2 21:26:39 shared06 sshd[32751]: Disconnected from invalid user gr 192.99.36.76 port 33978 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=192.99.36.76	2019-10-04 14:13:44
185.143.221.34	attackbotsspam	They are hitting my RDP many times per minute. They are trying to guess the password for "administrator" and "admin".	2019-10-04 13:27:00
103.120.178.112	attackspambots	Automatic report - XMLRPC Attack	2019-10-04 13:43:28
193.32.160.143	attackbotsspam	2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address 2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address 2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address 2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address 2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address 2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\ rejected RCPT \: Unrouteable address 2019-10-04 07:18:44 H=\(\[193.32.160.143\]\) \[193.32.160.143\] F=\	2019-10-04 13:23:29
45.55.157.147	attackspambots	Sep 30 04:44:56 host sshd[31079]: Invalid user mashby from 45.55.157.147 Sep 30 04:44:56 host sshd[31079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.157.147 Sep 30 04:44:58 host sshd[31079]: Failed password for invalid user mashby from 45.55.157.147 port 60699 ssh2 Sep 30 04:44:58 host sshd[31079]: Received disconnect from 45.55.157.147: 11: Normal Shutdown [preauth] Sep 30 04:52:38 host sshd[23805]: Invalid user LENEL from 45.55.157.147 Sep 30 04:52:38 host sshd[23805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.157.147 Sep 30 04:52:40 host sshd[23805]: Failed password for invalid user LENEL from 45.55.157.147 port 54221 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.55.157.147	2019-10-04 13:45:52
69.17.158.101	attack	2019-10-04T03:57:16.880927abusebot-8.cloudsearch.cf sshd\[25119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.17.158.101 user=root	2019-10-04 13:46:58
66.249.65.105	attackbots	Automatic report - Banned IP Access	2019-10-04 13:56:43
45.82.153.39	attackbotsspam	10/04/2019-01:29:51.762141 45.82.153.39 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-10-04 13:54:17
23.129.64.194	attackbotsspam	[portscan] Port scan	2019-10-04 13:57:56
219.93.106.33	attackspambots	Sep 30 14:48:18 h1946882 sshd[15566]: Failed password for daemon from 2= 19.93.106.33 port 46680 ssh2 Sep 30 14:48:18 h1946882 sshd[15566]: Received disconnect from 219.93.1= 06.33: 11: Normal Shutdown [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=219.93.106.33	2019-10-04 13:58:21
139.155.71.154	attack	Oct 4 07:02:45 saschabauer sshd[12082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.71.154 Oct 4 07:02:47 saschabauer sshd[12082]: Failed password for invalid user !QAZ#EDC%TGB from 139.155.71.154 port 60116 ssh2	2019-10-04 13:42:59
185.216.140.6	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-10-04 13:55:50
181.63.245.127	attackspambots	Oct 1 14:44:20 own sshd[26525]: Invalid user ftpuser from 181.63.245.127 Oct 1 14:44:20 own sshd[26525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.63.245.127 Oct 1 14:44:21 own sshd[26525]: Failed password for invalid user ftpuser from 181.63.245.127 port 41121 ssh2 Oct 1 14:44:22 own sshd[26525]: Received disconnect from 181.63.245.127 port 41121:11: Normal Shutdown [preauth] Oct 1 14:44:22 own sshd[26525]: Disconnected from 181.63.245.127 port 41121 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.63.245.127	2019-10-04 14:16:43
190.14.38.128	attackspambots	Oct 3 23:46:06 localhost kernel: [3898585.975446] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.38.128 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=65 ID=9348 DF PROTO=TCP SPT=60026 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 23:46:06 localhost kernel: [3898585.975474] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.38.128 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=65 ID=9348 DF PROTO=TCP SPT=60026 DPT=22 SEQ=524906690 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 23:56:49 localhost kernel: [3899228.873309] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.38.128 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=76 ID=65006 DF PROTO=TCP SPT=58207 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 23:56:49 localhost kernel: [3899228.873334] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.38.128 DST=[mungedIP2] LEN=40 TOS=0x08 PREC	2019-10-04 14:08:57

最近上报的IP列表

78.156.140.19	14.182.109.118	36.237.5.34	36.26.95.179
110.77.137.237	176.50.10.136	113.185.43.211	51.15.118.114
183.129.159.162	186.79.94.95	14.166.51.205	14.162.158.136
116.102.134.73	14.165.170.242	202.101.92.26	77.88.66.106
186.124.142.171	113.181.219.233	92.233.223.162	80.60.206.224