222.139.29.75 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Henan Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Lines containing failures of 222.139.29.75 Aug 25 09:43:30 kopano sshd[14379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.139.29.75 user=r.r Aug 25 09:43:32 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2 Aug 25 09:43:34 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2 Aug 25 09:43:36 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2 Aug 25 09:43:38 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.139.29.75	2019-08-25 21:09:35

类型

评论内容

时间

attackspam

Lines containing failures of 222.139.29.75
Aug 25 09:43:30 kopano sshd[14379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.139.29.75  user=r.r
Aug 25 09:43:32 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2
Aug 25 09:43:34 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2
Aug 25 09:43:36 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2
Aug 25 09:43:38 kopano sshd[14379]: Failed password for r.r from 222.139.29.75 port 44941 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=222.139.29.75

2019-08-25 21:09:35

相同子网IP讨论:

IP	类型	评论内容	时间
222.139.29.134	attackspam	unauthorized connection attempt	2020-02-19 15:09:12
222.139.29.179	attackbots	SSH authentication failure x 6 reported by Fail2Ban ...	2019-08-15 23:08:44

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.139.29.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25065
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;222.139.29.75.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082500 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 25 21:09:27 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

75.29.139.222.in-addr.arpa domain name pointer hn.kd.ny.adsl.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
75.29.139.222.in-addr.arpa	name = hn.kd.ny.adsl.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
113.183.136.228	attackbotsspam	Unauthorized connection attempt from IP address 113.183.136.228 on Port 445(SMB)	2020-04-07 04:11:38
103.119.66.119	attackbots	Unauthorized connection attempt from IP address 103.119.66.119 on Port 445(SMB)	2020-04-07 04:12:42
117.176.240.100	attack	(ftpd) Failed FTP login from 117.176.240.100 (CN/China/-): 10 in the last 3600 secs	2020-04-07 03:42:56
59.25.169.210	attackspam	Apr 6 17:33:10 mout sshd[28939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.25.169.210 user=pi Apr 6 17:33:12 mout sshd[28939]: Failed password for pi from 59.25.169.210 port 44434 ssh2 Apr 6 17:33:12 mout sshd[28939]: Connection closed by 59.25.169.210 port 44434 [preauth]	2020-04-07 03:52:41
185.53.88.39	attack	Apr 6 22:03:03 debian-2gb-nbg1-2 kernel: \[8462408.349839\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.53.88.39 DST=195.201.40.59 LEN=440 TOS=0x00 PREC=0x00 TTL=54 ID=42660 DF PROTO=UDP SPT=5122 DPT=5060 LEN=420	2020-04-07 04:16:32
84.141.246.166	attackbots	Apr 6 22:12:49 minden010 postfix/smtpd[28140]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 22:12:50 minden010 postfix/smtpd[20684]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 22:12:50 minden010 postfix/smtpd[17595]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 22:12:50 minden010 postfix/smtpd[28139]: NOQUEUE: reject: RCPT from p548DF6A6.dip0.t-ipconnect.de[84.141.246.166]: 450 4.7.1 : He ...	2020-04-07 04:13:13
78.128.113.83	attack	Apr 6 21:51:50 web01.agentur-b-2.de postfix/smtps/smtpd[284643]: warning: unknown[78.128.113.83]: SASL PLAIN authentication failed: Apr 6 21:51:52 web01.agentur-b-2.de postfix/smtps/smtpd[284643]: lost connection after AUTH from unknown[78.128.113.83] Apr 6 21:52:03 web01.agentur-b-2.de postfix/smtps/smtpd[284643]: lost connection after AUTH from unknown[78.128.113.83] Apr 6 21:52:09 web01.agentur-b-2.de postfix/smtps/smtpd[284671]: warning: unknown[78.128.113.83]: SASL PLAIN authentication failed: Apr 6 21:52:09 web01.agentur-b-2.de postfix/smtps/smtpd[284671]: lost connection after AUTH from unknown[78.128.113.83]	2020-04-07 04:16:57
128.199.173.208	attack	SSH Login Bruteforce	2020-04-07 04:09:41
123.217.137.209	attack	Unauthorized connection attempt from IP address 123.217.137.209 on Port 445(SMB)	2020-04-07 04:07:32
222.186.180.130	attack	Apr 6 21:42:24 plex sshd[26423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root Apr 6 21:42:26 plex sshd[26423]: Failed password for root from 222.186.180.130 port 53284 ssh2	2020-04-07 03:45:18
222.186.175.169	attackbotsspam	Apr 6 22:02:33 plex sshd[27131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Apr 6 22:02:35 plex sshd[27131]: Failed password for root from 222.186.175.169 port 9818 ssh2	2020-04-07 04:04:23
93.61.43.217	attackspam	Microsoft SQL Server User Authentication Brute Force Attempt, PTR: 93-61-43-217.ip144.fastwebnet.it.	2020-04-07 03:53:50
222.186.52.139	attackspambots	$f2bV_matches	2020-04-07 03:54:31
142.93.218.236	attack	[ssh] SSH attack	2020-04-07 03:45:52
189.212.119.184	attackbots	Automatic report - Port Scan Attack	2020-04-07 04:14:53

最近上报的IP列表

49.103.22.203	188.176.43.110	96.103.98.20	40.132.192.20
55.92.129.2	151.21.14.169	217.23.12.96	161.106.132.137
142.92.240.182	131.184.238.47	197.20.166.10	35.178.240.243
189.86.195.130	64.235.33.97	116.95.249.189	88.205.175.128
135.73.160.21	86.131.34.233	123.185.206.90	134.209.111.115