城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): China Unicom Henan Province Network
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspam | Jun 11 13:01:52 server378 sshd[26615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.225.145.13 user=r.r Jun 11 13:01:54 server378 sshd[26615]: Failed password for r.r from 42.225.145.13 port 35258 ssh2 Jun 11 13:01:55 server378 sshd[26615]: Received disconnect from 42.225.145.13 port 35258:11: Bye Bye [preauth] Jun 11 13:01:55 server378 sshd[26615]: Disconnected from 42.225.145.13 port 35258 [preauth] Jun 11 13:09:02 server378 sshd[26993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.225.145.13 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.225.145.13 |
2020-06-12 22:52:33 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 42.225.145.52 | attackspam | Aug 20 04:52:26 master sshd[24801]: Failed password for invalid user andes from 42.225.145.52 port 41960 ssh2 Aug 20 05:02:39 master sshd[25357]: Failed password for invalid user ubuntu from 42.225.145.52 port 63140 ssh2 Aug 20 05:06:40 master sshd[25419]: Failed password for invalid user admin from 42.225.145.52 port 58856 ssh2 Aug 20 05:10:34 master sshd[25549]: Failed password for root from 42.225.145.52 port 54578 ssh2 Aug 20 05:14:39 master sshd[25565]: Failed password for invalid user jxs from 42.225.145.52 port 50306 ssh2 Aug 20 05:18:35 master sshd[25639]: Failed password for root from 42.225.145.52 port 46008 ssh2 Aug 20 05:22:49 master sshd[25736]: Failed password for invalid user mq from 42.225.145.52 port 41746 ssh2 Aug 20 05:26:44 master sshd[25796]: Failed password for invalid user cz from 42.225.145.52 port 37458 ssh2 Aug 20 05:30:38 master sshd[26236]: Failed password for invalid user user3 from 42.225.145.52 port 33182 ssh2 |
2020-08-20 18:03:17 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.225.145.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.225.145.13. IN A
;; AUTHORITY SECTION:
. 532 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020061200 1800 900 604800 86400
;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 12 22:52:28 CST 2020
;; MSG SIZE rcvd: 11713.145.225.42.in-addr.arpa domain name pointer hn.kd.ny.adsl.Server: 100.100.2.138
Address: 100.100.2.138#53
Non-authoritative answer:
13.145.225.42.in-addr.arpa name = hn.kd.ny.adsl.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.30.23.118 | attack | $f2bV_matches |
2020-03-21 21:44:40 |
| 45.133.99.13 | attackspam | Mar 21 13:56:33 mail.srvfarm.net postfix/smtpd[114925]: warning: unknown[45.133.99.13]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 21 13:56:33 mail.srvfarm.net postfix/smtpd[114925]: lost connection after AUTH from unknown[45.133.99.13] Mar 21 13:56:39 mail.srvfarm.net postfix/smtpd[113169]: lost connection after AUTH from unknown[45.133.99.13] Mar 21 13:56:43 mail.srvfarm.net postfix/smtps/smtpd[116462]: lost connection after AUTH from unknown[45.133.99.13] Mar 21 13:56:46 mail.srvfarm.net postfix/smtpd[114925]: lost connection after AUTH from unknown[45.133.99.13] |
2020-03-21 21:15:04 |
| 160.153.245.134 | attackbots | Too many connections or unauthorized access detected from Arctic banned ip |
2020-03-21 21:25:45 |
| 5.196.18.169 | attack | Mar 21 12:52:46 raspberrypi sshd\[15975\]: Invalid user Joey from 5.196.18.169Mar 21 12:52:49 raspberrypi sshd\[15975\]: Failed password for invalid user Joey from 5.196.18.169 port 43560 ssh2Mar 21 13:03:33 raspberrypi sshd\[23640\]: Invalid user mella from 5.196.18.169 ... |
2020-03-21 21:24:01 |
| 203.135.20.36 | attack | Invalid user carlo from 203.135.20.36 port 39536 |
2020-03-21 21:48:31 |
| 176.31.250.160 | attack | Mar 21 12:53:54 XXXXXX sshd[776]: Invalid user yp from 176.31.250.160 port 56546 |
2020-03-21 21:06:37 |
| 115.29.7.45 | attack | Mar 21 12:31:27 XXX sshd[54124]: Invalid user postgres from 115.29.7.45 port 40118 |
2020-03-21 21:08:19 |
| 138.197.131.249 | attackspam | Mar 21 13:24:13 sigma sshd\[30492\]: Invalid user antony from 138.197.131.249Mar 21 13:24:15 sigma sshd\[30492\]: Failed password for invalid user antony from 138.197.131.249 port 58110 ssh2 ... |
2020-03-21 21:26:18 |
| 95.85.60.251 | attack | Mar 21 05:59:41 mockhub sshd[18683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251 Mar 21 05:59:43 mockhub sshd[18683]: Failed password for invalid user lukas from 95.85.60.251 port 55786 ssh2 ... |
2020-03-21 21:29:18 |
| 203.128.242.166 | attackbots | Invalid user zhans from 203.128.242.166 port 36123 |
2020-03-21 21:49:04 |
| 78.128.113.72 | attackbotsspam | Mar 21 13:45:08 relay postfix/smtpd\[20225\]: warning: unknown\[78.128.113.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 21 13:48:59 relay postfix/smtpd\[20225\]: warning: unknown\[78.128.113.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 21 13:49:17 relay postfix/smtpd\[19350\]: warning: unknown\[78.128.113.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 21 13:59:41 relay postfix/smtpd\[19350\]: warning: unknown\[78.128.113.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 21 13:59:58 relay postfix/smtpd\[20225\]: warning: unknown\[78.128.113.72\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-03-21 21:10:41 |
| 185.176.27.30 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 5493 proto: TCP cat: Misc Attack |
2020-03-21 21:16:04 |
| 45.55.177.170 | attackspam | Mar 21 07:21:58 server1 sshd\[30968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.177.170 Mar 21 07:21:59 server1 sshd\[30968\]: Failed password for invalid user candita from 45.55.177.170 port 43738 ssh2 Mar 21 07:26:29 server1 sshd\[32304\]: Invalid user roserver from 45.55.177.170 Mar 21 07:26:29 server1 sshd\[32304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.177.170 Mar 21 07:26:31 server1 sshd\[32304\]: Failed password for invalid user roserver from 45.55.177.170 port 33198 ssh2 ... |
2020-03-21 21:32:56 |
| 213.32.10.115 | attackbotsspam | k+ssh-bruteforce |
2020-03-21 21:25:15 |
| 193.112.4.12 | attackspam | Invalid user upload from 193.112.4.12 port 37332 |
2020-03-21 21:51:23 |