51.68.92.119 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): France

运营商(isp): OVH SAS

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	"SSH brute force auth login attempt."	2020-01-23 16:48:42
attackspambots	Lines containing failures of 51.68.92.119 Jan 7 09:34:38 dns01 sshd[9259]: Invalid user vendeg from 51.68.92.119 port 52530 Jan 7 09:34:38 dns01 sshd[9259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.92.119 Jan 7 09:34:40 dns01 sshd[9259]: Failed password for invalid user vendeg from 51.68.92.119 port 52530 ssh2 Jan 7 09:34:40 dns01 sshd[9259]: Received disconnect from 51.68.92.119 port 52530:11: Bye Bye [preauth] Jan 7 09:34:40 dns01 sshd[9259]: Disconnected from invalid user vendeg 51.68.92.119 port 52530 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.68.92.119	2020-01-08 22:09:25

类型

评论内容

时间

attackspam

"SSH brute force auth login attempt."

2020-01-23 16:48:42

attackspambots

Lines containing failures of 51.68.92.119
Jan  7 09:34:38 dns01 sshd[9259]: Invalid user vendeg from 51.68.92.119 port 52530
Jan  7 09:34:38 dns01 sshd[9259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.92.119
Jan  7 09:34:40 dns01 sshd[9259]: Failed password for invalid user vendeg from 51.68.92.119 port 52530 ssh2
Jan  7 09:34:40 dns01 sshd[9259]: Received disconnect from 51.68.92.119 port 52530:11: Bye Bye [preauth]
Jan  7 09:34:40 dns01 sshd[9259]: Disconnected from invalid user vendeg 51.68.92.119 port 52530 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=51.68.92.119

2020-01-08 22:09:25

相同子网IP讨论:

IP	类型	评论内容	时间
51.68.92.75	attackspambots	\[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.786+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="3636cacc792a319e9cb55db498780c21",ExpectedResponse="" \[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.964+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="e7713969bfc92705ae4c203dcc3bed82",ExpectedResponse="" \[2019-07-05 22:20:02\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponse	2019-07-06 04:34:33

类型

评论内容

时间

51.68.92.75

attackspambots

\[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.786+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="3636cacc792a319e9cb55db498780c21",ExpectedResponse=""
\[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.964+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="e7713969bfc92705ae4c203dcc3bed82",ExpectedResponse=""
\[2019-07-05 22:20:02\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponse

2019-07-06 04:34:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 51.68.92.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26626
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;51.68.92.119.			IN	A

;; AUTHORITY SECTION:
.			300	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 22:09:21 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

119.92.68.51.in-addr.arpa domain name pointer ip-51-68-92.eu.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
119.92.68.51.in-addr.arpa	name = ip-51-68-92.eu.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
200.57.2.114	attack	445/tcp 445/tcp 445/tcp... [2019-07-22/27]8pkt,1pt.(tcp)	2019-07-28 00:57:04
115.78.94.131	attackbots	445/tcp 445/tcp 445/tcp [2019-06-04/07-27]3pkt	2019-07-28 01:04:09
110.22.55.135	attack	port scan and connect, tcp 23 (telnet)	2019-07-28 00:51:32
138.121.161.198	attack	Jul 27 16:04:08 *** sshd[17566]: User root from 138.121.161.198 not allowed because not listed in AllowUsers	2019-07-28 01:23:48
200.89.159.112	attackspam	Jul 27 11:57:23 TORMINT sshd\[7710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.159.112 user=root Jul 27 11:57:25 TORMINT sshd\[7710\]: Failed password for root from 200.89.159.112 port 43026 ssh2 Jul 27 12:03:07 TORMINT sshd\[7947\]: Invalid user com from 200.89.159.112 Jul 27 12:03:07 TORMINT sshd\[7947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.159.112 ...	2019-07-28 01:57:56
133.130.97.118	attackbotsspam	Jul 27 15:59:57 MK-Soft-VM5 sshd\[31814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.97.118 user=root Jul 27 15:59:59 MK-Soft-VM5 sshd\[31814\]: Failed password for root from 133.130.97.118 port 37524 ssh2 Jul 27 16:04:48 MK-Soft-VM5 sshd\[31835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.97.118 user=root ...	2019-07-28 00:59:24
190.186.198.18	attack	445/tcp 445/tcp 445/tcp... [2019-06-21/07-27]6pkt,1pt.(tcp)	2019-07-28 00:53:14
120.0.160.73	attackbotsspam	5500/tcp 5500/tcp 5500/tcp... [2019-07-11/27]9pkt,1pt.(tcp)	2019-07-28 01:32:27
162.252.57.202	attackspambots	445/tcp 445/tcp 445/tcp... [2019-05-30/07-27]17pkt,1pt.(tcp)	2019-07-28 01:21:20
174.126.214.106	attack	POST / HTTP/1.1	2019-07-28 01:53:17
82.64.110.42	attackspambots	8080/tcp 5555/tcp [2019-07-05/27]2pkt	2019-07-28 01:23:11
51.79.43.14	attack	10 attempts against mh-pma-try-ban on sky.magehost.pro	2019-07-28 01:37:26
168.205.190.232	attack	DATE:2019-07-27 18:03:37, IP:168.205.190.232, PORT:ssh SSH brute force auth (thor)	2019-07-28 01:53:47
109.123.117.237	attackbots	9002/tcp 2004/tcp 65535/tcp... [2019-05-30/07-26]12pkt,9pt.(tcp)	2019-07-28 01:40:00
71.6.233.101	attack	5431/tcp 4001/tcp 8820/tcp... [2019-06-03/07-27]5pkt,4pt.(tcp),1pt.(udp)	2019-07-28 02:02:36

最近上报的IP列表

167.89.16.13	171.236.245.87	79.132.183.177	61.140.228.163
89.108.109.38	123.188.151.254	63.83.78.114	45.66.35.35
52.67.66.165	5.62.34.14	69.94.158.117	14.251.168.172
149.28.110.31	27.159.122.173	45.141.86.118	190.2.106.78
218.164.2.31	119.206.88.94	142.11.241.65	36.72.148.148