51.68.92.119 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): France

运营商(isp): OVH SAS

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	"SSH brute force auth login attempt."	2020-01-23 16:48:42
attackspambots	Lines containing failures of 51.68.92.119 Jan 7 09:34:38 dns01 sshd[9259]: Invalid user vendeg from 51.68.92.119 port 52530 Jan 7 09:34:38 dns01 sshd[9259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.92.119 Jan 7 09:34:40 dns01 sshd[9259]: Failed password for invalid user vendeg from 51.68.92.119 port 52530 ssh2 Jan 7 09:34:40 dns01 sshd[9259]: Received disconnect from 51.68.92.119 port 52530:11: Bye Bye [preauth] Jan 7 09:34:40 dns01 sshd[9259]: Disconnected from invalid user vendeg 51.68.92.119 port 52530 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.68.92.119	2020-01-08 22:09:25

类型

评论内容

时间

attackspam

"SSH brute force auth login attempt."

2020-01-23 16:48:42

attackspambots

Lines containing failures of 51.68.92.119
Jan  7 09:34:38 dns01 sshd[9259]: Invalid user vendeg from 51.68.92.119 port 52530
Jan  7 09:34:38 dns01 sshd[9259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.92.119
Jan  7 09:34:40 dns01 sshd[9259]: Failed password for invalid user vendeg from 51.68.92.119 port 52530 ssh2
Jan  7 09:34:40 dns01 sshd[9259]: Received disconnect from 51.68.92.119 port 52530:11: Bye Bye [preauth]
Jan  7 09:34:40 dns01 sshd[9259]: Disconnected from invalid user vendeg 51.68.92.119 port 52530 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=51.68.92.119

2020-01-08 22:09:25

相同子网IP讨论:

IP	类型	评论内容	时间
51.68.92.75	attackspambots	\[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.786+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="3636cacc792a319e9cb55db498780c21",ExpectedResponse="" \[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.964+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="e7713969bfc92705ae4c203dcc3bed82",ExpectedResponse="" \[2019-07-05 22:20:02\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponse	2019-07-06 04:34:33

类型

评论内容

时间

51.68.92.75

attackspambots

\[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.786+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="3636cacc792a319e9cb55db498780c21",ExpectedResponse=""
\[2019-07-05 22:20:01\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-05T22:20:01.964+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1322858975-894667662-1341635418",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/51.68.92.75/51121",Challenge="1562358001/bdf45d7a6f69edab46aadf5f7f46813d",Response="e7713969bfc92705ae4c203dcc3bed82",ExpectedResponse=""
\[2019-07-05 22:20:02\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponse

2019-07-06 04:34:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 51.68.92.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26626
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;51.68.92.119.			IN	A

;; AUTHORITY SECTION:
.			300	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 22:09:21 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

119.92.68.51.in-addr.arpa domain name pointer ip-51-68-92.eu.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
119.92.68.51.in-addr.arpa	name = ip-51-68-92.eu.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
202.79.168.192	attack	Mar 24 06:18:06 www sshd\[121936\]: Invalid user vinitha from 202.79.168.192 Mar 24 06:18:06 www sshd\[121936\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.79.168.192 Mar 24 06:18:07 www sshd\[121936\]: Failed password for invalid user vinitha from 202.79.168.192 port 42526 ssh2 ...	2020-03-24 12:30:07
106.13.119.18	attack	Unauthorized SSH login attempts	2020-03-24 12:00:38
122.51.101.238	attackspam	$f2bV_matches	2020-03-24 12:23:19
115.75.170.227	attackbots	1585022366 - 03/24/2020 04:59:26 Host: 115.75.170.227/115.75.170.227 Port: 445 TCP Blocked	2020-03-24 12:33:22
103.58.75.122	attack	Brute force SMTP login attempted. ...	2020-03-24 12:20:42
190.181.60.2	attackspambots	Mar 24 06:48:21 server sshd\[32357\]: Invalid user brooke from 190.181.60.2 Mar 24 06:48:21 server sshd\[32357\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-190-181-60-2.acelerate.net Mar 24 06:48:23 server sshd\[32357\]: Failed password for invalid user brooke from 190.181.60.2 port 39188 ssh2 Mar 24 07:00:34 server sshd\[2972\]: Invalid user dr from 190.181.60.2 Mar 24 07:00:34 server sshd\[2972\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-190-181-60-2.acelerate.net ...	2020-03-24 12:28:18
101.51.255.38	attackspambots	20/3/23@23:59:59: FAIL: Alarm-Network address from=101.51.255.38 ...	2020-03-24 12:11:44
188.166.117.213	attack	Mar 24 05:28:17 h2779839 sshd[25591]: Invalid user admin from 188.166.117.213 port 34086 Mar 24 05:28:17 h2779839 sshd[25591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.117.213 Mar 24 05:28:17 h2779839 sshd[25591]: Invalid user admin from 188.166.117.213 port 34086 Mar 24 05:28:20 h2779839 sshd[25591]: Failed password for invalid user admin from 188.166.117.213 port 34086 ssh2 Mar 24 05:31:58 h2779839 sshd[25704]: Invalid user control from 188.166.117.213 port 50820 Mar 24 05:31:58 h2779839 sshd[25704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.117.213 Mar 24 05:31:58 h2779839 sshd[25704]: Invalid user control from 188.166.117.213 port 50820 Mar 24 05:32:00 h2779839 sshd[25704]: Failed password for invalid user control from 188.166.117.213 port 50820 ssh2 Mar 24 05:35:33 h2779839 sshd[25846]: Invalid user zhushaopei from 188.166.117.213 port 39336 ...	2020-03-24 12:38:13
182.61.184.155	attack	Mar 24 04:51:22 h1745522 sshd[17051]: Invalid user www from 182.61.184.155 port 43554 Mar 24 04:51:22 h1745522 sshd[17051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.155 Mar 24 04:51:22 h1745522 sshd[17051]: Invalid user www from 182.61.184.155 port 43554 Mar 24 04:51:24 h1745522 sshd[17051]: Failed password for invalid user www from 182.61.184.155 port 43554 ssh2 Mar 24 04:55:37 h1745522 sshd[17503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.155 user=proxy Mar 24 04:55:38 h1745522 sshd[17503]: Failed password for proxy from 182.61.184.155 port 57674 ssh2 Mar 24 04:59:53 h1745522 sshd[17835]: Invalid user sd from 182.61.184.155 port 43550 Mar 24 04:59:53 h1745522 sshd[17835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.155 Mar 24 04:59:53 h1745522 sshd[17835]: Invalid user sd from 182.61.184.155 port 43550 Mar 24 04:59 ...	2020-03-24 12:16:46
142.93.137.144	attackspam	$f2bV_matches	2020-03-24 12:27:49
187.72.14.215	attackbotsspam	Lines containing failures of 187.72.14.215 Mar 24 04:29:48 kmh-vmh-001-fsn05 sshd[14149]: Invalid user zaida from 187.72.14.215 port 10791 Mar 24 04:29:48 kmh-vmh-001-fsn05 sshd[14149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.14.215 Mar 24 04:29:50 kmh-vmh-001-fsn05 sshd[14149]: Failed password for invalid user zaida from 187.72.14.215 port 10791 ssh2 Mar 24 04:29:51 kmh-vmh-001-fsn05 sshd[14149]: Received disconnect from 187.72.14.215 port 10791:11: Bye Bye [preauth] Mar 24 04:29:51 kmh-vmh-001-fsn05 sshd[14149]: Disconnected from invalid user zaida 187.72.14.215 port 10791 [preauth] Mar 24 04:54:46 kmh-vmh-001-fsn05 sshd[18512]: Invalid user gc from 187.72.14.215 port 41675 Mar 24 04:54:46 kmh-vmh-001-fsn05 sshd[18512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.14.215 Mar 24 04:54:48 kmh-vmh-001-fsn05 sshd[18512]: Failed password for invalid user gc from 187.72........ ------------------------------	2020-03-24 12:41:11
188.254.0.226	attackbots	Mar 24 04:25:20 XXX sshd[41144]: Invalid user testftp from 188.254.0.226 port 55674	2020-03-24 12:08:41
119.28.73.77	attack	Mar 24 03:19:43 XXX sshd[41398]: Invalid user shu from 119.28.73.77 port 51204	2020-03-24 12:03:54
167.114.144.96	attack	Mar 24 04:56:40 sd-53420 sshd\[419\]: Invalid user winklepleck from 167.114.144.96 Mar 24 04:56:40 sd-53420 sshd\[419\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.144.96 Mar 24 04:56:42 sd-53420 sshd\[419\]: Failed password for invalid user winklepleck from 167.114.144.96 port 51156 ssh2 Mar 24 04:59:58 sd-53420 sshd\[1478\]: Invalid user zhangzicheng from 167.114.144.96 Mar 24 04:59:58 sd-53420 sshd\[1478\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.144.96 ...	2020-03-24 12:13:23
79.137.82.213	attack	Mar 24 08:59:43 gw1 sshd[28857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.82.213 Mar 24 08:59:44 gw1 sshd[28857]: Failed password for invalid user django from 79.137.82.213 port 48376 ssh2 ...	2020-03-24 12:22:30

最近上报的IP列表

167.89.16.13	171.236.245.87	79.132.183.177	61.140.228.163
89.108.109.38	123.188.151.254	63.83.78.114	45.66.35.35
52.67.66.165	5.62.34.14	69.94.158.117	14.251.168.172
149.28.110.31	27.159.122.173	45.141.86.118	190.2.106.78
218.164.2.31	119.206.88.94	142.11.241.65	36.72.148.148