52.142.196.145

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	" "	2020-08-08 22:31:32
attack	Jul 18 05:35:14 vps46666688 sshd[13648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.196.145 Jul 18 05:35:16 vps46666688 sshd[13648]: Failed password for invalid user admin from 52.142.196.145 port 1280 ssh2 ...	2020-07-18 17:23:32
attackspam	RDP Bruteforce	2020-04-24 04:18:03

类型

评论内容

时间

attack

" "

2020-08-08 22:31:32

attack

Jul 18 05:35:14 vps46666688 sshd[13648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.196.145
Jul 18 05:35:16 vps46666688 sshd[13648]: Failed password for invalid user admin from 52.142.196.145 port 1280 ssh2
...

2020-07-18 17:23:32

attackspam

RDP Bruteforce

2020-04-24 04:18:03

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.142.196.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49544
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.142.196.145.			IN	A

;; AUTHORITY SECTION:
.			145	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042301 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 24 04:18:00 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 145.196.142.52.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 145.196.142.52.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
51.83.76.25	attack	Invalid user madison from 51.83.76.25 port 49684	2020-09-19 17:02:00
61.93.240.18	attackbots	Sep 19 08:39:12 piServer sshd[6357]: Failed password for root from 61.93.240.18 port 34001 ssh2 Sep 19 08:42:41 piServer sshd[6748]: Failed password for root from 61.93.240.18 port 34141 ssh2 ...	2020-09-19 16:59:40
196.207.30.179	attackbotsspam	Brute forcing RDP port 3389	2020-09-19 17:24:13
150.95.31.150	attackspambots	Sep 19 08:48:52 server sshd[14627]: Failed password for root from 150.95.31.150 port 57202 ssh2 Sep 19 08:51:43 server sshd[15132]: Failed password for invalid user test123 from 150.95.31.150 port 41422 ssh2 Sep 19 08:54:34 server sshd[15806]: Failed password for root from 150.95.31.150 port 53872 ssh2	2020-09-19 16:52:28
177.159.111.228	attack	xmlrpc attack	2020-09-19 17:09:26
83.13.19.85	attack	Sep 19 02:59:34 askasleikir sshd[5276]: Failed password for invalid user admin from 83.13.19.85 port 45304 ssh2	2020-09-19 17:23:16
187.1.81.161	attack	Sep 19 01:02:13 h1745522 sshd[18772]: Invalid user jason from 187.1.81.161 port 59869 Sep 19 01:02:13 h1745522 sshd[18772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.1.81.161 Sep 19 01:02:13 h1745522 sshd[18772]: Invalid user jason from 187.1.81.161 port 59869 Sep 19 01:02:14 h1745522 sshd[18772]: Failed password for invalid user jason from 187.1.81.161 port 59869 ssh2 Sep 19 01:06:26 h1745522 sshd[26822]: Invalid user ts3bot from 187.1.81.161 port 56531 Sep 19 01:06:26 h1745522 sshd[26822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.1.81.161 Sep 19 01:06:26 h1745522 sshd[26822]: Invalid user ts3bot from 187.1.81.161 port 56531 Sep 19 01:06:29 h1745522 sshd[26822]: Failed password for invalid user ts3bot from 187.1.81.161 port 56531 ssh2 Sep 19 01:10:15 h1745522 sshd[31989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.1.81.161 user=root Sep ...	2020-09-19 17:06:46
122.115.57.174	attack	Sep 19 09:36:10 inter-technics sshd[29267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.115.57.174 user=root Sep 19 09:36:12 inter-technics sshd[29267]: Failed password for root from 122.115.57.174 port 45106 ssh2 Sep 19 09:40:28 inter-technics sshd[29701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.115.57.174 user=root Sep 19 09:40:31 inter-technics sshd[29701]: Failed password for root from 122.115.57.174 port 40690 ssh2 Sep 19 09:44:47 inter-technics sshd[29937]: Invalid user admin from 122.115.57.174 port 36432 ...	2020-09-19 17:20:02
141.98.10.209	attackspam	2020-09-19T09:23:49.923744shield sshd\[21574\]: Invalid user 1234 from 141.98.10.209 port 56392 2020-09-19T09:23:49.933589shield sshd\[21574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.209 2020-09-19T09:23:52.425357shield sshd\[21574\]: Failed password for invalid user 1234 from 141.98.10.209 port 56392 ssh2 2020-09-19T09:24:31.152612shield sshd\[21686\]: Invalid user user from 141.98.10.209 port 44242 2020-09-19T09:24:31.159352shield sshd\[21686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.209	2020-09-19 17:26:32
137.74.132.175	attackspam	Sep 19 03:37:12 ny01 sshd[6626]: Failed password for root from 137.74.132.175 port 52806 ssh2 Sep 19 03:41:00 ny01 sshd[7147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.132.175 Sep 19 03:41:03 ny01 sshd[7147]: Failed password for invalid user test2 from 137.74.132.175 port 36078 ssh2	2020-09-19 17:11:13
23.129.64.186	attack	SSH brutforce	2020-09-19 17:16:17
101.224.166.13	attackspam	Sep 19 02:42:22 vserver sshd\[24533\]: Failed password for root from 101.224.166.13 port 17057 ssh2Sep 19 02:45:31 vserver sshd\[24556\]: Failed password for root from 101.224.166.13 port 39547 ssh2Sep 19 02:48:35 vserver sshd\[24598\]: Failed password for root from 101.224.166.13 port 62048 ssh2Sep 19 02:51:37 vserver sshd\[24636\]: Invalid user oracle from 101.224.166.13 ...	2020-09-19 17:11:35
83.218.126.222	attackbots	Automatic report - XMLRPC Attack	2020-09-19 16:50:30
45.95.168.215	attackspambots	TCP (SYN) 45.95.168.215:49970 -> port 22, len 40	2020-09-19 16:58:22
101.255.81.91	attackbotsspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-19 16:56:57

最近上报的IP列表

168.61.55.145	70.37.84.242	200.187.127.8	217.118.178.100
242.78.147.193	31.174.178.132	152.124.162.224	62.108.42.184
23.99.128.104	208.198.245.238	201.223.50.96	186.93.93.26
51.89.142.43	13.77.158.96	190.144.249.7	202.142.99.127
219.79.56.166	13.71.119.97	20.46.40.146	15.164.232.13