52.250.116.142

基本信息:

城市(city): unknown

省份(region): Washington

国家(country): United States

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	<6 unauthorized SSH connections	2020-06-29 15:10:10
attack	SSH brute-force attempt	2020-06-28 14:05:03
attack	Jun 26 23:26:33 IngegnereFirenze sshd[6287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.250.116.142 user=root ...	2020-06-27 07:29:02

类型

评论内容

时间

attackspambots

<6 unauthorized SSH connections

2020-06-29 15:10:10

attack

SSH brute-force attempt

2020-06-28 14:05:03

attack

Jun 26 23:26:33 IngegnereFirenze sshd[6287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.250.116.142  user=root
...

2020-06-27 07:29:02

相同子网IP讨论:

IP	类型	评论内容	时间
52.250.116.198	attackbotsspam	spam (f2b h2)	2020-07-27 07:47:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.250.116.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1064
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.250.116.142.			IN	A

;; AUTHORITY SECTION:
.			451	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062602 1800 900 604800 86400

;; Query time: 186 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 27 07:28:59 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 142.116.250.52.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.116.250.52.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
39.115.19.138	attackspambots	Invalid user purnima from 39.115.19.138 port 43524	2020-03-18 01:52:58
112.72.74.104	attackbots	1584434333 - 03/17/2020 09:38:53 Host: 112.72.74.104/112.72.74.104 Port: 445 TCP Blocked	2020-03-18 02:14:14
154.8.167.48	attackspam	2020-03-17T12:48:36.651653dmca.cloudsearch.cf sshd[31212]: Invalid user daniel from 154.8.167.48 port 41838 2020-03-17T12:48:36.658109dmca.cloudsearch.cf sshd[31212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.167.48 2020-03-17T12:48:36.651653dmca.cloudsearch.cf sshd[31212]: Invalid user daniel from 154.8.167.48 port 41838 2020-03-17T12:48:38.578628dmca.cloudsearch.cf sshd[31212]: Failed password for invalid user daniel from 154.8.167.48 port 41838 ssh2 2020-03-17T12:54:26.885001dmca.cloudsearch.cf sshd[31660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.167.48 user=root 2020-03-17T12:54:28.188266dmca.cloudsearch.cf sshd[31660]: Failed password for root from 154.8.167.48 port 46956 ssh2 2020-03-17T12:57:11.197568dmca.cloudsearch.cf sshd[31914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.167.48 user=root 2020-03-17T12:57:13.153035dmca. ...	2020-03-18 02:11:14
45.143.220.10	attackspam	Port 5073 scan denied	2020-03-18 02:06:10
61.14.228.162	attack	Unauthorised access (Mar 17) SRC=61.14.228.162 LEN=52 TTL=114 ID=26368 DF TCP DPT=1433 WINDOW=8192 SYN	2020-03-18 01:57:49
182.52.70.219	attack	Unauthorised access (Mar 17) SRC=182.52.70.219 LEN=52 TTL=116 ID=22905 DF TCP DPT=1433 WINDOW=8192 SYN	2020-03-18 02:09:03
115.216.58.2	attack	2020-03-17 12:58:26 H=(163.com) [115.216.58.2]:58988 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.4, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBL467423) 2020-03-17 13:01:18 H=(hfydl.com) [115.216.58.2]:63750 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.2, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBL467423) 2020-03-17 13:22:13 H=(hfydl.com) [115.216.58.2]:64872 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.2, 127.0.0.11, 127.0.0.4) (https://www.spamhaus.org/query/ip/115.216.58.2) ...	2020-03-18 02:28:25
106.75.87.152	attack	Automatic report BANNED IP	2020-03-18 02:11:43
218.255.139.66	attackbotsspam	20 attempts against mh-ssh on echoip	2020-03-18 02:15:53
85.132.79.170	attackbots	20/3/17@04:39:02: FAIL: Alarm-Network address from=85.132.79.170 ...	2020-03-18 02:03:33
195.9.9.66	attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-03-18 02:25:40
78.128.113.70	attackbots	Mar 17 16:06:25 blackbee postfix/smtpd\[10189\]: warning: unknown\[78.128.113.70\]: SASL LOGIN authentication failed: authentication failure Mar 17 16:06:28 blackbee postfix/smtpd\[10185\]: warning: unknown\[78.128.113.70\]: SASL LOGIN authentication failed: authentication failure Mar 17 16:07:08 blackbee postfix/smtpd\[10189\]: warning: unknown\[78.128.113.70\]: SASL LOGIN authentication failed: authentication failure Mar 17 16:07:11 blackbee postfix/smtpd\[10185\]: warning: unknown\[78.128.113.70\]: SASL LOGIN authentication failed: authentication failure Mar 17 16:07:24 blackbee postfix/smtpd\[10189\]: warning: unknown\[78.128.113.70\]: SASL LOGIN authentication failed: authentication failure ...	2020-03-18 02:16:54
222.186.173.183	attack	2020-03-17T17:49:46.976116shield sshd\[27458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root 2020-03-17T17:49:48.592849shield sshd\[27458\]: Failed password for root from 222.186.173.183 port 4130 ssh2 2020-03-17T17:49:52.199514shield sshd\[27458\]: Failed password for root from 222.186.173.183 port 4130 ssh2 2020-03-17T17:49:55.360121shield sshd\[27458\]: Failed password for root from 222.186.173.183 port 4130 ssh2 2020-03-17T17:49:58.913835shield sshd\[27458\]: Failed password for root from 222.186.173.183 port 4130 ssh2	2020-03-18 01:51:11
138.255.0.27	attackbotsspam	web-1 [ssh] SSH Attack	2020-03-18 02:13:47
92.240.204.64	attackbotsspam	Chat Spam	2020-03-18 01:46:54

最近上报的IP列表

91.82.108.13	171.8.242.107	176.98.137.244	144.2.139.126
151.83.119.20	219.91.233.10	121.16.118.89	75.158.148.93
170.106.121.141	198.110.38.203	196.111.251.116	193.146.123.104
2.101.17.149	116.129.138.23	90.212.243.104	2.96.147.124
121.172.240.142	184.98.11.125	212.225.189.134	14.156.147.33