80.242.35.128 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Slovakia (SLOVAK Republic)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
80.242.35.196	attack	Jun 25 02:59:13 Ubuntu-1404-trusty-64-minimal sshd\[5553\]: Invalid user odoo from 80.242.35.196 Jun 25 02:59:13 Ubuntu-1404-trusty-64-minimal sshd\[5553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.242.35.196 Jun 25 02:59:15 Ubuntu-1404-trusty-64-minimal sshd\[5553\]: Failed password for invalid user odoo from 80.242.35.196 port 36021 ssh2 Jun 25 03:02:18 Ubuntu-1404-trusty-64-minimal sshd\[9458\]: Invalid user rekha from 80.242.35.196 Jun 25 03:02:18 Ubuntu-1404-trusty-64-minimal sshd\[9458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.242.35.196	2019-06-25 13:54:38

类型

评论内容

时间

80.242.35.196

attack

Jun 25 02:59:13 Ubuntu-1404-trusty-64-minimal sshd\[5553\]: Invalid user odoo from 80.242.35.196
Jun 25 02:59:13 Ubuntu-1404-trusty-64-minimal sshd\[5553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.242.35.196
Jun 25 02:59:15 Ubuntu-1404-trusty-64-minimal sshd\[5553\]: Failed password for invalid user odoo from 80.242.35.196 port 36021 ssh2
Jun 25 03:02:18 Ubuntu-1404-trusty-64-minimal sshd\[9458\]: Invalid user rekha from 80.242.35.196
Jun 25 03:02:18 Ubuntu-1404-trusty-64-minimal sshd\[9458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.242.35.196

2019-06-25 13:54:38

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.242.35.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1137
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;80.242.35.128.			IN	A

;; AUTHORITY SECTION:
.			201	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061401 1800 900 604800 86400

;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 12:04:39 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

128.35.242.80.in-addr.arpa domain name pointer foniebid.gaya.sk.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
128.35.242.80.in-addr.arpa	name = foniebid.gaya.sk.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
69.85.239.36	attackspambots	Honeypot attack, port: 445, PTR: host-239-36.sti-k12.com.	2020-03-07 03:47:02
87.246.7.21	attackspambots	2020-03-06 16:24:26 dovecot_login authenticator failed for $xst6GN4f6$ \[87.246.7.21\]: 535 Incorrect authentication data $set_id=info@darkrp.com$ 2020-03-06 16:24:37 dovecot_login authenticator failed for $gxh6L94sp$ \[87.246.7.21\]: 535 Incorrect authentication data $set_id=info@darkrp.com$ 2020-03-06 16:24:52 dovecot_login authenticator failed for $1My6Ab82rY$ \[87.246.7.21\]: 535 Incorrect authentication data $set_id=info@darkrp.com$ 2020-03-06 16:25:14 dovecot_login authenticator failed for $8GAZRsb$ \[87.246.7.21\]: 535 Incorrect authentication data $set_id=info@darkrp.com$ 2020-03-06 16:25:36 dovecot_login authenticator failed for $ZXNJvm46eg$ \[87.246.7.21\]: 535 Incorrect authentication data $set_id=info@darkrp.com$ ...	2020-03-07 03:48:45
140.0.28.21	attackspam	Mar 6 14:29:38 grey postfix/smtpd\[18743\]: NOQUEUE: reject: RCPT from unknown\[140.0.28.21\]: 554 5.7.1 Service unavailable\; Client host \[140.0.28.21\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?140.0.28.21\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-07 03:17:01
222.186.180.17	attackspam	Mar 6 20:08:39 nextcloud sshd\[24843\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Mar 6 20:08:41 nextcloud sshd\[24843\]: Failed password for root from 222.186.180.17 port 40156 ssh2 Mar 6 20:08:45 nextcloud sshd\[24843\]: Failed password for root from 222.186.180.17 port 40156 ssh2	2020-03-07 03:13:06
190.226.242.57	attack	Honeypot attack, port: 4567, PTR: host57.190-226-242.telecom.net.ar.	2020-03-07 03:19:41
25.28.64.21	attackbots	Scan detected and blocked 2020.03.06 14:29:34	2020-03-07 03:21:15
119.193.198.204	attack	Honeypot attack, port: 5555, PTR: PTR record not found	2020-03-07 03:30:03
37.12.149.120	attack	Honeypot attack, port: 445, PTR: 120.red-37-12-149.dynamicip.rima-tde.net.	2020-03-07 03:50:28
46.99.178.18	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-07 03:29:27
51.39.9.100	attackbotsspam	Automatic report - Port Scan Attack	2020-03-07 03:12:19
207.191.241.144	attackbots	CMS (WordPress or Joomla) login attempt.	2020-03-07 03:30:29
152.172.75.69	attackbotsspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-07 03:37:13
80.82.77.245	attackspam	Mar 6 19:44:00 debian-2gb-nbg1-2 kernel: \[5779404.477445\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.245 DST=195.201.40.59 LEN=57 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=35261 DPT=136 LEN=37	2020-03-07 03:44:48
203.130.242.68	attack	$f2bV_matches	2020-03-07 03:09:32
112.10.107.126	attackbots	Scan detected and blocked 2020.03.06 14:29:27	2020-03-07 03:28:14

最近上报的IP列表

106.111.29.101	169.229.173.35	169.229.173.202	169.229.174.76
178.197.221.90	180.122.52.57	180.122.74.215	180.122.97.127
180.122.235.105	181.48.149.122	194.233.70.183	202.60.135.106
210.10.1.35	180.76.211.187	221.230.232.116	222.190.208.121
221.230.220.114	4.44.104.242	159.223.79.197	212.41.9.158