94.191.117.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2020-04-14T12:24:54.927189shield sshd\[19189\]: Invalid user viviane from 94.191.117.139 port 58162 2020-04-14T12:24:54.930982shield sshd\[19189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.139 2020-04-14T12:24:56.996436shield sshd\[19189\]: Failed password for invalid user viviane from 94.191.117.139 port 58162 ssh2 2020-04-14T12:26:48.198675shield sshd\[19416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.139 user=root 2020-04-14T12:26:50.580432shield sshd\[19416\]: Failed password for root from 94.191.117.139 port 49540 ssh2	2020-04-14 23:10:22
attackspambots	SSH login attempts.	2020-04-08 17:27:12
attackspambots	$f2bV_matches	2020-04-07 15:47:20

类型

评论内容

时间

attack

2020-04-14T12:24:54.927189shield sshd\[19189\]: Invalid user viviane from 94.191.117.139 port 58162
2020-04-14T12:24:54.930982shield sshd\[19189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.139
2020-04-14T12:24:56.996436shield sshd\[19189\]: Failed password for invalid user viviane from 94.191.117.139 port 58162 ssh2
2020-04-14T12:26:48.198675shield sshd\[19416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.139  user=root
2020-04-14T12:26:50.580432shield sshd\[19416\]: Failed password for root from 94.191.117.139 port 49540 ssh2

2020-04-14 23:10:22

attackspambots

SSH login attempts.

2020-04-08 17:27:12

attackspambots

$f2bV_matches

2020-04-07 15:47:20

相同子网IP讨论:

IP	类型	评论内容	时间
94.191.117.29	attackbotsspam	2020-08-01T05:52:32.421088mail.broermann.family sshd[3056]: Failed password for root from 94.191.117.29 port 59058 ssh2 2020-08-01T05:54:39.448712mail.broermann.family sshd[3181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.29 user=root 2020-08-01T05:54:41.397843mail.broermann.family sshd[3181]: Failed password for root from 94.191.117.29 port 52278 ssh2 2020-08-01T05:56:42.173629mail.broermann.family sshd[3266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.29 user=root 2020-08-01T05:56:44.006233mail.broermann.family sshd[3266]: Failed password for root from 94.191.117.29 port 45490 ssh2 ...	2020-08-01 13:19:55
94.191.117.29	attack	Jul 31 07:31:36 fhem-rasp sshd[3577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.29 user=root Jul 31 07:31:38 fhem-rasp sshd[3577]: Failed password for root from 94.191.117.29 port 45506 ssh2 ...	2020-07-31 14:28:28

类型

评论内容

时间

94.191.117.29

attackbotsspam

2020-08-01T05:52:32.421088mail.broermann.family sshd[3056]: Failed password for root from 94.191.117.29 port 59058 ssh2
2020-08-01T05:54:39.448712mail.broermann.family sshd[3181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.29  user=root
2020-08-01T05:54:41.397843mail.broermann.family sshd[3181]: Failed password for root from 94.191.117.29 port 52278 ssh2
2020-08-01T05:56:42.173629mail.broermann.family sshd[3266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.29  user=root
2020-08-01T05:56:44.006233mail.broermann.family sshd[3266]: Failed password for root from 94.191.117.29 port 45490 ssh2
...

2020-08-01 13:19:55

94.191.117.29

attack

Jul 31 07:31:36 fhem-rasp sshd[3577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.117.29  user=root
Jul 31 07:31:38 fhem-rasp sshd[3577]: Failed password for root from 94.191.117.29 port 45506 ssh2
...

2020-07-31 14:28:28

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.191.117.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64953
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.191.117.139.			IN	A

;; AUTHORITY SECTION:
.			589	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040700 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 07 15:47:12 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 139.117.191.94.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.117.191.94.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
34.80.215.54	attack	Aug 11 01:25:06 docs sshd\[28930\]: Invalid user developer from 34.80.215.54Aug 11 01:25:09 docs sshd\[28930\]: Failed password for invalid user developer from 34.80.215.54 port 57048 ssh2Aug 11 01:29:59 docs sshd\[29020\]: Invalid user dumpy from 34.80.215.54Aug 11 01:30:01 docs sshd\[29020\]: Failed password for invalid user dumpy from 34.80.215.54 port 52172 ssh2Aug 11 01:34:51 docs sshd\[29111\]: Invalid user th from 34.80.215.54Aug 11 01:34:53 docs sshd\[29111\]: Failed password for invalid user th from 34.80.215.54 port 47392 ssh2 ...	2019-08-11 06:42:52
223.71.139.98	attackbots	Feb 26 06:42:50 motanud sshd\[10759\]: Invalid user cb from 223.71.139.98 port 47080 Feb 26 06:42:50 motanud sshd\[10759\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.71.139.98 Feb 26 06:42:53 motanud sshd\[10759\]: Failed password for invalid user cb from 223.71.139.98 port 47080 ssh2	2019-08-11 06:39:33
142.93.214.20	attackspambots	2019-08-10T22:34:23.780928abusebot-4.cloudsearch.cf sshd\[21033\]: Invalid user backup from 142.93.214.20 port 37452	2019-08-11 06:50:47
223.31.159.10	attackbotsspam	Mar 2 12:34:01 motanud sshd\[18405\]: Invalid user mv from 223.31.159.10 port 41908 Mar 2 12:34:01 motanud sshd\[18405\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.31.159.10 Mar 2 12:34:03 motanud sshd\[18405\]: Failed password for invalid user mv from 223.31.159.10 port 41908 ssh2	2019-08-11 06:40:08
27.154.225.186	attackspambots	Aug 10 23:52:37 mail sshd\[16029\]: Invalid user it1 from 27.154.225.186 port 40058 Aug 10 23:52:37 mail sshd\[16029\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.225.186 ...	2019-08-11 07:00:25
223.171.32.66	attackbotsspam	Jan 3 02:24:35 motanud sshd\[29577\]: Invalid user sandeep from 223.171.32.66 port 52103 Jan 3 02:24:35 motanud sshd\[29577\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.171.32.66 Jan 3 02:24:37 motanud sshd\[29577\]: Failed password for invalid user sandeep from 223.171.32.66 port 52103 ssh2	2019-08-11 07:14:36
182.61.61.44	attackspambots	$f2bV_matches	2019-08-11 06:59:21
200.37.95.43	attack	SSH-BruteForce	2019-08-11 07:10:33
148.70.23.131	attackspam	Aug 11 01:29:32 yabzik sshd[20918]: Failed password for root from 148.70.23.131 port 50004 ssh2 Aug 11 01:34:24 yabzik sshd[22526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.23.131 Aug 11 01:34:26 yabzik sshd[22526]: Failed password for invalid user admin from 148.70.23.131 port 46125 ssh2	2019-08-11 06:50:03
185.254.122.200	attackbots	Portscan or hack attempt detected by psad/fwsnort	2019-08-11 06:56:18
5.62.41.134	attack	\[2019-08-10 18:34:02\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1131' - Wrong password \[2019-08-10 18:34:02\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-10T18:34:02.349-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="47739",SessionID="0x7ff4d07e79a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/64294",Challenge="1509f8c3",ReceivedChallenge="1509f8c3",ReceivedHash="5e2df9ac53d04338e5a6bd8ee86661bd" \[2019-08-10 18:34:43\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1096' - Wrong password \[2019-08-10 18:34:43\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-10T18:34:43.115-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="54798",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/5	2019-08-11 06:45:45
178.62.44.104	attack	Aug 11 00:29:16 Ubuntu-1404-trusty-64-minimal sshd\[7125\]: Invalid user admin from 178.62.44.104 Aug 11 00:29:16 Ubuntu-1404-trusty-64-minimal sshd\[7125\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.44.104 Aug 11 00:29:18 Ubuntu-1404-trusty-64-minimal sshd\[7125\]: Failed password for invalid user admin from 178.62.44.104 port 42147 ssh2 Aug 11 00:51:35 Ubuntu-1404-trusty-64-minimal sshd\[21204\]: Invalid user admin from 178.62.44.104 Aug 11 00:51:35 Ubuntu-1404-trusty-64-minimal sshd\[21204\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.44.104	2019-08-11 06:51:56
203.110.215.219	attack	Aug 10 18:49:03 TORMINT sshd\[30571\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.215.219 user=root Aug 10 18:49:05 TORMINT sshd\[30571\]: Failed password for root from 203.110.215.219 port 48234 ssh2 Aug 10 18:58:33 TORMINT sshd\[31171\]: Invalid user tonix from 203.110.215.219 Aug 10 18:58:33 TORMINT sshd\[31171\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.215.219 ...	2019-08-11 07:00:57
223.171.32.56	attack	Jan 3 05:27:50 motanud sshd\[9013\]: Invalid user openerp from 223.171.32.56 port 47782 Jan 3 05:27:50 motanud sshd\[9013\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.171.32.56 Jan 3 05:27:52 motanud sshd\[9013\]: Failed password for invalid user openerp from 223.171.32.56 port 47782 ssh2	2019-08-11 07:15:34
180.153.58.183	attackbotsspam	Aug 11 00:34:22 localhost sshd\[23707\]: Invalid user wcsuser from 180.153.58.183 port 53347 Aug 11 00:34:22 localhost sshd\[23707\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.153.58.183 Aug 11 00:34:24 localhost sshd\[23707\]: Failed password for invalid user wcsuser from 180.153.58.183 port 53347 ssh2	2019-08-11 06:50:20

最近上报的IP列表

80.153.98.26	95.255.106.123	117.85.217.211	185.255.133.43
117.66.172.133	2.147.175.97	41.130.138.8	116.7.30.210
125.25.204.93	182.52.201.184	107.172.61.182	203.113.96.244
154.221.30.96	106.41.137.83	222.220.230.181	193.56.28.193
70.19.45.204	157.50.194.95	93.144.135.126	35.194.172.62