103.21.117.247

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Shanghai Anchnet Tec Inc

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Feb 6 16:34:20 server sshd\[2432\]: Invalid user aye from 103.21.117.247 Feb 6 16:34:20 server sshd\[2432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.117.247 Feb 6 16:34:22 server sshd\[2432\]: Failed password for invalid user aye from 103.21.117.247 port 33800 ssh2 Feb 6 16:39:54 server sshd\[3363\]: Invalid user ljs from 103.21.117.247 Feb 6 16:39:54 server sshd\[3363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.117.247 ...	2020-02-07 03:49:12
attackbots	Unauthorized connection attempt detected from IP address 103.21.117.247 to port 2220 [J]	2020-02-06 04:08:39
attack	Jan 29 01:58:00 firewall sshd[22282]: Invalid user gast2 from 103.21.117.247 Jan 29 01:58:03 firewall sshd[22282]: Failed password for invalid user gast2 from 103.21.117.247 port 56552 ssh2 Jan 29 02:01:31 firewall sshd[22364]: Invalid user hansraj from 103.21.117.247 ...	2020-01-29 13:17:43

类型

评论内容

时间

attack

Feb  6 16:34:20 server sshd\[2432\]: Invalid user aye from 103.21.117.247
Feb  6 16:34:20 server sshd\[2432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.117.247 
Feb  6 16:34:22 server sshd\[2432\]: Failed password for invalid user aye from 103.21.117.247 port 33800 ssh2
Feb  6 16:39:54 server sshd\[3363\]: Invalid user ljs from 103.21.117.247
Feb  6 16:39:54 server sshd\[3363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.21.117.247 
...

2020-02-07 03:49:12

attackbots

Unauthorized connection attempt detected from IP address 103.21.117.247 to port 2220 [J]

2020-02-06 04:08:39

attack

Jan 29 01:58:00 firewall sshd[22282]: Invalid user gast2 from 103.21.117.247
Jan 29 01:58:03 firewall sshd[22282]: Failed password for invalid user gast2 from 103.21.117.247 port 56552 ssh2
Jan 29 02:01:31 firewall sshd[22364]: Invalid user hansraj from 103.21.117.247
...

2020-01-29 13:17:43

相同子网IP讨论:

IP	类型	评论内容	时间
103.21.117.88	attack	Unauthorized connection attempt detected from IP address 103.21.117.88 to port 2220 [J]	2020-02-06 08:22:05

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.21.117.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31657
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.21.117.247.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012900 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 13:17:39 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 247.117.21.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 247.117.21.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
195.231.3.82	attack	Mar 8 01:20:49 mail.srvfarm.net postfix/smtpd[3139370]: warning: unknown[195.231.3.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 8 01:20:49 mail.srvfarm.net postfix/smtpd[3139370]: lost connection after AUTH from unknown[195.231.3.82] Mar 8 01:27:13 mail.srvfarm.net postfix/smtpd[3128292]: warning: unknown[195.231.3.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 8 01:27:13 mail.srvfarm.net postfix/smtpd[3128292]: lost connection after AUTH from unknown[195.231.3.82] Mar 8 01:28:25 mail.srvfarm.net postfix/smtpd[3139405]: warning: unknown[195.231.3.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-03-08 09:05:09
190.175.25.245	attack	$f2bV_matches	2020-03-08 09:12:10
193.112.74.137	attackbotsspam	Mar 8 00:55:15 vpn01 sshd[1511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.74.137 Mar 8 00:55:17 vpn01 sshd[1511]: Failed password for invalid user alumni from 193.112.74.137 port 36545 ssh2 ...	2020-03-08 08:47:20
106.12.182.142	attackbots	Mar 8 01:21:31 ArkNodeAT sshd\[21122\]: Invalid user csgoserver from 106.12.182.142 Mar 8 01:21:31 ArkNodeAT sshd\[21122\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.182.142 Mar 8 01:21:33 ArkNodeAT sshd\[21122\]: Failed password for invalid user csgoserver from 106.12.182.142 port 34888 ssh2	2020-03-08 08:45:31
218.92.0.138	attackspam	Brute-force attempt banned	2020-03-08 09:20:41
185.234.219.65	attack	Attempted Brute Force (webmaild)	2020-03-08 08:44:30
134.73.51.200	attackbots	Mar 7 22:58:59 mail.srvfarm.net postfix/smtpd[2941676]: NOQUEUE: reject: RCPT from unknown[134.73.51.200]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= Mar 7 22:59:00 mail.srvfarm.net postfix/smtpd[2936464]: NOQUEUE: reject: RCPT from unknown[134.73.51.200]: 554 5.7.1 Service unavailable; Client host [134.73.51.200] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Mar 7 22:59:00 mail.srvfarm.net postfix/smtpd[2941671]: NOQUEUE: reject: RCPT from unknown[134.73.51.200]: 554 5.7.1 Service unavailable; Client host [134.73.51.200] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Mar 7 22:59:00 mail.srvfarm.net postfix/smtpd[2942552]: NOQUEUE: reject: RCPT from u	2020-03-08 09:05:32
45.146.200.94	attack	Mar 7 23:02:43 mail.srvfarm.net postfix/smtpd[2938533]: NOQUEUE: reject: RCPT from unknown[45.146.200.94]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 23:02:44 mail.srvfarm.net postfix/smtpd[2952584]: NOQUEUE: reject: RCPT from unknown[45.146.200.94]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 23:02:50 mail.srvfarm.net postfix/smtpd[2952584]: NOQUEUE: reject: RCPT from unknown[45.146.200.94]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 7 23:02:54 mail.srvfarm.net postfix/smtpd[2952584]: NOQUEUE: reject: RCPT from unknown[45.146.200.94]: 450 4.1.8 : Sender address rejected:	2020-03-08 09:07:53
111.206.87.226	attack	$f2bV_matches	2020-03-08 08:54:12
117.157.80.49	attackspambots	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-03-08 08:56:56
71.246.210.34	attackspam	Mar 7 23:58:49 localhost sshd\[26234\]: Invalid user cpanel from 71.246.210.34 Mar 7 23:58:49 localhost sshd\[26234\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.246.210.34 Mar 7 23:58:51 localhost sshd\[26234\]: Failed password for invalid user cpanel from 71.246.210.34 port 60226 ssh2 Mar 8 00:08:32 localhost sshd\[26640\]: Invalid user at from 71.246.210.34 Mar 8 00:08:32 localhost sshd\[26640\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.246.210.34 ...	2020-03-08 08:49:31
89.40.117.47	attack	Mar 8 01:45:43 lnxmysql61 sshd[31299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.40.117.47	2020-03-08 09:13:45
222.186.175.151	attackspam	Mar 8 01:45:08 meumeu sshd[6941]: Failed password for root from 222.186.175.151 port 21294 ssh2 Mar 8 01:45:21 meumeu sshd[6941]: Failed password for root from 222.186.175.151 port 21294 ssh2 Mar 8 01:45:25 meumeu sshd[6941]: Failed password for root from 222.186.175.151 port 21294 ssh2 Mar 8 01:45:25 meumeu sshd[6941]: error: maximum authentication attempts exceeded for root from 222.186.175.151 port 21294 ssh2 [preauth] ...	2020-03-08 08:50:25
121.229.25.154	attack	Mar 8 01:26:35 srv-ubuntu-dev3 sshd[14457]: Invalid user znyjjszx from 121.229.25.154 Mar 8 01:26:35 srv-ubuntu-dev3 sshd[14457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.25.154 Mar 8 01:26:35 srv-ubuntu-dev3 sshd[14457]: Invalid user znyjjszx from 121.229.25.154 Mar 8 01:26:37 srv-ubuntu-dev3 sshd[14457]: Failed password for invalid user znyjjszx from 121.229.25.154 port 37850 ssh2 Mar 8 01:30:22 srv-ubuntu-dev3 sshd[15080]: Invalid user frappe from 121.229.25.154 Mar 8 01:30:22 srv-ubuntu-dev3 sshd[15080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.25.154 Mar 8 01:30:22 srv-ubuntu-dev3 sshd[15080]: Invalid user frappe from 121.229.25.154 Mar 8 01:30:24 srv-ubuntu-dev3 sshd[15080]: Failed password for invalid user frappe from 121.229.25.154 port 55046 ssh2 Mar 8 01:34:13 srv-ubuntu-dev3 sshd[15720]: Invalid user rust from 121.229.25.154 ...	2020-03-08 09:17:11
45.136.110.25	attack	Mar 8 02:00:28 debian-2gb-nbg1-2 kernel: \[5888387.149380\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.25 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=57156 PROTO=TCP SPT=49617 DPT=4308 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-08 09:20:05

最近上报的IP列表

247.211.194.185	39.98.125.197	60.48.119.231	114.88.100.74
35.178.244.207	159.224.46.120	54.214.70.130	183.240.23.60
190.193.43.66	93.5.62.61	74.71.106.196	147.135.119.111
218.94.23.130	180.242.215.169	157.48.60.159	116.102.231.122
117.69.46.208	189.151.190.121	31.168.210.98	103.238.107.127