107.150.117.77

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Zenlayer Inc

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Triggered: repeated knocking on closed ports.	2019-12-29 06:37:09

相同子网IP讨论:

IP	类型	评论内容	时间
107.150.117.8	attackbotsspam	Dec 16 10:33:37 offspring postfix/smtpd[2603]: connect from unknown[107.150.117.8] Dec 16 10:33:40 offspring postfix/smtpd[2603]: warning: unknown[107.150.117.8]: SASL LOGIN authentication failed: authentication failure Dec 16 10:33:41 offspring postfix/smtpd[2603]: lost connection after AUTH from unknown[107.150.117.8] Dec 16 10:33:41 offspring postfix/smtpd[2603]: disconnect from unknown[107.150.117.8] Dec 16 10:33:42 offspring postfix/smtpd[2603]: connect from unknown[107.150.117.8] Dec 16 10:33:45 offspring postfix/smtpd[2603]: warning: unknown[107.150.117.8]: SASL LOGIN authentication failed: authentication failure Dec 16 10:33:46 offspring postfix/smtpd[2603]: lost connection after AUTH from unknown[107.150.117.8] Dec 16 10:33:46 offspring postfix/smtpd[2603]: disconnect from unknown[107.150.117.8] Dec 16 10:33:47 offspring postfix/smtpd[2603]: connect from unknown[107.150.117.8] Dec 16 10:33:50 offspring postfix/smtpd[2603]: warning: unknown[107.150.117.8]: SASL ........ -------------------------------	2019-12-17 20:38:04

类型

评论内容

时间

107.150.117.8

attackbotsspam

Dec 16 10:33:37 offspring postfix/smtpd[2603]: connect from unknown[107.150.117.8]
Dec 16 10:33:40 offspring postfix/smtpd[2603]: warning: unknown[107.150.117.8]: SASL LOGIN authentication failed: authentication failure
Dec 16 10:33:41 offspring postfix/smtpd[2603]: lost connection after AUTH from unknown[107.150.117.8]
Dec 16 10:33:41 offspring postfix/smtpd[2603]: disconnect from unknown[107.150.117.8]
Dec 16 10:33:42 offspring postfix/smtpd[2603]: connect from unknown[107.150.117.8]
Dec 16 10:33:45 offspring postfix/smtpd[2603]: warning: unknown[107.150.117.8]: SASL LOGIN authentication failed: authentication failure
Dec 16 10:33:46 offspring postfix/smtpd[2603]: lost connection after AUTH from unknown[107.150.117.8]
Dec 16 10:33:46 offspring postfix/smtpd[2603]: disconnect from unknown[107.150.117.8]
Dec 16 10:33:47 offspring postfix/smtpd[2603]: connect from unknown[107.150.117.8]
Dec 16 10:33:50 offspring postfix/smtpd[2603]: warning: unknown[107.150.117.8]: SASL ........
-------------------------------

2019-12-17 20:38:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.150.117.77
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19554
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;107.150.117.77.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122801 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 29 06:37:06 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 77.117.150.107.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 77.117.150.107.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
60.169.222.61	attack	2019-09-28T13:29:28.636732beta postfix/smtpd[6449]: NOQUEUE: reject: RCPT from unknown[60.169.222.61]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [60.169.222.61]; from= to= proto=ESMTP helo= 2019-09-28T13:29:35.336280beta postfix/smtpd[6449]: NOQUEUE: reject: RCPT from unknown[60.169.222.61]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [60.169.222.61]; from= to= proto=ESMTP helo= 2019-09-28T13:30:09.784862beta postfix/smtpd[6449]: NOQUEUE: reject: RCPT from unknown[60.169.222.61]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [60.169.222.61]; from= to= proto=ESMTP helo= ...	2019-09-29 01:54:59
126.121.28.221	attack	Unauthorised access (Sep 28) SRC=126.121.28.221 LEN=52 TTL=115 ID=17820 DF TCP DPT=445 WINDOW=8192 SYN	2019-09-29 02:05:40
192.199.53.131	attackspam	Mail sent to address hacked/leaked from atari.st	2019-09-29 02:23:46
42.225.151.60	attackspam	Unauthorised access (Sep 28) SRC=42.225.151.60 LEN=40 TTL=50 ID=63809 TCP DPT=8080 WINDOW=12060 SYN	2019-09-29 01:53:09
110.44.123.47	attackspam	Automatic report - Banned IP Access	2019-09-29 02:07:02
92.61.36.137	attackspambots	xmlrpc attack	2019-09-29 02:02:15
160.153.147.158	attack	xmlrpc attack	2019-09-29 02:12:10
58.254.132.156	attack	2019-09-28T19:43:16.328051centos sshd\[14796\]: Invalid user urbackup from 58.254.132.156 port 37254 2019-09-28T19:43:16.332216centos sshd\[14796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156 2019-09-28T19:43:18.610963centos sshd\[14796\]: Failed password for invalid user urbackup from 58.254.132.156 port 37254 ssh2	2019-09-29 02:14:00
167.71.55.1	attackspam	Sep 28 19:39:17 microserver sshd[53112]: Invalid user mwang2 from 167.71.55.1 port 44948 Sep 28 19:39:17 microserver sshd[53112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.55.1 Sep 28 19:39:20 microserver sshd[53112]: Failed password for invalid user mwang2 from 167.71.55.1 port 44948 ssh2 Sep 28 19:43:40 microserver sshd[53791]: Invalid user ruan from 167.71.55.1 port 57746 Sep 28 19:43:40 microserver sshd[53791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.55.1 Sep 28 19:56:31 microserver sshd[55844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.55.1 user=games Sep 28 19:56:33 microserver sshd[55844]: Failed password for games from 167.71.55.1 port 39690 ssh2 Sep 28 20:00:51 microserver sshd[56533]: Invalid user devhdfc from 167.71.55.1 port 52490 Sep 28 20:00:51 microserver sshd[56533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t	2019-09-29 02:19:56
206.189.165.94	attackbotsspam	Sep 28 14:15:38 plusreed sshd[4779]: Invalid user geminroot from 206.189.165.94 ...	2019-09-29 02:26:42
124.156.210.20	attackspambots	scan z	2019-09-29 02:16:31
106.12.89.171	attack	ssh failed login	2019-09-29 02:27:17
61.76.175.195	attack	Sep 28 07:31:25 lcdev sshd\[19763\]: Invalid user yellow from 61.76.175.195 Sep 28 07:31:25 lcdev sshd\[19763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.76.175.195 Sep 28 07:31:27 lcdev sshd\[19763\]: Failed password for invalid user yellow from 61.76.175.195 port 43758 ssh2 Sep 28 07:36:27 lcdev sshd\[20185\]: Invalid user zj from 61.76.175.195 Sep 28 07:36:27 lcdev sshd\[20185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.76.175.195	2019-09-29 01:52:33
201.248.67.246	attackbotsspam	Unauthorized connection attempt from IP address 201.248.67.246 on Port 445(SMB)	2019-09-29 01:51:50
45.173.104.23	attackbotsspam	Unauthorized connection attempt from IP address 45.173.104.23 on Port 445(SMB)	2019-09-29 01:58:15

最近上报的IP列表

146.0.102.185	41.38.69.204	1.52.154.90	223.149.252.195
134.246.205.215	79.112.8.43	2.93.22.164	178.46.214.161
68.171.212.2	1.53.116.251	82.146.48.235	222.247.4.118
34.73.222.193	212.83.158.218	47.94.222.66	176.185.218.124
184.168.193.59	85.209.0.24	177.32.150.164	139.217.227.32