113.98.116.142

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
113.98.116.29	attackspambots	Aug 14 06:27:29 sticky sshd\[10791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.98.116.29 user=root Aug 14 06:27:31 sticky sshd\[10791\]: Failed password for root from 113.98.116.29 port 57874 ssh2 Aug 14 06:32:11 sticky sshd\[10910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.98.116.29 user=root Aug 14 06:32:13 sticky sshd\[10910\]: Failed password for root from 113.98.116.29 port 53904 ssh2 Aug 14 06:36:55 sticky sshd\[10938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.98.116.29 user=root	2020-08-14 12:38:56

类型

评论内容

时间

113.98.116.29

attackspambots

Aug 14 06:27:29 sticky sshd\[10791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.98.116.29  user=root
Aug 14 06:27:31 sticky sshd\[10791\]: Failed password for root from 113.98.116.29 port 57874 ssh2
Aug 14 06:32:11 sticky sshd\[10910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.98.116.29  user=root
Aug 14 06:32:13 sticky sshd\[10910\]: Failed password for root from 113.98.116.29 port 53904 ssh2
Aug 14 06:36:55 sticky sshd\[10938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.98.116.29  user=root

2020-08-14 12:38:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.98.116.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63252
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;113.98.116.142.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 14:17:45 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 142.116.98.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.116.98.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
110.140.87.21	attack	Lines containing failures of 110.140.87.21 Jul 9 15:39:25 server01 postfix/smtpd[29685]: warning: hostname cpe-110-140-87-21.vb05.vic.asp.telstra.net does not resolve to address 110.140.87.21: Name or service not known Jul 9 15:39:25 server01 postfix/smtpd[29685]: connect from unknown[110.140.87.21] Jul x@x Jul x@x Jul 9 15:39:27 server01 postfix/policy-spf[29691]: : Policy action=PREPEND Received-SPF: none (blickwechsel.org: No applicable sender policy available) receiver=x@x Jul x@x Jul 9 15:39:28 server01 postfix/smtpd[29685]: lost connection after DATA from unknown[110.140.87.21] Jul 9 15:39:28 server01 postfix/smtpd[29685]: disconnect from unknown[110.140.87.21] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=110.140.87.21	2019-07-09 23:54:11
88.88.193.230	attackspambots	Attempted SSH login	2019-07-10 00:06:58
157.51.83.43	attackspambots	2019-07-09 x@x 2019-07-09 x@x 2019-07-09 x@x 2019-07-09 x@x 2019-07-09 16:21:44 dovecot_plain authenticator failed for (VIJAY) [157.51.83.43]:36057: 535 Incorrect authentication data (set_id=lol) 2019-07-09 16:21:51 dovecot_login authenticator failed for (VIJAY) [157.51.83.43]:36057: 535 Incorrect authentication data (set_id=lol) 2019-07-09 16:22:01 dovecot_plain authenticator failed for (VIJAY) [157.51.83.43]:36407: 535 Incorrect authentication data (set_id=lol) 2019-07-09 16:22:03 dovecot_login authenticator failed for (VIJAY) [157.51.83.43]:36407: 535 Incorrect authentication data (set_id=lol) 2019-07-09 x@x 2019-07-09 x@x 2019-07-09 x@x 2019-07-09 x@x 2019-07-09 16:22:22 dovecot_plain authenticator failed for (VIJAY) [157.51.83.43]:37114: 535 Incorrect authentication data (set_id=lol) 2019-07-09 16:22:25 dovecot_login authenticator failed for (VIJAY) [157.51.83.43]:37114: 535 Incorrect authentication data (set_id=lol) 2019-07-09 16:22:31 dovecot_plain authenticator f........ ------------------------------	2019-07-09 23:20:51
176.126.83.22	attackbotsspam	\[2019-07-09 17:41:27\] NOTICE\[6698\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '176.126.83.22:1257' \(callid: 914379366-582010081-697467353\) - Failed to authenticate \[2019-07-09 17:41:27\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-09T17:41:27.293+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="914379366-582010081-697467353",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/176.126.83.22/1257",Challenge="1562686887/b663ac3104ef5213cf4f61c9031b1db9",Response="809f57dadf7941ed7b2dfb9931eb661d",ExpectedResponse="" \[2019-07-09 17:41:27\] NOTICE\[13863\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '176.126.83.22:1257' \(callid: 914379366-582010081-697467353\) - Failed to authenticate \[2019-07-09 17:41:27\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFaile	2019-07-09 23:47:13
209.97.187.108	attackspambots	Jul 9 18:14:38 mail sshd[23659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.187.108 user=root Jul 9 18:14:40 mail sshd[23659]: Failed password for root from 209.97.187.108 port 44852 ssh2 ...	2019-07-10 00:32:37
192.42.116.22	attack	Jul 9 15:40:59 ns341937 sshd[14718]: Failed password for root from 192.42.116.22 port 55856 ssh2 Jul 9 15:41:01 ns341937 sshd[14718]: Failed password for root from 192.42.116.22 port 55856 ssh2 Jul 9 15:41:03 ns341937 sshd[14718]: Failed password for root from 192.42.116.22 port 55856 ssh2 Jul 9 15:41:05 ns341937 sshd[14718]: Failed password for root from 192.42.116.22 port 55856 ssh2 ...	2019-07-10 00:07:58
185.86.164.109	attackbots	WordPress login Brute force / Web App Attack on client site.	2019-07-09 23:37:17
147.135.130.39	attackbots	Port scan on 2 port(s): 139 445	2019-07-10 00:38:40
177.124.89.14	attackbotsspam	Jul 9 17:52:08 lnxweb61 sshd[11960]: Failed password for mysql from 177.124.89.14 port 43672 ssh2 Jul 9 17:55:01 lnxweb61 sshd[14010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.124.89.14 Jul 9 17:55:02 lnxweb61 sshd[14010]: Failed password for invalid user manu from 177.124.89.14 port 54532 ssh2	2019-07-10 00:10:15
117.69.31.184	attackspam	postfix/smtpd\[2762\]: NOQUEUE: reject: RCPT from unknown\[117.69.31.184\]: 554 5.7.1 Service Client host \[117.69.31.184\] blocked using sbl-xbl.spamhaus.org\;	2019-07-10 00:29:41
43.249.192.59	attackbots	1433/tcp 8080/tcp 37215/tcp... [2019-05-08/07-09]47pkt,10pt.(tcp)	2019-07-10 00:23:42
207.46.13.71	attackbots	Automatic report - Web App Attack	2019-07-10 00:16:05
92.51.242.62	attackspambots	#11022 - [92.51.242.62] Error: 550 5.7.1 Forged HELO hostname detected #11022 - [92.51.242.62] Error: 550 5.7.1 Forged HELO hostname detected #11022 - [92.51.242.62] Error: 550 5.7.1 Forged HELO hostname detected #11022 - [92.51.242.62] Error: 550 5.7.1 Forged HELO hostname detected ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=92.51.242.62	2019-07-09 23:35:50
49.34.58.70	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-07-10 00:19:34
36.6.136.21	attack	Jul 9 15:25:17 garuda postfix/smtpd[45489]: connect from unknown[36.6.136.21] Jul 9 15:25:18 garuda postfix/smtpd[45490]: connect from unknown[36.6.136.21] Jul 9 15:25:39 garuda postfix/smtpd[45490]: warning: unknown[36.6.136.21]: SASL LOGIN authentication failed: authentication failure Jul 9 15:25:44 garuda postfix/smtpd[45490]: lost connection after AUTH from unknown[36.6.136.21] Jul 9 15:25:44 garuda postfix/smtpd[45490]: disconnect from unknown[36.6.136.21] ehlo=1 auth=0/1 commands=1/2 Jul 9 15:25:44 garuda postfix/smtpd[45491]: connect from unknown[36.6.136.21] Jul 9 15:26:00 garuda postfix/smtpd[45491]: warning: unknown[36.6.136.21]: SASL LOGIN authentication failed: authentication failure Jul 9 15:26:05 garuda postfix/smtpd[45491]: lost connection after AUTH from unknown[36.6.136.21] Jul 9 15:26:05 garuda postfix/smtpd[45491]: disconnect from unknown[36.6.136.21] ehlo=1 auth=0/1 commands=1/2 Jul 9 15:26:05 garuda postfix/smtpd[45490]: connect from unkno........ -------------------------------	2019-07-09 23:30:08

最近上报的IP列表

113.98.52.85	113.98.255.68	113.98.96.37	113.99.119.140
113.99.119.162	113.99.132.167	113.235.11.223	113.99.133.149
113.99.116.111	113.99.126.24	113.99.16.79	113.99.171.167
113.99.188.22	113.99.188.209	113.99.132.17	113.99.188.106
113.99.158.255	113.99.189.107	113.99.190.51	113.99.189.59