114.118.80.138

基本信息:

城市(city): Beijing

省份(region): Beijing

国家(country): China

运营商(isp): CloudVSP.Inc

主机名(hostname): unknown

机构(organization): China Unicom Beijing Province Network

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Aug 30 10:20:16 eventyay sshd[14895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138 Aug 30 10:20:17 eventyay sshd[14895]: Failed password for invalid user 123456 from 114.118.80.138 port 32912 ssh2 Aug 30 10:26:05 eventyay sshd[16442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138 ...	2019-08-30 16:32:06
attack	Aug 27 09:44:22 eventyay sshd[23505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138 Aug 27 09:44:24 eventyay sshd[23505]: Failed password for invalid user infoserv from 114.118.80.138 port 42684 ssh2 Aug 27 09:49:36 eventyay sshd[23620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138 ...	2019-08-27 16:15:05

类型

评论内容

时间

attackspam

Aug 30 10:20:16 eventyay sshd[14895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138
Aug 30 10:20:17 eventyay sshd[14895]: Failed password for invalid user 123456 from 114.118.80.138 port 32912 ssh2
Aug 30 10:26:05 eventyay sshd[16442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138
...

2019-08-30 16:32:06

attack

Aug 27 09:44:22 eventyay sshd[23505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138
Aug 27 09:44:24 eventyay sshd[23505]: Failed password for invalid user infoserv from 114.118.80.138 port 42684 ssh2
Aug 27 09:49:36 eventyay sshd[23620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.80.138
...

2019-08-27 16:15:05

相同子网IP讨论:

IP	类型	评论内容	时间
114.118.80.148	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-06-24 04:05:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.118.80.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4373
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.118.80.138.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 25 00:45:51 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 138.80.118.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 138.80.118.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
59.144.48.34	attackspam	Aug 19 15:18:17 localhost sshd[5883]: Invalid user interview from 59.144.48.34 port 7912 Aug 19 15:18:17 localhost sshd[5883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.144.48.34 Aug 19 15:18:17 localhost sshd[5883]: Invalid user interview from 59.144.48.34 port 7912 Aug 19 15:18:19 localhost sshd[5883]: Failed password for invalid user interview from 59.144.48.34 port 7912 ssh2 Aug 19 15:22:54 localhost sshd[6346]: Invalid user service from 59.144.48.34 port 31834 ...	2020-08-20 03:02:25
103.86.130.43	attack	Aug 19 14:52:28 OPSO sshd\[18822\]: Invalid user kll from 103.86.130.43 port 60006 Aug 19 14:52:28 OPSO sshd\[18822\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.130.43 Aug 19 14:52:30 OPSO sshd\[18822\]: Failed password for invalid user kll from 103.86.130.43 port 60006 ssh2 Aug 19 14:54:11 OPSO sshd\[19121\]: Invalid user raquel from 103.86.130.43 port 40644 Aug 19 14:54:11 OPSO sshd\[19121\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.130.43	2020-08-20 02:36:01
104.131.81.133	attackspambots	$f2bV_matches	2020-08-20 02:53:58
112.85.42.89	attack	Aug 19 20:59:07 piServer sshd[10631]: Failed password for root from 112.85.42.89 port 23750 ssh2 Aug 19 20:59:10 piServer sshd[10631]: Failed password for root from 112.85.42.89 port 23750 ssh2 Aug 19 20:59:14 piServer sshd[10631]: Failed password for root from 112.85.42.89 port 23750 ssh2 ...	2020-08-20 03:00:33
46.142.8.21	attackspambots	Invalid user rupert from 46.142.8.21 port 48337	2020-08-20 02:49:18
1.53.39.195	attack	1597840007 - 08/19/2020 14:26:47 Host: 1.53.39.195/1.53.39.195 Port: 445 TCP Blocked	2020-08-20 03:04:29
222.186.180.41	attack	Aug 19 21:01:27 * sshd[29275]: Failed password for root from 222.186.180.41 port 14578 ssh2 Aug 19 21:01:41 * sshd[29275]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 14578 ssh2 [preauth]	2020-08-20 03:02:51
103.195.6.57	attackspambots	SSH Brute Force	2020-08-20 02:58:41
88.102.244.211	attackspam	Aug 19 19:26:22 haigwepa sshd[17188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.102.244.211 Aug 19 19:26:25 haigwepa sshd[17188]: Failed password for invalid user cwc from 88.102.244.211 port 49672 ssh2 ...	2020-08-20 03:13:11
43.242.116.11	attackbotsspam	Aug 19 14:18:16 hidden kernel: [113811.017332] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=52 TOS=0x08 PREC=0x20 TTL=111 ID=32074 DF PROTO=TCP SPT=8229 DPT=7554 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 19 14:20:01 hidden kernel: [113916.015675] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=48 TOS=0x08 PREC=0x20 TTL=110 ID=32079 PROTO=UDP SPT=7554 DPT=7554 LEN=28 Aug 19 14:20:16 hidden kernel: [113931.027326] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=52 TOS=0x08 PREC=0x20 TTL=111 ID=32086 DF PROTO=TCP SPT=7617 DPT=7554 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 19 14:26:58 hidden kernel: [114333.019327] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=43.242.116.11 DST=173.212.244.83 LEN=52 TOS=0x08 PREC=0x20 TTL=111 ID=48324 DF PROTO=TCP SPT=7678 DPT=7554 WINDOW ...	2020-08-20 02:50:32
180.126.226.166	attackspam	TCP (SYN) 180.126.226.166:34623 -> port 22, len 60	2020-08-20 03:10:20
211.103.183.3	attack	Fail2Ban	2020-08-20 03:13:27
149.129.49.9	attack	Aug 19 15:42:30 srv-ubuntu-dev3 sshd[38814]: Invalid user anita from 149.129.49.9 Aug 19 15:42:30 srv-ubuntu-dev3 sshd[38814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.49.9 Aug 19 15:42:30 srv-ubuntu-dev3 sshd[38814]: Invalid user anita from 149.129.49.9 Aug 19 15:42:32 srv-ubuntu-dev3 sshd[38814]: Failed password for invalid user anita from 149.129.49.9 port 50066 ssh2 Aug 19 15:46:33 srv-ubuntu-dev3 sshd[39306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.49.9 user=root Aug 19 15:46:36 srv-ubuntu-dev3 sshd[39306]: Failed password for root from 149.129.49.9 port 54498 ssh2 Aug 19 15:50:36 srv-ubuntu-dev3 sshd[39727]: Invalid user technology from 149.129.49.9 Aug 19 15:50:36 srv-ubuntu-dev3 sshd[39727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.49.9 Aug 19 15:50:36 srv-ubuntu-dev3 sshd[39727]: Invalid user technology from 149. ...	2020-08-20 03:01:09
120.132.22.92	attackspam	Aug 19 15:27:39 [host] sshd[31314]: Invalid user a Aug 19 15:27:39 [host] sshd[31314]: pam_unix(sshd: Aug 19 15:27:40 [host] sshd[31314]: Failed passwor	2020-08-20 03:07:11
111.67.207.218	attackbotsspam	Invalid user galia from 111.67.207.218 port 37442	2020-08-20 02:55:17

最近上报的IP列表

194.162.110.190	109.137.7.11	35.31.144.167	107.6.197.194
168.36.203.57	76.237.93.60	66.67.81.144	71.156.234.14
243.80.76.3	110.30.43.132	8.179.146.248	47.66.240.199
8.26.240.120	132.61.177.69	6.126.50.154	176.158.202.26
186.143.155.97	93.47.166.183	88.155.69.67	83.43.132.29