114.237.131.245

基本信息:

城市(city): unknown

省份(region): Jiangsu

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Dec 15 15:49:08 grey postfix/smtpd\[5634\]: NOQUEUE: reject: RCPT from unknown\[114.237.131.245\]: 554 5.7.1 Service unavailable\; Client host \[114.237.131.245\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.131.245\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-16 03:39:09

类型

评论内容

时间

attackspam

Dec 15 15:49:08 grey postfix/smtpd\[5634\]: NOQUEUE: reject: RCPT from unknown\[114.237.131.245\]: 554 5.7.1 Service unavailable\; Client host \[114.237.131.245\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.131.245\]\; from=\ to=\ proto=ESMTP helo=\
...

2019-12-16 03:39:09

相同子网IP讨论:

IP	类型	评论内容	时间
114.237.131.17	attackspam	Spammer	2020-06-28 01:14:49
114.237.131.241	attack		2020-05-11 01:27:43
114.237.131.176	attack	NOQUEUE: reject: RCPT from unknown\[114.237.131.176\]: 554 5.7.1 Service unavailable\; host \[114.237.131.176\] blocked using sbl-xbl.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBLCSS	2020-02-23 06:24:10
114.237.131.253	attack	Feb 1 22:57:16 grey postfix/smtpd\[7654\]: NOQUEUE: reject: RCPT from unknown\[114.237.131.253\]: 554 5.7.1 Service unavailable\; Client host \[114.237.131.253\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.237.131.253\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-02 07:47:51
114.237.131.190	attackbots	SASL Brute Force	2019-11-04 01:37:14

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.237.131.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41432
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.237.131.245.		IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121501 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 16 03:39:06 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

245.131.237.114.in-addr.arpa domain name pointer 245.131.237.114.broad.lyg.js.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
245.131.237.114.in-addr.arpa	name = 245.131.237.114.broad.lyg.js.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
212.3.124.73	attackspam	Unauthorized connection attempt from IP address 212.3.124.73 on Port 445(SMB)	2019-11-11 00:04:34
116.203.209.23	attackbotsspam	Lines containing failures of 116.203.209.23 Nov 10 15:12:59 smtp-out sshd[7341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.209.23 user=r.r Nov 10 15:13:00 smtp-out sshd[7341]: Failed password for r.r from 116.203.209.23 port 52762 ssh2 Nov 10 15:13:00 smtp-out sshd[7341]: Received disconnect from 116.203.209.23 port 52762:11: Bye Bye [preauth] Nov 10 15:13:00 smtp-out sshd[7341]: Disconnected from authenticating user r.r 116.203.209.23 port 52762 [preauth] Nov 10 15:25:28 smtp-out sshd[7789]: Invalid user pi from 116.203.209.23 port 53006 Nov 10 15:25:28 smtp-out sshd[7789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.209.23 Nov 10 15:25:30 smtp-out sshd[7789]: Failed password for invalid user pi from 116.203.209.23 port 53006 ssh2 Nov 10 15:25:30 smtp-out sshd[7789]: Received disconnect from 116.203.209.23 port 53006:11: Bye Bye [preauth] Nov 10 15:25:30 smtp-out ........ ------------------------------	2019-11-10 23:49:27
125.5.184.216	attackbotsspam	Nov 10 16:49:17 SilenceServices sshd[23164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.5.184.216 Nov 10 16:49:19 SilenceServices sshd[23164]: Failed password for invalid user 147896325 from 125.5.184.216 port 41748 ssh2 Nov 10 16:53:52 SilenceServices sshd[26633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.5.184.216	2019-11-11 00:11:47
182.61.36.38	attackspambots	Nov 10 17:05:32 sd-53420 sshd\[29244\]: Invalid user dasusr123 from 182.61.36.38 Nov 10 17:05:32 sd-53420 sshd\[29244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.38 Nov 10 17:05:34 sd-53420 sshd\[29244\]: Failed password for invalid user dasusr123 from 182.61.36.38 port 42632 ssh2 Nov 10 17:10:35 sd-53420 sshd\[30678\]: Invalid user faxadmin from 182.61.36.38 Nov 10 17:10:35 sd-53420 sshd\[30678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.38 ...	2019-11-11 00:17:51
111.231.69.18	attack	Nov 10 17:21:27 sauna sshd[112884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.69.18 Nov 10 17:21:29 sauna sshd[112884]: Failed password for invalid user agent007 from 111.231.69.18 port 56318 ssh2 ...	2019-11-10 23:47:26
176.159.245.147	attackspambots	Nov 10 16:44:29 MK-Soft-Root2 sshd[8454]: Failed password for backup from 176.159.245.147 port 40960 ssh2 ...	2019-11-11 00:06:46
46.38.144.179	attack	Nov 10 16:27:26 webserver postfix/smtpd\[11525\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 16:28:36 webserver postfix/smtpd\[11525\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 16:29:47 webserver postfix/smtpd\[11525\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 16:30:57 webserver postfix/smtpd\[13207\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 10 16:32:07 webserver postfix/smtpd\[13359\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-10 23:34:36
70.183.157.187	attackspambots	Unauthorized connection attempt from IP address 70.183.157.187 on Port 445(SMB)	2019-11-10 23:50:25
167.71.219.30	attackbots	Nov 10 17:29:32 server sshd\[31111\]: User root from 167.71.219.30 not allowed because listed in DenyUsers Nov 10 17:29:32 server sshd\[31111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.219.30 user=root Nov 10 17:29:34 server sshd\[31111\]: Failed password for invalid user root from 167.71.219.30 port 48900 ssh2 Nov 10 17:34:29 server sshd\[12329\]: Invalid user abusdal from 167.71.219.30 port 32932 Nov 10 17:34:29 server sshd\[12329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.219.30	2019-11-10 23:42:57
221.4.135.97	attack	Unauthorized connection attempt from IP address 221.4.135.97 on Port 445(SMB)	2019-11-10 23:39:12
85.97.131.108	attackbotsspam	Unauthorised access (Nov 10) SRC=85.97.131.108 LEN=52 TTL=111 ID=22804 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-10 23:34:15
94.233.65.130	attackbotsspam	Nov 10 15:31:46 h2022099 sshd[1880]: reveeclipse mapping checking getaddrinfo for dsl-94-233-65-130.avtlg.ru [94.233.65.130] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 10 15:31:46 h2022099 sshd[1880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.233.65.130 user=r.r Nov 10 15:31:48 h2022099 sshd[1880]: Failed password for r.r from 94.233.65.130 port 50315 ssh2 Nov 10 15:31:56 h2022099 sshd[1880]: Failed password for r.r from 94.233.65.130 port 50315 ssh2 Nov 10 15:31:57 h2022099 sshd[1880]: Failed password for r.r from 94.233.65.130 port 50315 ssh2 Nov 10 15:31:57 h2022099 sshd[1880]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.233.65.130 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=94.233.65.130	2019-11-11 00:08:07
201.217.155.180	attackspambots	port scan and connect, tcp 22 (ssh)	2019-11-11 00:16:29
178.248.200.211	attackspam	Unauthorized connection attempt from IP address 178.248.200.211 on Port 445(SMB)	2019-11-10 23:43:57
49.233.65.111	attack	Nov 10 14:24:20 netserv300 sshd[23528]: Connection from 49.233.65.111 port 58432 on 188.40.78.197 port 22 Nov 10 14:24:20 netserv300 sshd[23529]: Connection from 49.233.65.111 port 56894 on 188.40.78.229 port 22 Nov 10 14:24:20 netserv300 sshd[23530]: Connection from 49.233.65.111 port 55722 on 188.40.78.228 port 22 Nov 10 14:24:20 netserv300 sshd[23531]: Connection from 49.233.65.111 port 51406 on 188.40.78.230 port 22 Nov 10 14:26:28 netserv300 sshd[23533]: Connection from 49.233.65.111 port 42842 on 188.40.78.197 port 22 Nov 10 14:26:28 netserv300 sshd[23535]: Connection from 49.233.65.111 port 35832 on 188.40.78.230 port 22 Nov 10 14:26:28 netserv300 sshd[23536]: Connection from 49.233.65.111 port 40126 on 188.40.78.228 port 22 Nov 10 14:26:30 netserv300 sshd[23539]: Connection from 49.233.65.111 port 41236 on 188.40.78.229 port 22 Nov 10 14:27:56 netserv300 sshd[23549]: Connection from 49.233.65.111 port 60982 on 188.40.78.197 port 22 Nov 10 14:27:57 netserv300 sshd........ ------------------------------	2019-11-10 23:37:15

最近上报的IP列表

117.58.1.41	186.68.59.81	108.138.90.203	16.182.90.224
141.136.112.82	216.250.95.51	54.37.229.92	151.139.25.245
190.200.30.66	144.139.203.32	14.167.183.249	61.131.254.72
85.195.78.46	185.195.19.87	182.250.10.109	117.71.69.208
129.8.149.33	91.35.195.114	160.202.52.127	46.134.246.33