116.0.1.138 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT Wifiku Indonesia

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jul2305:47:05server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[anonymous]Jul2305:48:49server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]Jul2305:50:23server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]Jul2305:51:03server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]Jul2305:51:19server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]	2020-07-23 18:32:54

类型

评论内容

时间

attack

Jul2305:47:05server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[anonymous]Jul2305:48:49server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]Jul2305:50:23server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]Jul2305:51:03server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]Jul2305:51:19server2pure-ftpd:\(\?@116.0.1.138\)[WARNING]Authenticationfailedforuser[www]

2020-07-23 18:32:54

相同子网IP讨论:

IP	类型	评论内容	时间
116.0.1.250	attackbotsspam	Unauthorized connection attempt from IP address 116.0.1.250 on Port 445(SMB)	2020-01-31 15:55:29
116.0.134.123	attack	Scanning	2019-12-31 21:11:45
116.0.148.155	attack	Unauthorised access (Sep 21) SRC=116.0.148.155 LEN=40 TTL=47 ID=60302 TCP DPT=8080 WINDOW=22 SYN	2019-09-21 14:00:45
116.0.196.133	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-08-29 20:32:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.0.1.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35443
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.0.1.138.			IN	A

;; AUTHORITY SECTION:
.			519	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072300 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 23 18:32:50 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 138.1.0.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.1.0.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
202.78.197.198	attackspam	Sep 11 12:22:06 kapalua sshd\[24803\]: Invalid user postgres from 202.78.197.198 Sep 11 12:22:06 kapalua sshd\[24803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.78.197.198 Sep 11 12:22:08 kapalua sshd\[24803\]: Failed password for invalid user postgres from 202.78.197.198 port 49110 ssh2 Sep 11 12:29:00 kapalua sshd\[25455\]: Invalid user gitlab-runner from 202.78.197.198 Sep 11 12:29:00 kapalua sshd\[25455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.78.197.198	2019-09-12 06:38:29
102.165.35.235	attackbots	Port Scan detected from 102.165.35.235 (US/United States/-). 4 hits in the last 60 seconds	2019-09-12 06:57:58
108.195.81.230	attackbotsspam	Sep 11 20:55:18 lnxmail61 sshd[5884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.195.81.230	2019-09-12 06:42:17
58.144.151.45	attack	Sep 11 22:36:43 dedicated sshd[26494]: Invalid user newuser from 58.144.151.45 port 40486	2019-09-12 07:06:48
182.61.15.70	attackbots	F2B jail: sshd. Time: 2019-09-12 01:10:49, Reported by: VKReport	2019-09-12 07:14:24
213.120.170.33	attackbots	Sep 11 20:46:26 km20725 sshd\[16359\]: Invalid user test from 213.120.170.33Sep 11 20:46:29 km20725 sshd\[16359\]: Failed password for invalid user test from 213.120.170.33 port 51314 ssh2Sep 11 20:55:28 km20725 sshd\[16836\]: Invalid user itsupport from 213.120.170.33Sep 11 20:55:30 km20725 sshd\[16836\]: Failed password for invalid user itsupport from 213.120.170.33 port 32861 ssh2 ...	2019-09-12 06:34:24
185.2.196.196	attackspambots	Automatic report - Banned IP Access	2019-09-12 07:00:40
193.32.160.139	attackspam	Sep 11 23:49:12 mail postfix/smtpd\[7828\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.139\]: 554 5.7.1 Service unavailable\; Client host \[193.32.160.139\] blocked using zen.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBLCSS\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 11 23:49:12 mail postfix/smtpd\[7828\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.139\]: 554 5.7.1 Service unavailable\; Client host \[193.32.160.139\] blocked using zen.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBLCSS\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 11 23:49:12 mail postfix/smtpd\[7828\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.139\]: 554 5.7.1 Service unavailable\; Client host \[193.32.160.139\] blocked using zen.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBLCSS\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep	2019-09-12 06:38:59
197.45.92.245	attackbots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 18:29:18,974 INFO [amun_request_handler] PortScan Detected on Port: 445 (197.45.92.245)	2019-09-12 07:16:23
172.68.182.140	attack	SQL injection:/mobile/index.php/index.php?language=ru&menu_selected=67&sub_menu_selected=343;%00&	2019-09-12 06:39:44
92.118.160.1	attackbotsspam	Brute force attack stopped by firewall	2019-09-12 07:08:13
123.207.145.66	attackbots	Sep 11 23:09:24 hcbbdb sshd\[12782\]: Invalid user 12345 from 123.207.145.66 Sep 11 23:09:24 hcbbdb sshd\[12782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.145.66 Sep 11 23:09:26 hcbbdb sshd\[12782\]: Failed password for invalid user 12345 from 123.207.145.66 port 41834 ssh2 Sep 11 23:16:27 hcbbdb sshd\[13537\]: Invalid user ftp123 from 123.207.145.66 Sep 11 23:16:27 hcbbdb sshd\[13537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.145.66	2019-09-12 07:16:57
142.93.174.47	attackspambots	Sep 11 12:57:26 sachi sshd\[10014\]: Invalid user dockeruser from 142.93.174.47 Sep 11 12:57:26 sachi sshd\[10014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.174.47 Sep 11 12:57:27 sachi sshd\[10014\]: Failed password for invalid user dockeruser from 142.93.174.47 port 56848 ssh2 Sep 11 13:02:01 sachi sshd\[10412\]: Invalid user minecraft! from 142.93.174.47 Sep 11 13:02:01 sachi sshd\[10412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.174.47	2019-09-12 07:02:34
80.211.17.38	attackbots	SSH-BruteForce	2019-09-12 07:05:21
168.232.68.59	attack	Sep 11 20:30:36 web8 sshd\[9466\]: Invalid user 12345 from 168.232.68.59 Sep 11 20:30:36 web8 sshd\[9466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.68.59 Sep 11 20:30:38 web8 sshd\[9466\]: Failed password for invalid user 12345 from 168.232.68.59 port 52745 ssh2 Sep 11 20:37:31 web8 sshd\[12949\]: Invalid user test from 168.232.68.59 Sep 11 20:37:31 web8 sshd\[12949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.68.59	2019-09-12 07:04:48

最近上报的IP列表

24.192.51.205	170.26.8.94	83.20.182.100	120.238.90.201
18.2.31.14	189.88.160.191	184.204.242.230	125.152.32.123
77.21.237.128	113.183.53.141	123.58.3.14	121.201.95.66
58.215.219.2	115.132.187.64	198.42.103.119	71.146.37.87
209.13.8.230	50.3.177.109	114.37.70.49	79.33.73.158