116.140.197.164

基本信息:

城市(city): Chaoyang

省份(region): Liaoning

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.140.197.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63395
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.140.197.164.		IN	A

;; AUTHORITY SECTION:
.			387	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023060602 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 07 07:45:10 CST 2023
;; MSG SIZE  rcvd: 108

HOST信息:

Host 164.197.140.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 164.197.140.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
89.248.172.85	attackspam	01/08/2020-09:30:17.541821 89.248.172.85 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 98	2020-01-08 22:50:15
223.247.223.194	attackbots	Jan 8 15:20:41 mail sshd\[19817\]: Invalid user osilvera from 223.247.223.194 Jan 8 15:20:41 mail sshd\[19817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.194 Jan 8 15:20:43 mail sshd\[19817\]: Failed password for invalid user osilvera from 223.247.223.194 port 34938 ssh2 ...	2020-01-08 22:37:13
103.247.217.145	attackspambots	Automatic report - XMLRPC Attack	2020-01-08 22:44:12
82.202.161.133	attackbotsspam	Automated report (2020-01-08T13:05:44+00:00). Faked user agent detected.	2020-01-08 22:12:56
202.107.238.14	attackbots	leo_www	2020-01-08 22:41:59
82.193.160.83	attack	Honeypot hit.	2020-01-08 22:17:27
183.62.55.234	attackbots	Unauthorized connection attempt detected from IP address 183.62.55.234 to port 22 [T]	2020-01-08 22:53:14
167.89.16.13	attackbotsspam	Received: from o22.delivery.raremsv.com (o22.delivery.raremsv.com [167.89.16.13]) by m0117089.mta.everyone.net (EON-INBOUND) with ESMTP id m0117089.5e0ea4c5.20dcd9 for <@antihotmail.com>; Wed, 8 Jan 2020 04:54:14 -0800 Received: from NDY4MjczMw (ec2-54-196-250-66.compute-1.amazonaws.com [54.196.250.66]) by ismtpd0010p1iad1.sendgrid.net (SG) with HTTP id IEcDOpOcR8a_8ibXcfws9w Wed, 08 Jan 2020 12:54:13.881 +0000 (UTC) Subject: Mesage important	2020-01-08 22:30:03
54.36.238.211	attackspambots	\[2020-01-08 08:05:11\] NOTICE\[2839\] chan_sip.c: Registration from '"901" \' failed for '54.36.238.211:5276' - Wrong password \[2020-01-08 08:05:11\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-08T08:05:11.814-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="901",SessionID="0x7f0fb462f398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.238.211/5276",Challenge="28e38d5c",ReceivedChallenge="28e38d5c",ReceivedHash="4e7e01946a7fb8a78328e7d402458091" \[2020-01-08 08:05:11\] NOTICE\[2839\] chan_sip.c: Registration from '"901" \' failed for '54.36.238.211:5276' - Wrong password \[2020-01-08 08:05:11\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-08T08:05:11.942-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="901",SessionID="0x7f0fb4073278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.3	2020-01-08 22:30:30
37.49.231.121	attackspam	3478/udp 7001/udp 161/udp... [2019-11-07/2020-01-08]390pkt,2pt.(tcp),22pt.(udp)	2020-01-08 22:47:46
42.101.64.106	attack	Portscan or hack attempt detected by psad/fwsnort	2020-01-08 22:33:35
142.11.241.65	attackspam	Jan 8 05:56:36 localhost sshd[14182]: Did not receive identification string from 142.11.241.65 port 40046 Jan 8 05:56:37 localhost sshd[14183]: error: Received disconnect from 142.11.241.65 port 40096:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 8 05:56:37 localhost sshd[14183]: Disconnected from 142.11.241.65 port 40096 [preauth] Jan 8 05:56:38 localhost sshd[14185]: error: Received disconnect from 142.11.241.65 port 40188:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 8 05:56:38 localhost sshd[14185]: Disconnected from 142.11.241.65 port 40188 [preauth] Jan 8 05:56:38 localhost sshd[14187]: Invalid user pi from 142.11.241.65 port 40318 Jan 8 05:56:38 localhost sshd[14187]: error: Received disconnect from 142.11.241.65 port 40318:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Jan 8 05:56:38 localhost sshd[14187]: Disconnected from 142.11.241.65 port 40318 [preauth] Jan 8 05:56:39 localhost sshd[14189]: Invalid user pi from 142.11........ -------------------------------	2020-01-08 22:49:54
185.200.118.75	attackspam	firewall-block, port(s): 1723/tcp	2020-01-08 22:29:36
103.205.68.2	attackspambots	Jan 8 15:59:25 server sshd\[7408\]: Invalid user xgr from 103.205.68.2 Jan 8 15:59:25 server sshd\[7408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.205.68.2 Jan 8 15:59:27 server sshd\[7408\]: Failed password for invalid user xgr from 103.205.68.2 port 40100 ssh2 Jan 8 16:05:05 server sshd\[8854\]: Invalid user temp from 103.205.68.2 Jan 8 16:05:05 server sshd\[8854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.205.68.2 ...	2020-01-08 22:33:51
223.71.167.165	attack	Port scan: Attack repeated for 24 hours	2020-01-08 22:46:08

最近上报的IP列表

19.152.147.240	53.148.117.54	165.73.18.252	62.115.164.105
144.165.158.70	239.241.71.149	99.117.74.248	232.203.172.131
95.51.182.249	178.30.35.232	172.224.120.166	228.112.220.79
154.70.122.210	235.97.40.217	181.81.112.131	115.22.158.16
140.183.44.100	139.5.222.211	19.88.205.22	130.174.100.151