116.171.247.138

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
116.171.247.114	attackspambots	Dec 5 19:35:23 h2034429 sshd[13138]: Did not receive identification string from 116.171.247.114 Dec 5 19:35:51 h2034429 sshd[13147]: Connection closed by 116.171.247.114 port 57014 [preauth] Dec 5 19:35:52 h2034429 sshd[13153]: Connection closed by 116.171.247.114 port 58265 [preauth] Dec 5 19:36:02 h2034429 sshd[13159]: Connection closed by 116.171.247.114 port 62550 [preauth] Dec 5 19:36:07 h2034429 sshd[13161]: Connection closed by 116.171.247.114 port 64875 [preauth] Dec 5 19:36:24 h2034429 sshd[13174]: Connection closed by 116.171.247.114 port 5546 [preauth] Dec 5 19:37:52 h2034429 sshd[13188]: Connection closed by 116.171.247.114 port 10795 [preauth] Dec 5 19:37:57 h2034429 sshd[13192]: Connection closed by 116.171.247.114 port 13266 [preauth] Dec 5 19:38:04 h2034429 sshd[13196]: Connection closed by 116.171.247.114 port 1 .... truncated .... 03:42:23 h2034429 sshd[27129]: Connection closed by 116.171.247.114 port 36149 [preauth] Dec 6 03:42:31 h2034429........ -------------------------------	2019-12-06 20:44:48

类型

评论内容

时间

116.171.247.114

attackspambots

Dec  5 19:35:23 h2034429 sshd[13138]: Did not receive identification string from 116.171.247.114
Dec  5 19:35:51 h2034429 sshd[13147]: Connection closed by 116.171.247.114 port 57014 [preauth]
Dec  5 19:35:52 h2034429 sshd[13153]: Connection closed by 116.171.247.114 port 58265 [preauth]
Dec  5 19:36:02 h2034429 sshd[13159]: Connection closed by 116.171.247.114 port 62550 [preauth]
Dec  5 19:36:07 h2034429 sshd[13161]: Connection closed by 116.171.247.114 port 64875 [preauth]
Dec  5 19:36:24 h2034429 sshd[13174]: Connection closed by 116.171.247.114 port 5546 [preauth]
Dec  5 19:37:52 h2034429 sshd[13188]: Connection closed by 116.171.247.114 port 10795 [preauth]
Dec  5 19:37:57 h2034429 sshd[13192]: Connection closed by 116.171.247.114 port 13266 [preauth]
Dec  5 19:38:04 h2034429 sshd[13196]: Connection closed by 116.171.247.114 port 1
.... truncated .... 
03:42:23 h2034429 sshd[27129]: Connection closed by 116.171.247.114 port 36149 [preauth]
Dec  6 03:42:31 h2034429........
-------------------------------

2019-12-06 20:44:48

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.171.247.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55127
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.171.247.138.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:51:43 CST 2022
;; MSG SIZE  rcvd: 108

HOST信息:

Host 138.247.171.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.247.171.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
69.176.80.226	attack	SMB Server BruteForce Attack	2019-06-27 08:11:53
185.46.171.25	attackspambots	firewall-block_invalid_GET_Request	2019-06-27 08:24:52
117.239.48.242	attackspam	Jun 27 00:56:31 vmd17057 sshd\[20075\]: Invalid user ircd from 117.239.48.242 port 35776 Jun 27 00:56:31 vmd17057 sshd\[20075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.239.48.242 Jun 27 00:56:33 vmd17057 sshd\[20075\]: Failed password for invalid user ircd from 117.239.48.242 port 35776 ssh2 ...	2019-06-27 07:57:47
31.184.194.114	attackspam	Jun 26 15:55:29 cac1d2 postfix/smtpd\[14394\]: warning: unknown\[31.184.194.114\]: SASL PLAIN authentication failed: authentication failure Jun 26 15:55:31 cac1d2 postfix/smtpd\[14394\]: warning: unknown\[31.184.194.114\]: SASL LOGIN authentication failed: authentication failure Jun 26 15:55:35 cac1d2 postfix/smtpd\[14394\]: warning: unknown\[31.184.194.114\]: SASL PLAIN authentication failed: authentication failure ...	2019-06-27 08:15:46
168.228.149.83	attackbots	SSH invalid-user multiple login try	2019-06-27 08:23:58
102.165.32.49	attack	\[2019-06-27 01:53:28\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-06-27T01:53:28.415+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1329382273-1316231637-1090995533",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/102.165.32.49/64124",Challenge="1561593208/d19270b524efad409374d16199e7f665",Response="46b6708f9062a2357725af87035562d3",ExpectedResponse="" \[2019-06-27 01:53:28\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-06-27T01:53:28.574+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1329382273-1316231637-1090995533",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/102.165.32.49/64124",Challenge="1561593208/d19270b524efad409374d16199e7f665",Response="37439fe87905060fbb101fed663657e0",ExpectedResponse="" \[2019-06-27 01:53:28\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeRe	2019-06-27 08:01:16
46.105.30.20	attackbotsspam	2019-06-27T00:57:34.858165test01.cajus.name sshd\[4302\]: Invalid user applmgr from 46.105.30.20 port 37848 2019-06-27T00:57:34.873906test01.cajus.name sshd\[4302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.ip-46-105-30.eu 2019-06-27T00:57:37.142980test01.cajus.name sshd\[4302\]: Failed password for invalid user applmgr from 46.105.30.20 port 37848 ssh2	2019-06-27 07:43:24
197.45.155.12	attackbotsspam	Jun 26 22:55:43 MK-Soft-VM4 sshd\[2331\]: Invalid user sinusbot from 197.45.155.12 port 50303 Jun 26 22:55:43 MK-Soft-VM4 sshd\[2331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.45.155.12 Jun 26 22:55:45 MK-Soft-VM4 sshd\[2331\]: Failed password for invalid user sinusbot from 197.45.155.12 port 50303 ssh2 ...	2019-06-27 08:13:12
114.232.134.137	attackspam	2019-06-26T23:58:11.250467 X postfix/smtpd[30759]: warning: unknown[114.232.134.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-27T00:45:00.148370 X postfix/smtpd[37072]: warning: unknown[114.232.134.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-27T00:55:30.463523 X postfix/smtpd[38972]: warning: unknown[114.232.134.137]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-06-27 08:16:21
144.48.82.75	attackspambots	scan r	2019-06-27 07:50:56
210.68.200.202	attackbotsspam	2019-06-27T05:55:32.144122enmeeting.mahidol.ac.th sshd\[2688\]: Invalid user ey from 210.68.200.202 port 54848 2019-06-27T05:55:32.158331enmeeting.mahidol.ac.th sshd\[2688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.68.200.202 2019-06-27T05:55:34.336465enmeeting.mahidol.ac.th sshd\[2688\]: Failed password for invalid user ey from 210.68.200.202 port 54848 ssh2 ...	2019-06-27 08:15:27
51.83.74.158	attackspambots	Jun 27 01:00:02 vserver sshd\[10048\]: Invalid user bill from 51.83.74.158Jun 27 01:00:04 vserver sshd\[10048\]: Failed password for invalid user bill from 51.83.74.158 port 49285 ssh2Jun 27 01:02:20 vserver sshd\[10058\]: Invalid user sen from 51.83.74.158Jun 27 01:02:23 vserver sshd\[10058\]: Failed password for invalid user sen from 51.83.74.158 port 49327 ssh2 ...	2019-06-27 07:53:14
36.38.26.236	attackspambots	Automated report - ssh fail2ban: Jun 27 01:22:57 wrong password, user=teamspeak, port=53138, ssh2 Jun 27 01:54:22 authentication failure Jun 27 01:54:24 wrong password, user=admin, port=45124, ssh2	2019-06-27 08:04:11
118.24.34.19	attackspam	2019-06-27T05:56:14.369498enmeeting.mahidol.ac.th sshd\[2701\]: Invalid user ajay from 118.24.34.19 port 54207 2019-06-27T05:56:14.384417enmeeting.mahidol.ac.th sshd\[2701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.34.19 2019-06-27T05:56:16.662751enmeeting.mahidol.ac.th sshd\[2701\]: Failed password for invalid user ajay from 118.24.34.19 port 54207 ssh2 ...	2019-06-27 08:03:46
142.44.160.172	attack	Tried sshing with brute force.	2019-06-27 08:22:05

最近上报的IP列表

116.17.191.141	116.171.247.192	116.171.246.28	116.171.246.51
116.171.245.246	116.163.41.7	116.171.246.31	116.171.248.214
116.171.248.17	116.171.245.245	116.179.37.134	116.179.32.131
116.179.37.208	116.179.37.130	116.179.37.131	116.176.21.19
116.179.37.28	116.179.37.205	116.179.37.246	116.178.234.78