116.212.138.204

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Cambodia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
116.212.138.146	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 03:01:09,596 INFO [amun_request_handler] PortScan Detected on Port: 445 (116.212.138.146)	2019-07-22 15:36:09
116.212.138.146	attackbots	445/tcp 445/tcp 445/tcp... [2019-06-02/07-15]7pkt,1pt.(tcp)	2019-07-16 06:02:37

类型

评论内容

时间

116.212.138.146

attackspam

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 03:01:09,596 INFO [amun_request_handler] PortScan Detected on Port: 445 (116.212.138.146)

2019-07-22 15:36:09

116.212.138.146

attackbots

445/tcp 445/tcp 445/tcp...
[2019-06-02/07-15]7pkt,1pt.(tcp)

2019-07-16 06:02:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.212.138.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4313
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.212.138.204.		IN	A

;; AUTHORITY SECTION:
.			521	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 19:06:38 CST 2022
;; MSG SIZE  rcvd: 108

HOST信息:

Host 204.138.212.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 204.138.212.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
176.121.207.157	attackspam	Automatic report - Port Scan Attack	2020-07-20 19:41:12
31.14.16.248	attack	TCP (SYN) 31.14.16.248:10282 -> port 1433, len 44	2020-07-20 19:48:00
164.68.115.8	attack	Automatic report - XMLRPC Attack	2020-07-20 20:00:10
103.46.139.230	attack	Invalid user lxj from 103.46.139.230 port 46400	2020-07-20 19:39:09
202.160.38.209	attackspambots	Wordpress attack	2020-07-20 19:36:35
185.53.88.63	attack	Jul 20 13:10:46 debian-2gb-nbg1-2 kernel: \[17501986.937404\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.53.88.63 DST=195.201.40.59 LEN=440 TOS=0x00 PREC=0x00 TTL=55 ID=1091 DF PROTO=UDP SPT=5101 DPT=5060 LEN=420	2020-07-20 19:25:32
123.1.154.200	attackspam	Invalid user katie from 123.1.154.200 port 50252	2020-07-20 20:00:40
5.88.132.235	attackbotsspam	Jul 20 05:32:09 ws19vmsma01 sshd[191448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.132.235 Jul 20 05:32:10 ws19vmsma01 sshd[191448]: Failed password for invalid user wzp from 5.88.132.235 port 37812 ssh2 ...	2020-07-20 19:53:34
103.145.12.209	attackspam	[2020-07-20 07:40:06] NOTICE[1277] chan_sip.c: Registration from '"1007" ' failed for '103.145.12.209:5614' - Wrong password [2020-07-20 07:40:06] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-20T07:40:06.818-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1007",SessionID="0x7f1754188e58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.209/5614",Challenge="2c487982",ReceivedChallenge="2c487982",ReceivedHash="9e38023216166b52ba8ae3268a751515" [2020-07-20 07:40:06] NOTICE[1277] chan_sip.c: Registration from '"1007" ' failed for '103.145.12.209:5614' - Wrong password [2020-07-20 07:40:06] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-20T07:40:06.934-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1007",SessionID="0x7f17541b8598",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-07-20 19:41:39
103.205.143.149	attack	Jul 20 07:37:39 hidden sshd[12964]: Failed password for invalid user user3 from 103.205.143.149 port 43402 ssh2 Jul 20 07:43:07 hidden sshd[26029]: Invalid user shastry from 103.205.143.149 port 51534 Jul 20 07:43:07 hidden sshd[26029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.205.143.149 Jul 20 07:43:09 hidden sshd[26029]: Failed password for invalid user shastry from 103.205.143.149 port 51534 ssh2 Jul 20 07:47:46 hidden sshd[37377]: Invalid user yzg from 103.205.143.149 port 50082	2020-07-20 19:22:30
103.55.36.153	attackspam	Invalid user bini from 103.55.36.153 port 48476	2020-07-20 20:08:58
177.104.124.235	attackspambots	Jul 20 11:42:34 ns392434 sshd[6776]: Invalid user slack from 177.104.124.235 port 15825 Jul 20 11:42:34 ns392434 sshd[6776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.104.124.235 Jul 20 11:42:34 ns392434 sshd[6776]: Invalid user slack from 177.104.124.235 port 15825 Jul 20 11:42:35 ns392434 sshd[6776]: Failed password for invalid user slack from 177.104.124.235 port 15825 ssh2 Jul 20 11:46:19 ns392434 sshd[6875]: Invalid user hyy from 177.104.124.235 port 40803 Jul 20 11:46:19 ns392434 sshd[6875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.104.124.235 Jul 20 11:46:19 ns392434 sshd[6875]: Invalid user hyy from 177.104.124.235 port 40803 Jul 20 11:46:22 ns392434 sshd[6875]: Failed password for invalid user hyy from 177.104.124.235 port 40803 ssh2 Jul 20 11:49:18 ns392434 sshd[7028]: Invalid user wxw from 177.104.124.235 port 34279	2020-07-20 20:06:57
87.251.74.223	attackbotsspam	TCP (SYN) 87.251.74.223:56514 -> port 300, len 44	2020-07-20 19:44:52
128.14.141.99	attackspambots	firewall-block, port(s): 2181/tcp	2020-07-20 19:57:44
148.72.59.154	attack	Automatic report - XMLRPC Attack	2020-07-20 20:07:19

最近上报的IP列表

114.105.87.130	116.212.139.93	116.212.138.214	116.212.138.206
116.212.140.110	116.212.140.117	116.212.140.100	116.212.140.118
116.212.140.121	116.212.140.13	116.212.140.18	116.212.140.24
114.105.87.132	116.212.140.26	116.212.140.67	116.212.140.7
116.212.140.89	116.212.140.70	116.212.140.92	116.212.141.194