116.214.59.195

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
116.214.59.13	attackspam	Feb 25 00:03:24 host sshd[18804]: User r.r from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups Feb 25 00:03:24 host sshd[18804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13 user=r.r Feb 25 00:03:26 host sshd[18804]: Failed password for invalid user r.r from 116.214.59.13 port 60362 ssh2 Feb 25 00:03:26 host sshd[18804]: Received disconnect from 116.214.59.13 port 60362:11: Bye Bye [preauth] Feb 25 00:03:26 host sshd[18804]: Disconnected from invalid user r.r 116.214.59.13 port 60362 [preauth] Feb 25 00:07:03 host sshd[18876]: User lp from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups Feb 25 00:07:03 host sshd[18876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13 user=lp Feb 25 00:07:05 host sshd[18876]: Failed password for invalid user lp from 116.214.59.13 port 35340 ssh2 Feb 25 00:07:........ -------------------------------	2020-02-25 09:32:22

类型

评论内容

时间

116.214.59.13

attackspam

Feb 25 00:03:24 host sshd[18804]: User r.r from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups
Feb 25 00:03:24 host sshd[18804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13  user=r.r
Feb 25 00:03:26 host sshd[18804]: Failed password for invalid user r.r from 116.214.59.13 port 60362 ssh2
Feb 25 00:03:26 host sshd[18804]: Received disconnect from 116.214.59.13 port 60362:11: Bye Bye [preauth]
Feb 25 00:03:26 host sshd[18804]: Disconnected from invalid user r.r 116.214.59.13 port 60362 [preauth]
Feb 25 00:07:03 host sshd[18876]: User lp from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups
Feb 25 00:07:03 host sshd[18876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13  user=lp
Feb 25 00:07:05 host sshd[18876]: Failed password for invalid user lp from 116.214.59.13 port 35340 ssh2
Feb 25 00:07:........
-------------------------------

2020-02-25 09:32:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.214.59.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59975
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.214.59.195.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 06:26:16 CST 2025
;; MSG SIZE  rcvd: 107

HOST信息:

Host 195.59.214.116.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 195.59.214.116.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
125.128.59.155	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-10 02:09:34
103.113.90.59	attackbots	2020-06-09 07:00:32.894815-0500 localhost smtpd[81136]: NOQUEUE: reject: RCPT from unknown[103.113.90.59]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.113.90.59]; from= to= proto=ESMTP helo=<00fd7f32.gitmeo.xyz>	2020-06-10 02:12:36
122.162.240.232	attackspam	Unauthorized connection attempt from IP address 122.162.240.232 on Port 445(SMB)	2020-06-10 02:35:03
203.177.100.4	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-10 02:01:13
94.25.228.60	attackbots	Unauthorized connection attempt from IP address 94.25.228.60 on Port 445(SMB)	2020-06-10 02:39:38
111.119.187.29	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-10 02:04:50
58.246.68.6	attack	Jun 9 14:36:04 inter-technics sshd[11493]: Invalid user admin from 58.246.68.6 port 10005 Jun 9 14:36:04 inter-technics sshd[11493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.68.6 Jun 9 14:36:04 inter-technics sshd[11493]: Invalid user admin from 58.246.68.6 port 10005 Jun 9 14:36:06 inter-technics sshd[11493]: Failed password for invalid user admin from 58.246.68.6 port 10005 ssh2 Jun 9 14:44:35 inter-technics sshd[11953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.68.6 user=root Jun 9 14:44:37 inter-technics sshd[11953]: Failed password for root from 58.246.68.6 port 12189 ssh2 ...	2020-06-10 02:33:10
194.87.93.189	attack	(sshd) Failed SSH login from 194.87.93.189 (RU/Russia/ptr.ruvds.com): 5 in the last 3600 secs	2020-06-10 02:03:52
1.119.131.102	attackbotsspam	Jun 9 18:42:16 minden010 sshd[11455]: Failed password for root from 1.119.131.102 port 26328 ssh2 Jun 9 18:45:01 minden010 sshd[12414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.119.131.102 Jun 9 18:45:03 minden010 sshd[12414]: Failed password for invalid user ubnt from 1.119.131.102 port 25949 ssh2 ...	2020-06-10 02:36:50
203.89.120.14	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-10 02:10:28
91.231.113.113	attack	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-06-10 02:23:47
179.213.217.117	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-10 02:20:05
212.75.29.229	attackspam	Automatic report - XMLRPC Attack	2020-06-10 02:01:59
177.10.69.80	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-10 02:14:58
168.90.89.35	attackbots	(sshd) Failed SSH login from 168.90.89.35 (BR/Brazil/168.90.89.35.megalinkpi.net.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 9 20:02:26 amsweb01 sshd[4852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.90.89.35 user=root Jun 9 20:02:27 amsweb01 sshd[4852]: Failed password for root from 168.90.89.35 port 49618 ssh2 Jun 9 20:08:58 amsweb01 sshd[5668]: Invalid user raju from 168.90.89.35 port 58235 Jun 9 20:09:00 amsweb01 sshd[5668]: Failed password for invalid user raju from 168.90.89.35 port 58235 ssh2 Jun 9 20:11:20 amsweb01 sshd[6057]: Invalid user keibi01 from 168.90.89.35 port 46112	2020-06-10 02:31:53

最近上报的IP列表

6.230.160.154	200.46.226.231	73.60.133.37	16.98.200.180
163.140.183.177	7.240.130.65	177.100.201.117	237.156.27.179
83.83.136.39	30.54.171.235	22.101.22.83	161.44.113.157
180.187.143.79	207.1.220.246	205.214.117.186	28.155.92.211
171.93.185.23	202.246.90.121	209.52.103.9	222.26.232.228