116.230.55.141

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Shanghai Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorised access (Feb 16) SRC=116.230.55.141 LEN=52 TTL=117 ID=29524 DF TCP DPT=445 WINDOW=8192 SYN	2020-02-17 00:16:06

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.230.55.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40016
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.230.55.141.			IN	A

;; AUTHORITY SECTION:
.			257	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021600 1800 900 604800 86400

;; Query time: 329 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 00:16:00 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 141.55.230.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 141.55.230.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
222.186.175.154	attack	Sep 8 11:20:03 nextcloud sshd\[25453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154 user=root Sep 8 11:20:05 nextcloud sshd\[25453\]: Failed password for root from 222.186.175.154 port 29118 ssh2 Sep 8 11:20:17 nextcloud sshd\[25453\]: Failed password for root from 222.186.175.154 port 29118 ssh2	2020-09-08 17:20:38
213.178.252.28	attackspambots	Sep 8 10:35:06 root sshd[22048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.178.252.28 ...	2020-09-08 17:12:54
60.167.116.65	attackbotsspam	Brute forcing email accounts	2020-09-08 17:16:57
112.118.50.142	attackspambots	Honeypot attack, port: 5555, PTR: n11211850142.netvigator.com.	2020-09-08 17:23:06
93.114.86.226	attackspam	SS1,DEF GET /wp-login.php	2020-09-08 17:24:23
111.231.89.140	attackspam	Sep 7 16:35:04 NPSTNNYC01T sshd[18546]: Failed password for root from 111.231.89.140 port 30758 ssh2 Sep 7 16:36:42 NPSTNNYC01T sshd[18678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.89.140 Sep 7 16:36:44 NPSTNNYC01T sshd[18678]: Failed password for invalid user elton from 111.231.89.140 port 48282 ssh2 ...	2020-09-08 17:13:52
41.82.208.182	attackbots	Sep 8 11:48:27 localhost sshd[2238332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.82.208.182 user=root Sep 8 11:48:29 localhost sshd[2238332]: Failed password for root from 41.82.208.182 port 33118 ssh2 ...	2020-09-08 17:18:36
198.96.155.3	attackspambots	2020-09-08T10:51:21.349653mail.broermann.family sshd[12554]: Failed password for root from 198.96.155.3 port 46068 ssh2 2020-09-08T10:51:23.463277mail.broermann.family sshd[12554]: Failed password for root from 198.96.155.3 port 46068 ssh2 2020-09-08T10:51:25.928177mail.broermann.family sshd[12554]: Failed password for root from 198.96.155.3 port 46068 ssh2 2020-09-08T10:51:28.377273mail.broermann.family sshd[12554]: Failed password for root from 198.96.155.3 port 46068 ssh2 2020-09-08T10:51:30.895414mail.broermann.family sshd[12554]: Failed password for root from 198.96.155.3 port 46068 ssh2 ...	2020-09-08 17:40:37
41.93.32.88	attack	41.93.32.88 (TZ/Tanzania/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 8 04:43:23 jbs1 sshd[6211]: Failed password for root from 41.93.32.88 port 57794 ssh2 Sep 8 04:30:50 jbs1 sshd[31392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.164.58.165 user=root Sep 8 04:30:52 jbs1 sshd[31392]: Failed password for root from 180.164.58.165 port 42506 ssh2 Sep 8 04:42:40 jbs1 sshd[5940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.89.225 user=root Sep 8 04:42:42 jbs1 sshd[5940]: Failed password for root from 165.22.89.225 port 16401 ssh2 Sep 8 04:32:55 jbs1 sshd[32670]: Failed password for root from 137.74.132.171 port 39358 ssh2 IP Addresses Blocked:	2020-09-08 17:15:32
123.160.230.15	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-08 17:46:59
41.63.0.133	attackbotsspam	Sep 8 09:43:48 root sshd[31764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.63.0.133 ...	2020-09-08 17:22:04
45.142.120.179	attackspambots	Sep 8 11:05:52 mail postfix/smtpd\[5480\]: warning: unknown\[45.142.120.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 8 11:36:28 mail postfix/smtpd\[7792\]: warning: unknown\[45.142.120.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 8 11:37:06 mail postfix/smtpd\[8097\]: warning: unknown\[45.142.120.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 8 11:37:44 mail postfix/smtpd\[8135\]: warning: unknown\[45.142.120.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-09-08 17:37:54
167.71.102.17	attack	Script detected	2020-09-08 17:30:06
109.132.116.56	attackbotsspam	Sep 8 10:47:06 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<4fcZYcmuaulthHQ4> Sep 8 10:47:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<14c3YcmubulthHQ4> Sep 8 10:47:12 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session= Sep 8 10:47:23 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.148, session=<7cDfYcmud+lthHQ4> Sep 8 10:47:25 server dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=109.132.116.56, lip=172.104.140.14 ...	2020-09-08 17:23:27
118.36.234.174	attack	prod8 ...	2020-09-08 17:22:50

最近上报的IP列表

100.119.166.118	185.11.22.154	14.29.151.128	222.165.227.173
185.11.194.121	47.254.148.22	185.109.61.115	106.13.213.177
185.109.251.88	2a03:b0c0:2:d0::c4b:9001	185.109.251.66	16.138.214.147
113.176.231.98	103.241.167.54	14.143.250.218	207.92.21.194
184.168.193.184	119.27.166.181	185.109.249.4	113.239.103.243