117.139.166.203

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Mobile Communications Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	"SSH brute force auth login attempt."	2020-01-23 18:11:16
attack	Unauthorized connection attempt detected from IP address 117.139.166.203 to port 2220 [J]	2020-01-18 23:38:03
attack	Unauthorized connection attempt detected from IP address 117.139.166.203 to port 2220 [J]	2020-01-18 03:03:31
attackspam	Dec 22 11:53:47 * sshd[21663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 Dec 22 11:53:49 * sshd[21663]: Failed password for invalid user 123 from 117.139.166.203 port 14582 ssh2	2019-12-22 21:11:19
attackspam	Dec 7 18:23:44 linuxvps sshd\[30087\]: Invalid user boxuser from 117.139.166.203 Dec 7 18:23:44 linuxvps sshd\[30087\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 Dec 7 18:23:47 linuxvps sshd\[30087\]: Failed password for invalid user boxuser from 117.139.166.203 port 21076 ssh2 Dec 7 18:30:49 linuxvps sshd\[34121\]: Invalid user wwwid from 117.139.166.203 Dec 7 18:30:49 linuxvps sshd\[34121\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203	2019-12-08 07:54:28
attackbots	2019-10-16T11:58:59.197453shield sshd\[16679\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 user=root 2019-10-16T11:59:00.836490shield sshd\[16679\]: Failed password for root from 117.139.166.203 port 22926 ssh2 2019-10-16T12:03:48.022960shield sshd\[17299\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 user=root 2019-10-16T12:03:50.198985shield sshd\[17299\]: Failed password for root from 117.139.166.203 port 26286 ssh2 2019-10-16T12:08:43.359927shield sshd\[17600\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 user=root	2019-10-16 22:35:44
attack	Oct 7 14:40:31 root sshd[25180]: Failed password for root from 117.139.166.203 port 61247 ssh2 Oct 7 14:45:22 root sshd[25263]: Failed password for root from 117.139.166.203 port 63504 ssh2 ...	2019-10-08 03:28:38
attack	Sep 22 10:17:37 saschabauer sshd[29603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 Sep 22 10:17:39 saschabauer sshd[29603]: Failed password for invalid user anni from 117.139.166.203 port 45357 ssh2	2019-09-22 16:42:24
attackspam	Sep 19 17:11:50 areeb-Workstation sshd[3123]: Failed password for root from 117.139.166.203 port 27526 ssh2 Sep 19 17:18:15 areeb-Workstation sshd[6358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 ...	2019-09-19 19:56:38
attackspam	Sep 18 00:10:07 areeb-Workstation sshd[10161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 Sep 18 00:10:09 areeb-Workstation sshd[10161]: Failed password for invalid user hha from 117.139.166.203 port 59332 ssh2 ...	2019-09-18 02:43:36
attack	Aug 18 21:55:55 dedicated sshd[11613]: Invalid user ftpuser1 from 117.139.166.203 port 62839	2019-08-19 04:07:53
attackspam	Aug 3 18:17:08 MK-Soft-Root2 sshd\[13895\]: Invalid user lwen from 117.139.166.203 port 40460 Aug 3 18:17:08 MK-Soft-Root2 sshd\[13895\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.203 Aug 3 18:17:10 MK-Soft-Root2 sshd\[13895\]: Failed password for invalid user lwen from 117.139.166.203 port 40460 ssh2 ...	2019-08-04 01:53:38
attack	Jul 26 23:52:55 ks10 sshd[18484]: Failed password for root from 117.139.166.203 port 52627 ssh2 ...	2019-07-27 08:56:53
attackspambots	Jul 17 20:03:27 dedicated sshd[22428]: Invalid user chu from 117.139.166.203 port 28733	2019-07-18 04:29:13
attackspam	Jul 17 12:29:55 dedicated sshd[16470]: Invalid user vnc from 117.139.166.203 port 15101	2019-07-17 18:52:51
attack	20 attempts against mh-ssh on wood.magehost.pro	2019-06-23 09:18:09

相同子网IP讨论:

IP	类型	评论内容	时间
117.139.166.27	attackbots	2020-08-29T08:14:57.320093paragon sshd[684023]: Invalid user mfm from 117.139.166.27 port 15497 2020-08-29T08:14:57.322637paragon sshd[684023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 2020-08-29T08:14:57.320093paragon sshd[684023]: Invalid user mfm from 117.139.166.27 port 15497 2020-08-29T08:14:58.840575paragon sshd[684023]: Failed password for invalid user mfm from 117.139.166.27 port 15497 ssh2 2020-08-29T08:19:09.091273paragon sshd[684431]: Invalid user vna from 117.139.166.27 port 15498 ...	2020-08-29 13:36:08
117.139.166.27	attackbots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-08-17 19:25:48
117.139.166.27	attackspambots	frenzy	2020-08-15 13:13:30
117.139.166.27	attackspambots	Aug 11 03:40:48 ws26vmsma01 sshd[107035]: Failed password for root from 117.139.166.27 port 12928 ssh2 ...	2020-08-11 17:38:25
117.139.166.27	attackbotsspam	2020-08-01T20:20:39.721396correo.[domain] sshd[1199]: Failed password for root from 117.139.166.27 port 12972 ssh2 2020-08-01T20:25:06.660781correo.[domain] sshd[2131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 user=root 2020-08-01T20:25:08.800741correo.[domain] sshd[2131]: Failed password for root from 117.139.166.27 port 12973 ssh2 ...	2020-08-02 06:18:28
117.139.166.27	attackbotsspam	detected by Fail2Ban	2020-07-31 21:12:27
117.139.166.27	attack	Invalid user anna from 117.139.166.27 port 10573	2020-07-18 22:00:58
117.139.166.27	attack	Jul 15 20:54:44 nas sshd[4927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 Jul 15 20:54:46 nas sshd[4927]: Failed password for invalid user qiuhong from 117.139.166.27 port 9949 ssh2 Jul 15 21:02:12 nas sshd[5355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 ...	2020-07-16 03:49:27
117.139.166.27	attackbots	Jul 12 05:56:26 mout sshd[32147]: Invalid user wdk from 117.139.166.27 port 11204 Jul 12 05:56:28 mout sshd[32147]: Failed password for invalid user wdk from 117.139.166.27 port 11204 ssh2 Jul 12 05:56:28 mout sshd[32147]: Disconnected from invalid user wdk 117.139.166.27 port 11204 [preauth]	2020-07-12 12:21:30
117.139.166.27	attackspambots	Invalid user pramod from 117.139.166.27 port 9906	2020-07-11 07:19:40
117.139.166.27	attackbots	$f2bV_matches	2020-06-30 02:49:09
117.139.166.27	attackspambots	Jun 22 21:28:35 mockhub sshd[10584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 Jun 22 21:28:37 mockhub sshd[10584]: Failed password for invalid user monitor from 117.139.166.27 port 7515 ssh2 ...	2020-06-23 13:26:28
117.139.166.27	attackspam	Jun 18 00:19:47 ny01 sshd[27029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27 Jun 18 00:19:49 ny01 sshd[27029]: Failed password for invalid user ftpuser from 117.139.166.27 port 6721 ssh2 Jun 18 00:23:15 ny01 sshd[27429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.27	2020-06-18 12:33:18
117.139.166.27	attackbotsspam	Invalid user varkey from 117.139.166.27 port 5960	2020-05-30 13:03:06
117.139.166.27	attack	May 28 20:36:32 server sshd[8203]: Failed password for invalid user 72 from 117.139.166.27 port 5656 ssh2 May 28 21:07:59 server sshd[32679]: Failed password for root from 117.139.166.27 port 5663 ssh2 May 28 21:11:39 server sshd[35619]: Failed password for root from 117.139.166.27 port 5664 ssh2	2020-05-29 03:25:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.139.166.203
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6677
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.139.166.203.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062202 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jun 23 09:18:02 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

203.166.139.117.in-addr.arpa has no PTR record

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 203.166.139.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
183.129.188.92	attackspam	Oct 21 06:57:01 MK-Soft-VM7 sshd[32411]: Failed password for root from 183.129.188.92 port 55546 ssh2 ...	2019-10-21 14:37:10
114.245.87.111	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.245.87.111/ CN - 1H : (409) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4808 IP : 114.245.87.111 CIDR : 114.245.64.0/18 PREFIX COUNT : 1972 UNIQUE IP COUNT : 6728192 ATTACKS DETECTED ASN4808 : 1H - 2 3H - 3 6H - 4 12H - 6 24H - 13 DateTime : 2019-10-21 05:53:07 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-21 14:10:50
194.243.6.150	attack	Invalid user anne from 194.243.6.150 port 50230	2019-10-21 14:23:00
119.27.170.64	attackspam	Oct 21 05:47:29 DAAP sshd[11186]: Invalid user prestashop from 119.27.170.64 port 43408 Oct 21 05:47:29 DAAP sshd[11186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.170.64 Oct 21 05:47:29 DAAP sshd[11186]: Invalid user prestashop from 119.27.170.64 port 43408 Oct 21 05:47:30 DAAP sshd[11186]: Failed password for invalid user prestashop from 119.27.170.64 port 43408 ssh2 Oct 21 05:52:49 DAAP sshd[11228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.170.64 user=root Oct 21 05:52:51 DAAP sshd[11228]: Failed password for root from 119.27.170.64 port 53594 ssh2 ...	2019-10-21 14:19:18
164.132.54.246	attackspam	Oct 21 06:46:01 www sshd\[61184\]: Failed password for root from 164.132.54.246 port 41818 ssh2Oct 21 06:52:24 www sshd\[61476\]: Invalid user mika from 164.132.54.246Oct 21 06:52:25 www sshd\[61476\]: Failed password for invalid user mika from 164.132.54.246 port 33441 ssh2 ...	2019-10-21 14:35:27
218.92.0.133	attackbots	Oct 21 05:52:06 mail sshd\[31735\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.133 user=root Oct 21 05:52:08 mail sshd\[31735\]: Failed password for root from 218.92.0.133 port 57322 ssh2 Oct 21 05:52:21 mail sshd\[31735\]: Failed password for root from 218.92.0.133 port 57322 ssh2 ...	2019-10-21 14:36:45
77.247.109.72	attack	\[2019-10-21 02:00:18\] NOTICE\[2038\] chan_sip.c: Registration from '"2005" \' failed for '77.247.109.72:5418' - Wrong password \[2019-10-21 02:00:18\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-21T02:00:18.915-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2005",SessionID="0x7f6130804e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5418",Challenge="4a758bfe",ReceivedChallenge="4a758bfe",ReceivedHash="6fcfcec029459bb349eced8eb31f180e" \[2019-10-21 02:00:19\] NOTICE\[2038\] chan_sip.c: Registration from '"2005" \' failed for '77.247.109.72:5418' - Wrong password \[2019-10-21 02:00:19\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-21T02:00:19.026-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2005",SessionID="0x7f6130286de8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-10-21 14:05:35
5.188.67.118	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-10-21 14:35:57
106.13.147.109	attackbots	5x Failed Password	2019-10-21 14:15:09
193.193.240.34	attackspam	Automatic report - XMLRPC Attack	2019-10-21 14:22:15
116.196.85.71	attackbots	2019-10-20T23:43:08.0003411495-001 sshd\[58647\]: Failed password for root from 116.196.85.71 port 34640 ssh2 2019-10-21T00:45:29.0971231495-001 sshd\[61152\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.85.71 user=root 2019-10-21T00:45:31.0929021495-001 sshd\[61152\]: Failed password for root from 116.196.85.71 port 45484 ssh2 2019-10-21T00:49:54.9453881495-001 sshd\[61317\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.85.71 user=root 2019-10-21T00:49:56.9866011495-001 sshd\[61317\]: Failed password for root from 116.196.85.71 port 53786 ssh2 2019-10-21T00:54:21.9557591495-001 sshd\[61495\]: Invalid user minecraft from 116.196.85.71 port 33828 2019-10-21T00:54:21.9587661495-001 sshd\[61495\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.85.71 ...	2019-10-21 14:17:44
59.153.74.43	attackspambots	Oct 21 07:05:00 www5 sshd\[4043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43 user=root Oct 21 07:05:01 www5 sshd\[4043\]: Failed password for root from 59.153.74.43 port 14838 ssh2 Oct 21 07:08:53 www5 sshd\[4772\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43 user=root ...	2019-10-21 14:12:43
118.172.214.151	attackspambots	scan r	2019-10-21 14:19:53
173.56.119.71	attack	Honeypot attack, port: 23, PTR: static-173-56-119-71.nycmny.fios.verizon.net.	2019-10-21 14:24:30
34.77.75.210	attack	Honeypot attack, port: 445, PTR: 210.75.77.34.bc.googleusercontent.com.	2019-10-21 14:18:40

最近上报的IP列表

61.58.60.240	191.53.254.123	23.238.25.12	131.100.209.139
68.183.94.110	179.146.241.44	188.226.151.23	165.227.63.207
123.130.226.231	31.171.1.86	91.228.198.113	81.219.66.154
117.175.105.92	103.249.52.5	91.107.18.249	184.83.227.254
183.196.178.167	183.152.69.171	167.160.127.88	220.172.80.206