117.33.97.55 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Shanxi (SN) Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	port scan/probe/communication attempt; port 23	2019-11-26 07:31:27

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.33.97.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50907
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.33.97.55.			IN	A

;; AUTHORITY SECTION:
.			356	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112501 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 26 07:31:24 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 55.97.33.117.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 55.97.33.117.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
193.242.104.31	attackspambots	Unauthorised access (Oct 4) SRC=193.242.104.31 LEN=52 TOS=0x10 PREC=0x40 TTL=115 ID=19905 DF TCP DPT=1433 WINDOW=8192 SYN	2020-10-04 22:57:51
177.17.122.251	attackspam	20/10/3@16:39:49: FAIL: Alarm-Intrusion address from=177.17.122.251 ...	2020-10-04 23:15:00
108.62.123.167	attackbots	\[2020-10-04 03:00:18\] SECURITY\[6939\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-04T03:00:18.987+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000000000001",SessionID="0x7f0ffeabb5a8",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/108.62.123.167/5069",Challenge="322e55fd",ReceivedChallenge="322e55fd",ReceivedHash="56b594278f1da155d27d0d54d9298239" \[2020-10-04 03:48:59\] SECURITY\[6939\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-04T03:48:59.248+0200",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7f0ffea6efd8",LocalAddress="IPV4/UDP/204.8.216.89/5060",RemoteAddress="IPV4/UDP/108.62.123.167/6072",Challenge="29b7f2d2",ReceivedChallenge="29b7f2d2",ReceivedHash="388bcec59ee341cd8e21188b9e33a564" \[2020-10-04 03:48:59\] SECURITY\[6939\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-04T03:48:59.756+0200",Severity="Error",Service="SIP",EventVersi ...	2020-10-04 23:04:09
118.70.176.193	attackbotsspam	139/tcp 139/tcp 445/tcp [2020-10-01]3pkt	2020-10-04 23:20:19
38.64.128.3	attackbotsspam	445/tcp 445/tcp [2020-08-27/10-03]2pkt	2020-10-04 22:38:29
219.74.62.117	attack	TCP (SYN) 219.74.62.117:48287 -> port 23, len 40	2020-10-04 22:47:52
64.227.111.114	attack	Sep 30 04:43:36 v11 sshd[414]: Invalid user newsletter from 64.227.111.114 port 48490 Sep 30 04:43:36 v11 sshd[414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.111.114 Sep 30 04:43:38 v11 sshd[414]: Failed password for invalid user newsletter from 64.227.111.114 port 48490 ssh2 Sep 30 04:43:38 v11 sshd[414]: Received disconnect from 64.227.111.114 port 48490:11: Bye Bye [preauth] Sep 30 04:43:38 v11 sshd[414]: Disconnected from 64.227.111.114 port 48490 [preauth] Sep 30 04:47:55 v11 sshd[957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.111.114 user=r.r Sep 30 04:47:58 v11 sshd[957]: Failed password for r.r from 64.227.111.114 port 36472 ssh2 Sep 30 04:47:58 v11 sshd[957]: Received disconnect from 64.227.111.114 port 36472:11: Bye Bye [preauth] Sep 30 04:47:58 v11 sshd[957]: Disconnected from 64.227.111.114 port 36472 [preauth] ........ ----------------------------------------------- https://www.blocklist	2020-10-04 22:52:05
114.116.243.63	attackbots	4243/tcp 2375/tcp 4244/tcp... [2020-09-29/10-02]5pkt,5pt.(tcp)	2020-10-04 23:17:26
88.248.186.59	attack	445/tcp 445/tcp 445/tcp... [2020-09-12/10-03]6pkt,1pt.(tcp)	2020-10-04 23:16:23
125.227.0.210	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 125-227-0-210.HINET-IP.hinet.net.	2020-10-04 22:52:41
109.123.117.247	attackbotsspam	Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=7547 . dstport=7547 . (2650)	2020-10-04 22:42:13
124.128.248.18	attackbots	2020-10-04 09:43:30.314885-0500 localhost screensharingd[69989]: Authentication: FAILED :: User Name: N/A :: Viewer Address: 124.128.248.18 :: Type: VNC DES	2020-10-04 22:49:32
45.7.255.131	attackspambots	(sshd) Failed SSH login from 45.7.255.131 (AR/Argentina/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 16:39:46 internal2 sshd[26473]: Did not receive identification string from 45.7.255.131 port 51537 Oct 3 16:39:46 internal2 sshd[26474]: Did not receive identification string from 45.7.255.131 port 51548 Oct 3 16:39:46 internal2 sshd[26475]: Did not receive identification string from 45.7.255.131 port 51631	2020-10-04 23:14:42
106.13.181.132	attack	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-04 22:59:30
139.199.14.128	attackspambots	2020-10-04T03:11:55.088931Z 7474e83e79ed New connection: 139.199.14.128:39700 (172.17.0.5:2222) [session: 7474e83e79ed] 2020-10-04T03:19:53.709557Z 630dc3796768 New connection: 139.199.14.128:56288 (172.17.0.5:2222) [session: 630dc3796768]	2020-10-04 22:48:44

最近上报的IP列表

81.9.149.104	192.155.94.53	30.8.205.78	221.28.192.245
161.33.127.71	122.57.228.57	230.249.103.207	113.190.196.25
14.139.227.82	200.109.144.236	114.41.243.188	195.222.129.8
123.22.59.54	186.227.197.42	128.241.240.49	49.234.108.12
231.229.242.67	4.5.140.16	240.247.136.136	83.93.252.160