117.50.98.207 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Shanghai UCloud Information Technology Company Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	leo_www	2019-12-20 00:24:49
attack	Dec 2 08:00:19 vps647732 sshd[14856]: Failed password for root from 117.50.98.207 port 50414 ssh2 Dec 2 08:08:03 vps647732 sshd[15101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.98.207 ...	2019-12-02 15:14:14
attack	$f2bV_matches	2019-11-23 22:48:35
attackbots	Nov 4 02:56:43 php1 sshd\[8465\]: Invalid user test from 117.50.98.207 Nov 4 02:56:43 php1 sshd\[8465\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.98.207 Nov 4 02:56:45 php1 sshd\[8465\]: Failed password for invalid user test from 117.50.98.207 port 40574 ssh2 Nov 4 03:01:52 php1 sshd\[9030\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.98.207 user=root Nov 4 03:01:54 php1 sshd\[9030\]: Failed password for root from 117.50.98.207 port 50724 ssh2	2019-11-04 21:26:46

相同子网IP讨论:

IP	类型	评论内容	时间
117.50.98.185	attackbots	port scan and connect, tcp 21 (ftp)	2019-08-26 08:39:17

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.50.98.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48602
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.50.98.207.			IN	A

;; AUTHORITY SECTION:
.			412	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110400 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 04 21:26:42 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 207.98.50.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 207.98.50.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
217.150.38.185	attack	firewall-block, port(s): 1433/tcp	2020-02-28 04:16:37
113.172.227.165	attack	20/2/27@09:21:33: FAIL: Alarm-Network address from=113.172.227.165 ...	2020-02-28 03:58:20
123.182.226.44	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-02-28 04:24:50
218.26.176.3	attack	Feb 27 15:20:58 debian-2gb-nbg1-2 kernel: \[5072452.171711\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=218.26.176.3 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=28887 PROTO=TCP SPT=46671 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-28 04:31:42
73.48.209.244	attackbots	Feb 27 15:20:55 vps670341 sshd[17110]: Invalid user xuyz from 73.48.209.244 port 35990	2020-02-28 04:34:36
118.71.173.196	attackbotsspam	1582813252 - 02/27/2020 15:20:52 Host: 118.71.173.196/118.71.173.196 Port: 445 TCP Blocked	2020-02-28 04:38:22
123.207.40.81	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-02-28 03:58:53
138.255.193.102	attackspambots	Lines containing failures of 138.255.193.102 Feb 27 15:16:04 omfg postfix/smtpd[17531]: connect from dynamic-138-255-193-102.falemais.net.br[138.255.193.102] Feb x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.255.193.102	2020-02-28 04:37:50
63.82.49.47	attackbots	Feb 27 15:20:40 exim[4948]: [1\50] 1j7K1n-0001Ho-AX H=fresh.sapuxfiori.com (fresh.thaoduochq.com) [63.82.49.47] F= rejected after DATA: This message scored 102.5 spam points.	2020-02-28 04:26:32
121.229.48.89	attackbots	Feb 27 15:31:07 ns382633 sshd\[12369\]: Invalid user xuming from 121.229.48.89 port 34110 Feb 27 15:31:07 ns382633 sshd\[12369\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.48.89 Feb 27 15:31:09 ns382633 sshd\[12369\]: Failed password for invalid user xuming from 121.229.48.89 port 34110 ssh2 Feb 27 16:10:33 ns382633 sshd\[19294\]: Invalid user work from 121.229.48.89 port 40666 Feb 27 16:10:33 ns382633 sshd\[19294\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.48.89	2020-02-28 03:56:10
150.242.252.128	attack	2020-02-27 08:21:23 H=(mx76.mb1p.com) [150.242.252.128]:48270 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-02-27 08:21:23 H=(mx76.mb1p.com) [150.242.252.128]:48270 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-02-27 08:21:23 H=(mx76.mb1p.com) [150.242.252.128]:48270 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2020-02-28 04:07:50
96.47.10.53	attack	Feb 27 20:41:28 vps691689 sshd[1913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.47.10.53 Feb 27 20:41:31 vps691689 sshd[1913]: Failed password for invalid user liuzhenfeng from 96.47.10.53 port 56019 ssh2 ...	2020-02-28 04:02:11
103.207.11.10	attackspambots	Feb 27 21:10:55 jane sshd[32416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.11.10 Feb 27 21:10:57 jane sshd[32416]: Failed password for invalid user xbot from 103.207.11.10 port 43288 ssh2 ...	2020-02-28 04:35:38
119.27.189.46	attackspam	2020-02-27T15:20:51.840220 sshd[23813]: Invalid user otrs from 119.27.189.46 port 46038 2020-02-27T15:20:51.854441 sshd[23813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.189.46 2020-02-27T15:20:51.840220 sshd[23813]: Invalid user otrs from 119.27.189.46 port 46038 2020-02-27T15:20:53.880234 sshd[23813]: Failed password for invalid user otrs from 119.27.189.46 port 46038 ssh2 ...	2020-02-28 04:35:52
119.254.78.216	attackbots	Port probing on unauthorized port 1433	2020-02-28 04:22:14

最近上报的IP列表

103.87.154.195	80.82.64.176	67.55.25.57	185.10.68.198
46.16.130.172	109.197.192.18	36.75.141.238	212.129.50.2
77.37.150.9	106.13.204.251	64.39.99.194	142.93.214.130
67.198.130.28	62.167.77.79	177.139.5.46	125.83.92.36
176.9.187.114	151.45.246.82	3.0.115.255	102.130.28.37