117.68.197.99 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Anhui Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Aug3113:28:20server4pure-ftpd:\(\?@121.13.237.38\)[WARNING]Authenticationfailedforuser[www]Aug3113:28:24server4pure-ftpd:\(\?@121.13.237.38\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:36server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3113:31:48server4pure-ftpd:\(\?@117.68.197.99\)[WARNING]Authenticationfailedforuser[www]Aug3112:38:58server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:04server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:10server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3113:08:03server4pure-ftpd:\(\?@125.93.81.120\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:17server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3112:38:52server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]IPAddressesBlocked:121.13.237.38\(CN/China/-\)183.184.50.184\(CN/China/184.50.184.183.adsl-pool.sx.cn\)	2019-09-01 05:44:50

类型

评论内容

时间

attackspam

Aug3113:28:20server4pure-ftpd:\(\?@121.13.237.38\)[WARNING]Authenticationfailedforuser[www]Aug3113:28:24server4pure-ftpd:\(\?@121.13.237.38\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:36server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3113:31:48server4pure-ftpd:\(\?@117.68.197.99\)[WARNING]Authenticationfailedforuser[www]Aug3112:38:58server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:04server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:10server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3113:08:03server4pure-ftpd:\(\?@125.93.81.120\)[WARNING]Authenticationfailedforuser[www]Aug3112:39:17server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]Aug3112:38:52server4pure-ftpd:\(\?@183.184.50.184\)[WARNING]Authenticationfailedforuser[www]IPAddressesBlocked:121.13.237.38\(CN/China/-\)183.184.50.184\(CN/China/184.50.184.183.adsl-pool.sx.cn\)

2019-09-01 05:44:50

相同子网IP讨论:

IP	类型	评论内容	时间
117.68.197.63	attackspam	Apr 19 22:15:01 host sshd[60866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.68.197.63 user=root Apr 19 22:15:03 host sshd[60866]: Failed password for root from 117.68.197.63 port 41657 ssh2 ...	2020-04-20 05:48:55
117.68.197.143	attack	prod6 ...	2020-04-09 15:40:01
117.68.197.152	attack	Aug2711:06:07server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[archivioamarca]Aug2711:06:09server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[anonymous]Aug2711:06:14server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[archivioamarca]Aug2711:06:14server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[archivioamarca]Aug2711:06:22server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[www]	2019-08-27 21:01:48

类型

评论内容

时间

117.68.197.63

attackspam

Apr 19 22:15:01 host sshd[60866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.68.197.63  user=root
Apr 19 22:15:03 host sshd[60866]: Failed password for root from 117.68.197.63 port 41657 ssh2
...

2020-04-20 05:48:55

117.68.197.143

attack

prod6
...

2020-04-09 15:40:01

117.68.197.152

attack

Aug2711:06:07server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[archivioamarca]Aug2711:06:09server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[anonymous]Aug2711:06:14server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[archivioamarca]Aug2711:06:14server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[archivioamarca]Aug2711:06:22server2pure-ftpd:\(\?@117.68.197.152\)[WARNING]Authenticationfailedforuser[www]

2019-08-27 21:01:48

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.68.197.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25793
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.68.197.99.			IN	A

;; AUTHORITY SECTION:
.			3276	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019083102 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 05:44:45 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 99.197.68.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 99.197.68.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
41.139.230.99	attackbotsspam	Dec 23 14:55:48 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 12 secs): user=, method=PLAIN, rip=41.139.230.99, lip=10.140.194.78, TLS: Disconnected, session=	2019-12-24 03:40:00
185.143.223.81	attack	Dec 23 20:09:37 h2177944 kernel: \[326946.943833\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=23766 PROTO=TCP SPT=59834 DPT=48524 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 23 20:09:37 h2177944 kernel: \[326946.943849\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=23766 PROTO=TCP SPT=59834 DPT=48524 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 23 20:14:07 h2177944 kernel: \[327217.067223\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28131 PROTO=TCP SPT=59834 DPT=14295 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 23 20:14:07 h2177944 kernel: \[327217.067236\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28131 PROTO=TCP SPT=59834 DPT=14295 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 23 20:14:47 h2177944 kernel: \[327256.660600\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.1	2019-12-24 03:53:29
167.99.155.36	attack	Dec 23 16:56:51 MK-Soft-VM7 sshd[29468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.155.36 Dec 23 16:56:53 MK-Soft-VM7 sshd[29468]: Failed password for invalid user test from 167.99.155.36 port 54280 ssh2 ...	2019-12-24 03:37:28
185.234.219.105	attackbots	smtp probe/invalid login attempt	2019-12-24 03:29:12
129.204.219.180	attackspam	Nov 10 05:50:37 yesfletchmain sshd\[17722\]: User root from 129.204.219.180 not allowed because not listed in AllowUsers Nov 10 05:50:37 yesfletchmain sshd\[17722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.219.180 user=root Nov 10 05:50:40 yesfletchmain sshd\[17722\]: Failed password for invalid user root from 129.204.219.180 port 44852 ssh2 Nov 10 05:56:25 yesfletchmain sshd\[17920\]: Invalid user streamserver from 129.204.219.180 port 56400 Nov 10 05:56:25 yesfletchmain sshd\[17920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.219.180 ...	2019-12-24 03:57:21
149.202.180.143	attack	2019-12-23T17:00:31.477442 sshd[21978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.180.143 user=root 2019-12-23T17:00:33.247764 sshd[21978]: Failed password for root from 149.202.180.143 port 41914 ssh2 2019-12-23T17:05:55.945237 sshd[22083]: Invalid user dog from 149.202.180.143 port 43809 2019-12-23T17:05:55.956746 sshd[22083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.180.143 2019-12-23T17:05:55.945237 sshd[22083]: Invalid user dog from 149.202.180.143 port 43809 2019-12-23T17:05:57.541424 sshd[22083]: Failed password for invalid user dog from 149.202.180.143 port 43809 ssh2 ...	2019-12-24 03:47:11
218.92.0.164	attackspambots	Dec 23 19:28:15 marvibiene sshd[9936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.164 user=root Dec 23 19:28:17 marvibiene sshd[9936]: Failed password for root from 218.92.0.164 port 35065 ssh2 Dec 23 19:28:21 marvibiene sshd[9936]: Failed password for root from 218.92.0.164 port 35065 ssh2 Dec 23 19:28:15 marvibiene sshd[9936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.164 user=root Dec 23 19:28:17 marvibiene sshd[9936]: Failed password for root from 218.92.0.164 port 35065 ssh2 Dec 23 19:28:21 marvibiene sshd[9936]: Failed password for root from 218.92.0.164 port 35065 ssh2 ...	2019-12-24 03:42:43
129.204.37.181	attackbotsspam	Dec 5 17:24:39 yesfletchmain sshd\[21919\]: User root from 129.204.37.181 not allowed because not listed in AllowUsers Dec 5 17:24:39 yesfletchmain sshd\[21919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.37.181 user=root Dec 5 17:24:41 yesfletchmain sshd\[21919\]: Failed password for invalid user root from 129.204.37.181 port 62872 ssh2 Dec 5 17:32:26 yesfletchmain sshd\[22081\]: User root from 129.204.37.181 not allowed because not listed in AllowUsers Dec 5 17:32:27 yesfletchmain sshd\[22081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.37.181 user=root ...	2019-12-24 03:44:51
129.204.3.240	attack	Apr 20 19:28:18 yesfletchmain sshd\[26061\]: Invalid user spider from 129.204.3.240 port 55288 Apr 20 19:28:18 yesfletchmain sshd\[26061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.3.240 Apr 20 19:28:19 yesfletchmain sshd\[26061\]: Failed password for invalid user spider from 129.204.3.240 port 55288 ssh2 Apr 20 19:31:32 yesfletchmain sshd\[26181\]: Invalid user adele from 129.204.3.240 port 53540 Apr 20 19:31:32 yesfletchmain sshd\[26181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.3.240 ...	2019-12-24 03:48:01
124.251.110.147	attackbotsspam	Invalid user gehrmann from 124.251.110.147 port 45718 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.147 Failed password for invalid user gehrmann from 124.251.110.147 port 45718 ssh2 Invalid user factorio from 124.251.110.147 port 39158 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.251.110.147	2019-12-24 03:34:33
212.64.127.106	attackspambots	Dec 23 09:23:27 php1 sshd\[18888\]: Invalid user saligrama from 212.64.127.106 Dec 23 09:23:27 php1 sshd\[18888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.127.106 Dec 23 09:23:28 php1 sshd\[18888\]: Failed password for invalid user saligrama from 212.64.127.106 port 42810 ssh2 Dec 23 09:29:19 php1 sshd\[19443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.127.106 user=root Dec 23 09:29:21 php1 sshd\[19443\]: Failed password for root from 212.64.127.106 port 40921 ssh2	2019-12-24 03:50:34
182.61.3.119	attack	Dec 23 05:46:53 hpm sshd\[759\]: Invalid user wwwadmin from 182.61.3.119 Dec 23 05:46:53 hpm sshd\[759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.3.119 Dec 23 05:46:55 hpm sshd\[759\]: Failed password for invalid user wwwadmin from 182.61.3.119 port 44200 ssh2 Dec 23 05:52:53 hpm sshd\[1280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.3.119 user=root Dec 23 05:52:55 hpm sshd\[1280\]: Failed password for root from 182.61.3.119 port 38197 ssh2	2019-12-24 03:36:39
218.92.0.135	attackbots	Dec 23 09:19:56 php1 sshd\[3420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.135 user=root Dec 23 09:19:58 php1 sshd\[3420\]: Failed password for root from 218.92.0.135 port 46268 ssh2 Dec 23 09:20:15 php1 sshd\[3451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.135 user=root Dec 23 09:20:17 php1 sshd\[3451\]: Failed password for root from 218.92.0.135 port 15260 ssh2 Dec 23 09:20:37 php1 sshd\[3461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.135 user=root	2019-12-24 03:21:09
157.245.40.229	attackspambots	Dec 23 16:05:37 51-15-180-239 sshd[29337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=beaters.es user=root Dec 23 16:05:39 51-15-180-239 sshd[29337]: Failed password for root from 157.245.40.229 port 41722 ssh2 ...	2019-12-24 03:30:59
129.204.46.170	attack	Feb 12 18:44:47 dillonfme sshd\[686\]: Invalid user contabil from 129.204.46.170 port 55300 Feb 12 18:44:47 dillonfme sshd\[686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.46.170 Feb 12 18:44:49 dillonfme sshd\[686\]: Failed password for invalid user contabil from 129.204.46.170 port 55300 ssh2 Feb 12 18:49:07 dillonfme sshd\[996\]: Invalid user osmc from 129.204.46.170 port 54800 Feb 12 18:49:07 dillonfme sshd\[996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.46.170 ...	2019-12-24 03:32:27

最近上报的IP列表

189.59.55.156	204.12.215.162	5.56.112.247	47.200.47.36
190.186.44.52	0.0.30.4	113.176.95.107	165.22.108.201
159.138.7.206	93.147.79.28	41.35.74.112	213.109.161.36
185.44.237.166	115.215.85.190	120.35.189.24	37.97.216.193
167.57.17.237	58.254.132.41	185.101.33.136	111.179.72.160