117.90.0.214 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
117.90.0.94	attack	lfd: (smtpauth) Failed SMTP AUTH login from 117.90.0.94 (94.0.90.117.broad.zj.js.dynamic.163data.com.cn): 5 in the last 3600 secs - Thu Jun 28 19:10:18 2018	2020-02-23 21:53:28
117.90.0.156	attackspambots	account brute force by foreign IP	2019-08-06 11:36:12
117.90.0.172	attackbotsspam	Forbidden directory scan :: 2019/07/18 20:50:05 [error] 1106#1106: *335174 access forbidden by rule, client: 117.90.0.172, server: [censored_1], request: "GET /.../exchange-2010-how-to-export-mailbox-to-a-pst-file HTTP/1.1", host: "www.[censored_1]"	2019-07-19 03:52:04

类型

评论内容

时间

117.90.0.94

attack

lfd: (smtpauth) Failed SMTP AUTH login from 117.90.0.94 (94.0.90.117.broad.zj.js.dynamic.163data.com.cn): 5 in the last 3600 secs - Thu Jun 28 19:10:18 2018

2020-02-23 21:53:28

117.90.0.156

attackspambots

account brute force by foreign IP

2019-08-06 11:36:12

117.90.0.172

attackbotsspam

Forbidden directory scan :: 2019/07/18 20:50:05 [error] 1106#1106: *335174 access forbidden by rule, client: 117.90.0.172, server: [censored_1], request: "GET /.../exchange-2010-how-to-export-mailbox-to-a-pst-file HTTP/1.1", host: "www.[censored_1]"

2019-07-19 03:52:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.90.0.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2073
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.90.0.214.			IN	A

;; AUTHORITY SECTION:
.			242	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 22:56:59 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 214.0.90.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 214.0.90.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
182.72.199.106	attackbotsspam	Jul 7 04:45:44 localhost sshd\[20330\]: Invalid user testuser from 182.72.199.106 port 51023 Jul 7 04:45:44 localhost sshd\[20330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.72.199.106 Jul 7 04:45:47 localhost sshd\[20330\]: Failed password for invalid user testuser from 182.72.199.106 port 51023 ssh2 ...	2019-07-07 16:37:55
185.26.146.228	attack	445/tcp 445/tcp 445/tcp... [2019-06-16/07-07]8pkt,1pt.(tcp)	2019-07-07 16:45:18
82.124.165.124	attackbots	Jul 7 05:48:41 [munged] sshd[22152]: Invalid user anonymous from 82.124.165.124 port 42438 Jul 7 05:48:41 [munged] sshd[22152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.124.165.124	2019-07-07 16:25:24
111.73.45.252	attack	445/tcp 445/tcp 445/tcp... [2019-05-07/07-07]18pkt,1pt.(tcp)	2019-07-07 16:33:24
185.234.219.102	attackspam	Jul 7 08:33:46 mail postfix/smtpd\[2712\]: warning: unknown\[185.234.219.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 7 08:40:45 mail postfix/smtpd\[2804\]: warning: unknown\[185.234.219.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 7 08:47:41 mail postfix/smtpd\[2804\]: warning: unknown\[185.234.219.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 7 09:22:28 mail postfix/smtpd\[3711\]: warning: unknown\[185.234.219.102\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2019-07-07 16:43:47
77.234.44.141	attackspam	\[2019-07-07 02:23:42\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '77.234.44.141:3918' - Wrong password \[2019-07-07 02:23:42\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-07T02:23:42.718-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6210",SessionID="0x7f02f8682a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.234.44.141/60737",Challenge="4770c73e",ReceivedChallenge="4770c73e",ReceivedHash="bf353894bb3bc56233490a2a2ad43d76" \[2019-07-07 02:23:56\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '77.234.44.141:3958' - Wrong password \[2019-07-07 02:23:56\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-07T02:23:56.974-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="807",SessionID="0x7f02f81c5a28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.234.44	2019-07-07 16:59:53
119.142.78.196	attackspambots	" "	2019-07-07 16:31:34
201.46.59.159	attack	Excessive failed login attempts on port 587	2019-07-07 16:41:40
117.14.58.46	attackbotsspam	22/tcp 22/tcp 22/tcp... [2019-06-05/07-07]9pkt,1pt.(tcp)	2019-07-07 17:02:01
106.75.7.70	attackspambots	Jul 7 01:06:46 server sshd\[27887\]: Invalid user db2fenc1 from 106.75.7.70 Jul 7 01:06:46 server sshd\[27887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.7.70 Jul 7 01:06:48 server sshd\[27887\]: Failed password for invalid user db2fenc1 from 106.75.7.70 port 36954 ssh2 ...	2019-07-07 16:15:36
123.252.165.53	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=16384)(07070954)	2019-07-07 16:36:16
223.30.92.130	attackspam	firewall-block, port(s): 445/tcp	2019-07-07 16:22:50
104.248.211.180	attack	Jul 7 10:51:45 [munged] sshd[3800]: Invalid user swilton from 104.248.211.180 port 40728 Jul 7 10:51:45 [munged] sshd[3800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.211.180	2019-07-07 16:52:41
23.129.64.168	attackspambots	Automatic report - Web App Attack	2019-07-07 17:03:43
106.13.37.253	attackbotsspam	Unauthorized SSH login attempts	2019-07-07 16:44:51

最近上报的IP列表

117.90.0.198	117.90.0.216	117.90.0.228	117.90.0.235
117.90.0.233	117.90.0.224	117.90.0.237	117.90.0.244
117.90.0.242	117.90.0.24	35.8.25.20	117.90.0.247
114.233.49.122	117.90.0.241	117.90.0.248	117.90.0.249
117.90.0.238	117.90.0.251	117.90.0.26	117.90.0.50