117.92.203.145

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Brute force attempt	2019-09-28 17:46:09

相同子网IP讨论:

IP	类型	评论内容	时间
117.92.203.220	attackspam	Jun 30 15:23:41 elektron postfix/smtpd\[8009\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\ to=\ proto=ESMTP helo=\ Jun 30 15:24:28 elektron postfix/smtpd\[10298\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\ to=\ proto=ESMTP helo=\ Jun 30 15:25:17 elektron postfix/smtpd\[8009\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\ to=\ proto=ESMTP helo=\ Jun 30 15:26:07 elektron postfix/smtpd\[10493\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\	2020-06-30 21:34:09
117.92.203.50	attackbots	SpamScore above: 10.0	2020-05-07 14:51:26

类型

评论内容

时间

117.92.203.220

attackspam

Jun 30 15:23:41 elektron postfix/smtpd\[8009\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\ to=\ proto=ESMTP helo=\
Jun 30 15:24:28 elektron postfix/smtpd\[10298\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\ to=\ proto=ESMTP helo=\
Jun 30 15:25:17 elektron postfix/smtpd\[8009\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\ to=\ proto=ESMTP helo=\
Jun 30 15:26:07 elektron postfix/smtpd\[10493\]: NOQUEUE: reject: RCPT from unknown\[117.92.203.220\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[117.92.203.220\]\; from=\

2020-06-30 21:34:09

117.92.203.50

attackbots

SpamScore above: 10.0

2020-05-07 14:51:26

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.92.203.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35199
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.92.203.145.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092800 1800 900 604800 86400

;; Query time: 421 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 28 17:46:03 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

145.203.92.117.in-addr.arpa domain name pointer 145.203.92.117.broad.lyg.js.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
145.203.92.117.in-addr.arpa	name = 145.203.92.117.broad.lyg.js.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
180.76.179.67	attack	Oct 3 09:53:24 eventyay sshd[29662]: Failed password for root from 180.76.179.67 port 33038 ssh2 Oct 3 09:57:06 eventyay sshd[29720]: Failed password for root from 180.76.179.67 port 50590 ssh2 Oct 3 10:00:48 eventyay sshd[29770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.179.67 ...	2020-10-03 17:44:10
150.109.237.188	attack	Tried our host z.	2020-10-03 17:03:24
193.93.195.75	attack	(mod_security) mod_security (id:210730) triggered by 193.93.195.75 (RU/Russia/-): 5 in the last 300 secs	2020-10-03 17:22:15
153.101.167.242	attackspam	(sshd) Failed SSH login from 153.101.167.242 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 05:19:01 jbs1 sshd[4120]: Invalid user scheduler from 153.101.167.242 Oct 3 05:19:01 jbs1 sshd[4120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242 Oct 3 05:19:03 jbs1 sshd[4120]: Failed password for invalid user scheduler from 153.101.167.242 port 35624 ssh2 Oct 3 05:21:51 jbs1 sshd[5506]: Invalid user dinesh from 153.101.167.242 Oct 3 05:21:51 jbs1 sshd[5506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.101.167.242	2020-10-03 17:29:16
167.114.98.229	attackspam	SSH login attempts.	2020-10-03 17:45:43
186.115.221.65	attackbotsspam	1601671002 - 10/02/2020 22:36:42 Host: 186.115.221.65/186.115.221.65 Port: 445 TCP Blocked ...	2020-10-03 17:43:54
194.58.189.89	attackspam	1601671013 - 10/02/2020 22:36:53 Host: 194.58.189.89/194.58.189.89 Port: 445 TCP Blocked	2020-10-03 17:38:06
193.35.51.23	attackbots	Oct 3 11:20:50 cho postfix/smtpd[4120271]: warning: unknown[193.35.51.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 3 11:21:07 cho postfix/smtpd[4120271]: warning: unknown[193.35.51.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 3 11:21:40 cho postfix/smtps/smtpd[4119808]: warning: unknown[193.35.51.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 3 11:21:59 cho postfix/smtps/smtpd[4120683]: warning: unknown[193.35.51.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 3 11:26:49 cho postfix/smtps/smtpd[4119808]: warning: unknown[193.35.51.23]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-03 17:28:53
94.153.224.202	attackspam	94.153.224.202 - - \[03/Oct/2020:11:13:41 +0200\] "POST /wp-login.php HTTP/1.0" 200 5983 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 94.153.224.202 - - \[03/Oct/2020:11:13:42 +0200\] "POST /wp-login.php HTTP/1.0" 200 5815 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 94.153.224.202 - - \[03/Oct/2020:11:13:42 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-10-03 17:33:48
176.214.44.245	attackbotsspam	Icarus honeypot on github	2020-10-03 17:06:45
149.202.175.11	attackspam	Oct 3 06:40:55 game-panel sshd[24891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.175.11 Oct 3 06:40:57 game-panel sshd[24891]: Failed password for invalid user aaaa from 149.202.175.11 port 40054 ssh2 Oct 3 06:45:12 game-panel sshd[25045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.175.11	2020-10-03 16:56:15
167.172.193.218	attackbots	Oct 2 22:37:04 vm1 sshd[12156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.193.218 Oct 2 22:37:05 vm1 sshd[12156]: Failed password for invalid user nagios from 167.172.193.218 port 54310 ssh2 ...	2020-10-03 17:31:12
61.50.99.26	attack	SSH login attempts.	2020-10-03 17:44:38
180.76.183.218	attack	(sshd) Failed SSH login from 180.76.183.218 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 00:51:57 optimus sshd[10517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.183.218 user=root Oct 3 00:51:59 optimus sshd[10517]: Failed password for root from 180.76.183.218 port 57842 ssh2 Oct 3 00:52:52 optimus sshd[10723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.183.218 user=root Oct 3 00:52:54 optimus sshd[10723]: Failed password for root from 180.76.183.218 port 34476 ssh2 Oct 3 00:53:12 optimus sshd[10866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.183.218 user=root	2020-10-03 17:20:53
203.151.81.77	attackbotsspam	Invalid user ubuntu from 203.151.81.77 port 58012	2020-10-03 17:45:13

最近上报的IP列表

129.226.156.168	47.111.176.160	173.245.52.85	95.251.211.254
189.51.6.221	167.71.244.67	220.142.32.64	42.229.239.110
193.68.17.15	149.129.244.196	201.16.165.236	167.99.168.27
51.254.204.190	180.183.133.130	220.142.125.147	218.32.105.156
201.142.236.116	123.135.221.253	5.196.73.76	95.178.156.240