118.131.102.157

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea Republic of

运营商(isp): LG Dacom Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Automatic report - Banned IP Access	2019-08-20 15:30:24
attackbotsspam	proto=tcp . spt=39798 . dpt=25 . (listed on Blocklist de Aug 15) (822)	2019-08-16 11:27:40
attack	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 02:50:53

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.131.102.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58018
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.131.102.157.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon May 06 07:41:30 +08 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 157.102.131.118.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 157.102.131.118.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.119.58.28	attackspam	20/10/4@16:41:46: FAIL: Alarm-Telnet address from=103.119.58.28 ...	2020-10-05 20:23:52
118.25.181.3	attack	TCP (SYN) 118.25.181.3:52867 -> port 445, len 40	2020-10-05 20:10:34
148.70.195.242	attackbots	Oct 5 09:41:58 haigwepa sshd[11877]: Failed password for root from 148.70.195.242 port 46034 ssh2 ...	2020-10-05 20:21:17
180.101.248.148	attackbots	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-05 20:36:39
58.216.160.214	attack	1433/tcp 1433/tcp 1433/tcp... [2020-08-10/10-04]8pkt,1pt.(tcp)	2020-10-05 20:41:00
36.69.8.73	attackbots	Honeypot hit.	2020-10-05 20:12:46
103.83.232.17	attack	Lines containing failures of 103.83.232.17 Oct 4 22:26:19 shared11 sshd[9581]: Did not receive identification string from 103.83.232.17 port 52733 Oct 4 22:26:25 shared11 sshd[9585]: Invalid user system from 103.83.232.17 port 53115 Oct 4 22:26:26 shared11 sshd[9585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.83.232.17 Oct 4 22:26:28 shared11 sshd[9585]: Failed password for invalid user system from 103.83.232.17 port 53115 ssh2 Oct 4 22:26:28 shared11 sshd[9585]: Connection closed by invalid user system 103.83.232.17 port 53115 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.83.232.17	2020-10-05 20:19:28
112.133.192.86	attack	Oct 4 22:32:47 mxgate1 postfix/postscreen[18122]: CONNECT from [112.133.192.86]:50178 to [176.31.12.44]:25 Oct 4 22:32:47 mxgate1 postfix/dnsblog[18123]: addr 112.133.192.86 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 4 22:32:47 mxgate1 postfix/dnsblog[18126]: addr 112.133.192.86 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 4 22:32:53 mxgate1 postfix/postscreen[18122]: DNSBL rank 3 for [112.133.192.86]:50178 Oct x@x Oct 4 22:32:54 mxgate1 postfix/postscreen[18122]: DISCONNECT [112.133.192.86]:50178 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.133.192.86	2020-10-05 20:45:09
190.215.40.170	attackbots	445/tcp 445/tcp 445/tcp... [2020-09-01/10-04]5pkt,1pt.(tcp)	2020-10-05 20:38:29
188.251.35.192	attackbots	Lines containing failures of 188.251.35.192 Oct 4 22:32:51 MAKserver05 sshd[11281]: Did not receive identification string from 188.251.35.192 port 58548 Oct 4 22:32:54 MAKserver05 sshd[11286]: Invalid user user1 from 188.251.35.192 port 59056 Oct 4 22:32:54 MAKserver05 sshd[11286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.251.35.192 Oct 4 22:32:55 MAKserver05 sshd[11286]: Failed password for invalid user user1 from 188.251.35.192 port 59056 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=188.251.35.192	2020-10-05 20:40:27
81.37.31.161	attackspam	Lines containing failures of 81.37.31.161 Oct 4 22:25:02 dns01 sshd[28623]: Did not receive identification string from 81.37.31.161 port 61620 Oct 4 22:25:05 dns01 sshd[28625]: Invalid user sniffer from 81.37.31.161 port 62012 Oct 4 22:25:05 dns01 sshd[28625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.37.31.161 Oct 4 22:25:07 dns01 sshd[28625]: Failed password for invalid user sniffer from 81.37.31.161 port 62012 ssh2 Oct 4 22:25:07 dns01 sshd[28625]: Connection closed by invalid user sniffer 81.37.31.161 port 62012 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=81.37.31.161	2020-10-05 20:12:21
60.185.155.117	attack	Lines containing failures of 60.185.155.117 Oct 4 16:28:26 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:27 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:27 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 16:28:28 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:29 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:29 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 16:28:30 neweola postfix/smtpd[21372]: connect from unknown[60.185.155.117] Oct 4 16:28:31 neweola postfix/smtpd[21372]: lost connection after AUTH from unknown[60.185.155.117] Oct 4 16:28:31 neweola postfix/smtpd[21372]: disconnect from unknown[60.185.155.117] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 4 1........ ------------------------------	2020-10-05 20:25:29
104.206.128.74	attackspambots	TCP (SYN) 104.206.128.74:55896 -> port 3389, len 44	2020-10-05 20:11:31
69.194.15.75	attackbots	Failed password for invalid user root from 69.194.15.75 port 36366 ssh2	2020-10-05 20:21:45
149.72.1.74	attackspam	2020-10-04 15:23:25.990872-0500 localhost smtpd[1892]: NOQUEUE: reject: RCPT from unknown[149.72.1.74]: 450 4.7.25 Client host rejected: cannot find your hostname, [149.72.1.74]; from= to= proto=ESMTP helo=	2020-10-05 20:06:38

最近上报的IP列表

89.246.233.34	191.209.99.112	1.220.9.68	222.235.242.224
142.93.72.131	212.124.188.103	228.88.68.62	35.238.81.17
5.9.151.57	161.126.94.95	83.212.74.140	132.66.231.148
178.128.221.179	159.232.148.222	92.187.198.152	168.7.48.106
45.107.245.18	97.178.151.73	23.129.64.103	148.149.249.233