120.244.116.89

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Mobile Communications Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 120.244.116.89 to port 3389	2019-12-31 02:01:48

相同子网IP讨论:

IP	类型	评论内容	时间
120.244.116.163	attack	Unauthorized connection attempt detected from IP address 120.244.116.163 to port 3389	2019-12-31 22:46:22
120.244.116.166	attackbotsspam	Unauthorized connection attempt detected from IP address 120.244.116.166 to port 3389	2019-12-31 22:45:54
120.244.116.164	attackspam	Unauthorized connection attempt detected from IP address 120.244.116.164 to port 3389	2019-12-31 22:17:23
120.244.116.164	attackspam	Unauthorized connection attempt detected from IP address 120.244.116.164 to port 3389	2019-12-31 02:01:21
120.244.116.166	attackbotsspam	Unauthorized connection attempt detected from IP address 120.244.116.166 to port 3389	2019-12-31 02:00:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.244.116.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49731
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;120.244.116.89.			IN	A

;; AUTHORITY SECTION:
.			551	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 02:01:45 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 89.116.244.120.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 89.116.244.120.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
220.178.75.153	attackspam	Apr 26 12:24:56 plex sshd[21565]: Failed password for invalid user sa from 220.178.75.153 port 5702 ssh2 Apr 26 12:24:54 plex sshd[21565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.178.75.153 Apr 26 12:24:54 plex sshd[21565]: Invalid user sa from 220.178.75.153 port 5702 Apr 26 12:24:56 plex sshd[21565]: Failed password for invalid user sa from 220.178.75.153 port 5702 ssh2 Apr 26 12:34:03 plex sshd[22040]: Invalid user roman from 220.178.75.153 port 40267	2020-04-26 18:45:43
111.22.108.103	attack	Unauthorized connection attempt from IP address 111.22.108.103 on port 993	2020-04-26 18:14:00
222.91.97.134	attackbotsspam	Apr 26 05:57:38 ip-172-31-61-156 sshd[21627]: Invalid user europe from 222.91.97.134 ...	2020-04-26 18:51:33
201.49.110.210	attack	Apr 26 04:41:09 game-panel sshd[4413]: Failed password for root from 201.49.110.210 port 35830 ssh2 Apr 26 04:46:25 game-panel sshd[4695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.49.110.210 Apr 26 04:46:26 game-panel sshd[4695]: Failed password for invalid user ljh from 201.49.110.210 port 48778 ssh2	2020-04-26 18:49:13
106.12.193.96	attackbots	Apr 24 05:44:59 ns392434 sshd[12893]: Invalid user guoq from 106.12.193.96 port 55631 Apr 24 05:44:59 ns392434 sshd[12893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.193.96 Apr 24 05:44:59 ns392434 sshd[12893]: Invalid user guoq from 106.12.193.96 port 55631 Apr 24 05:45:01 ns392434 sshd[12893]: Failed password for invalid user guoq from 106.12.193.96 port 55631 ssh2 Apr 24 05:52:26 ns392434 sshd[13164]: Invalid user ae from 106.12.193.96 port 34353 Apr 24 05:52:26 ns392434 sshd[13164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.193.96 Apr 24 05:52:26 ns392434 sshd[13164]: Invalid user ae from 106.12.193.96 port 34353 Apr 24 05:52:27 ns392434 sshd[13164]: Failed password for invalid user ae from 106.12.193.96 port 34353 ssh2 Apr 24 05:57:09 ns392434 sshd[13294]: Invalid user test from 106.12.193.96 port 60563	2020-04-26 18:25:06
59.63.163.165	attackbots	SIP/5060 Probe, BF, Hack -	2020-04-26 18:50:13
222.186.173.201	attackspam	2020-04-26T10:17:49.510300abusebot-8.cloudsearch.cf sshd[24583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201 user=root 2020-04-26T10:17:51.709816abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2 2020-04-26T10:17:56.236078abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2 2020-04-26T10:17:49.510300abusebot-8.cloudsearch.cf sshd[24583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201 user=root 2020-04-26T10:17:51.709816abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2 2020-04-26T10:17:56.236078abusebot-8.cloudsearch.cf sshd[24583]: Failed password for root from 222.186.173.201 port 42838 ssh2 2020-04-26T10:17:49.510300abusebot-8.cloudsearch.cf sshd[24583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...	2020-04-26 18:18:55
106.12.95.39	attackspambots	Apr 23 08:26:35 ns392434 sshd[29479]: Invalid user hr from 106.12.95.39 port 48322 Apr 23 08:26:35 ns392434 sshd[29479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.95.39 Apr 23 08:26:35 ns392434 sshd[29479]: Invalid user hr from 106.12.95.39 port 48322 Apr 23 08:26:37 ns392434 sshd[29479]: Failed password for invalid user hr from 106.12.95.39 port 48322 ssh2 Apr 23 08:39:51 ns392434 sshd[29980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.95.39 user=root Apr 23 08:39:52 ns392434 sshd[29980]: Failed password for root from 106.12.95.39 port 46926 ssh2 Apr 23 08:44:53 ns392434 sshd[30205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.95.39 user=root Apr 23 08:44:55 ns392434 sshd[30205]: Failed password for root from 106.12.95.39 port 51652 ssh2 Apr 23 08:50:02 ns392434 sshd[30410]: Invalid user un from 106.12.95.39 port 56396	2020-04-26 18:36:51
75.162.30.23	attackbots	RDP Brute-Force (honeypot 8)	2020-04-26 18:09:58
45.56.137.137	attack	[2020-04-26 05:58:36] NOTICE[1170] chan_sip.c: Registration from '' failed for '45.56.137.137:51946' - Wrong password [2020-04-26 05:58:36] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-26T05:58:36.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2313",SessionID="0x7f6c086f7488",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.56.137.137/51946",Challenge="29dd902f",ReceivedChallenge="29dd902f",ReceivedHash="a09b21b7c8258fe81d471319d620d0b3" [2020-04-26 05:58:37] NOTICE[1170] chan_sip.c: Registration from '' failed for '45.56.137.137:52757' - Wrong password [2020-04-26 05:58:37] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-26T05:58:37.459-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2350",SessionID="0x7f6c08358818",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.56.137.137 ...	2020-04-26 18:15:57
92.118.234.234	attack	Excessive unauthorized requests: 5060	2020-04-26 18:26:40
62.171.136.249	attackspam	Lines containing failures of 62.171.136.249 Apr 25 14:53:18 supported sshd[29105]: Invalid user gtadmin from 62.171.136.249 port 55218 Apr 25 14:53:18 supported sshd[29105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.171.136.249 Apr 25 14:53:19 supported sshd[29105]: Failed password for invalid user gtadmin from 62.171.136.249 port 55218 ssh2 Apr 25 14:53:20 supported sshd[29105]: Received disconnect from 62.171.136.249 port 55218:11: Bye Bye [preauth] Apr 25 14:53:20 supported sshd[29105]: Disconnected from invalid user gtadmin 62.171.136.249 port 55218 [preauth] Apr 25 15:06:06 supported sshd[31747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.171.136.249 user=r.r Apr 25 15:06:08 supported sshd[31747]: Failed password for r.r from 62.171.136.249 port 46006 ssh2 Apr 25 15:06:08 supported sshd[31747]: Received disconnect from 62.171.136.249 port 46006:11: Bye Bye [preauth] Ap........ ------------------------------	2020-04-26 18:47:41
103.76.24.202	attackbots	1587872922 - 04/26/2020 05:48:42 Host: 103.76.24.202/103.76.24.202 Port: 445 TCP Blocked	2020-04-26 18:21:24
123.206.38.253	attackspam	(sshd) Failed SSH login from 123.206.38.253 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 26 09:52:51 s1 sshd[12193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.38.253 user=root Apr 26 09:52:53 s1 sshd[12193]: Failed password for root from 123.206.38.253 port 57394 ssh2 Apr 26 09:58:48 s1 sshd[12307]: Invalid user glenn from 123.206.38.253 port 35460 Apr 26 09:58:50 s1 sshd[12307]: Failed password for invalid user glenn from 123.206.38.253 port 35460 ssh2 Apr 26 10:02:20 s1 sshd[12440]: Invalid user user from 123.206.38.253 port 45268	2020-04-26 18:12:25
202.75.47.43	attackspambots	failed_logins	2020-04-26 18:48:26

最近上报的IP列表

111.49.175.240	130.225.67.132	111.20.101.36	226.141.225.84
198.235.146.243	123.79.118.240	109.196.143.125	126.25.158.118
239.196.189.178	101.205.157.243	61.240.211.205	71.127.166.139
192.149.86.62	60.10.17.89	60.10.17.88	32.66.215.98
164.29.70.74	58.71.218.204	129.216.59.115	196.38.60.83