121.131.135.230

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea, Republic of

运营商(isp): KT Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 09:31:44

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.131.135.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57698
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.131.135.230.		IN	A

;; AUTHORITY SECTION:
.			501	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022802 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 29 09:31:38 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

230.135.131.121.in-addr.arpa has no PTR record

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 230.135.131.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
62.234.86.83	attackspambots	Sep 26 05:38:40 plex sshd[18187]: Invalid user css from 62.234.86.83 port 37196	2019-09-26 20:31:13
101.127.6.64	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-26 20:02:03
198.199.122.234	attackspambots	Sep 26 14:36:53 mail sshd\[6875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.122.234 Sep 26 14:36:55 mail sshd\[6875\]: Failed password for invalid user jenkins from 198.199.122.234 port 53490 ssh2 Sep 26 14:41:04 mail sshd\[7645\]: Invalid user suroy from 198.199.122.234 port 46008 Sep 26 14:41:04 mail sshd\[7645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.122.234 Sep 26 14:41:06 mail sshd\[7645\]: Failed password for invalid user suroy from 198.199.122.234 port 46008 ssh2	2019-09-26 20:43:04
1.203.115.64	attack	Automatic report - Banned IP Access	2019-09-26 20:11:17
193.32.160.141	attackbotsspam	2019-09-26 06:02:20 H=([193.32.160.145]) [193.32.160.141]:64252 I=[192.147.25.65]:25 F=<9uztpi31eootl9t0@drnona.net> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-26 06:02:20 H=([193.32.160.145]) [193.32.160.141]:64252 I=[192.147.25.65]:25 F=<9uztpi31eootl9t0@drnona.net> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-26 06:02:20 H=([193.32.160.145]) [193.32.160.141]:64252 I=[192.147.25.65]:25 F=<9uztpi31eootl9t0@drnona.net> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-26 06:02:20 H=([193.32.160.145]) [193.32.160.141]:64252 I=[192.147.25.65]:25 F=<9uztpi31eootl9t0@drnona.net> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq ...	2019-09-26 20:17:39
148.70.101.245	attackbots	Sep 26 14:35:49 mail sshd\[6681\]: Invalid user user from 148.70.101.245 port 43142 Sep 26 14:35:49 mail sshd\[6681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.101.245 Sep 26 14:35:52 mail sshd\[6681\]: Failed password for invalid user user from 148.70.101.245 port 43142 ssh2 Sep 26 14:41:56 mail sshd\[7753\]: Invalid user admin from 148.70.101.245 port 45792 Sep 26 14:41:56 mail sshd\[7753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.101.245	2019-09-26 20:44:21
185.220.101.67	attackbotsspam	09/26/2019-05:38:48.716219 185.220.101.67 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 34	2019-09-26 20:28:43
14.248.31.65	attackbots	Sep 25 23:08:59 localhost kernel: [3205158.142697] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=14.248.31.65 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=21551 PROTO=TCP SPT=6138 DPT=88 WINDOW=15058 RES=0x00 SYN URGP=0 Sep 25 23:08:59 localhost kernel: [3205158.142736] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=14.248.31.65 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=21551 PROTO=TCP SPT=6138 DPT=88 SEQ=758669438 ACK=0 WINDOW=15058 RES=0x00 SYN URGP=0 Sep 25 23:38:27 localhost kernel: [3206926.149284] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=14.248.31.65 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=21551 PROTO=TCP SPT=6138 DPT=88 WINDOW=15058 RES=0x00 SYN URGP=0 Sep 25 23:38:27 localhost kernel: [3206926.149307] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=14.248.31.65 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=48 I	2019-09-26 20:36:43
221.213.68.237	attack	Unauthorised access (Sep 26) SRC=221.213.68.237 LEN=40 TTL=48 ID=4349 TCP DPT=8080 WINDOW=12439 SYN	2019-09-26 20:35:33
116.140.83.204	attackbots	Unauthorised access (Sep 26) SRC=116.140.83.204 LEN=40 TTL=49 ID=51051 TCP DPT=8080 WINDOW=4200 SYN Unauthorised access (Sep 26) SRC=116.140.83.204 LEN=40 TTL=49 ID=28248 TCP DPT=8080 WINDOW=16194 SYN Unauthorised access (Sep 25) SRC=116.140.83.204 LEN=40 TTL=49 ID=34296 TCP DPT=8080 WINDOW=4200 SYN Unauthorised access (Sep 24) SRC=116.140.83.204 LEN=40 TTL=48 ID=34203 TCP DPT=8080 WINDOW=9311 SYN Unauthorised access (Sep 24) SRC=116.140.83.204 LEN=40 TTL=48 ID=46644 TCP DPT=8080 WINDOW=9311 SYN	2019-09-26 20:05:29
200.39.254.118	attackbots	Automatic report - Port Scan Attack	2019-09-26 20:22:27
165.22.182.168	attackspambots	Sep 26 14:33:52 mail sshd\[6310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.182.168 Sep 26 14:33:54 mail sshd\[6310\]: Failed password for invalid user www from 165.22.182.168 port 38016 ssh2 Sep 26 14:37:30 mail sshd\[6977\]: Invalid user horst from 165.22.182.168 port 50094 Sep 26 14:37:30 mail sshd\[6977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.182.168 Sep 26 14:37:33 mail sshd\[6977\]: Failed password for invalid user horst from 165.22.182.168 port 50094 ssh2	2019-09-26 20:43:47
142.93.241.93	attackbots	Sep 26 14:32:22 mail sshd\[6035\]: Failed password for invalid user 00 from 142.93.241.93 port 35970 ssh2 Sep 26 14:36:11 mail sshd\[6733\]: Invalid user share from 142.93.241.93 port 36996 Sep 26 14:36:11 mail sshd\[6733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.241.93 Sep 26 14:36:13 mail sshd\[6733\]: Failed password for invalid user share from 142.93.241.93 port 36996 ssh2 Sep 26 14:40:14 mail sshd\[7505\]: Invalid user jd from 142.93.241.93 port 37328	2019-09-26 20:44:41
159.89.235.61	attackspam	Sep 26 14:29:04 mail sshd\[5585\]: Failed password for invalid user da from 159.89.235.61 port 43164 ssh2 Sep 26 14:33:10 mail sshd\[6209\]: Invalid user oracle from 159.89.235.61 port 55544 Sep 26 14:33:10 mail sshd\[6209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.235.61 Sep 26 14:33:12 mail sshd\[6209\]: Failed password for invalid user oracle from 159.89.235.61 port 55544 ssh2 Sep 26 14:37:20 mail sshd\[6943\]: Invalid user monitor from 159.89.235.61 port 39684 Sep 26 14:37:20 mail sshd\[6943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.235.61	2019-09-26 20:44:08
77.247.108.185	attackspam	\[2019-09-26 08:42:01\] NOTICE\[1948\] chan_sip.c: Registration from '"4000" \' failed for '77.247.108.185:5738' - Wrong password \[2019-09-26 08:42:01\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T08:42:01.505-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4000",SessionID="0x7f1e1c10d4f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.185/5738",Challenge="49c1df10",ReceivedChallenge="49c1df10",ReceivedHash="a1813cbc3ab5c79cbeb2f08b6117a594" \[2019-09-26 08:42:01\] NOTICE\[1948\] chan_sip.c: Registration from '"4000" \' failed for '77.247.108.185:5738' - Wrong password \[2019-09-26 08:42:01\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T08:42:01.743-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4000",SessionID="0x7f1e1c01f928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2019-09-26 20:42:28

最近上报的IP列表

175.124.43.162	117.48.206.11	106.13.220.48	121.122.120.21
109.188.84.14	167.172.114.165	121.122.105.101	94.102.51.8
27.128.246.164	183.159.112.134	154.221.17.210	121.121.118.195
14.242.203.138	123.20.9.209	195.142.104.101	120.82.229.131
35.190.224.170	154.202.2.250	103.90.155.156	87.246.7.38