121.204.138.187

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Fujian Xiamen branch Telecom Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2019-10-26T03:54:22.666667abusebot.cloudsearch.cf sshd\[19050\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.138.187 user=root	2019-10-26 12:22:25
attack	failed root login	2019-10-23 17:35:26
attack	Oct 20 15:02:13 h2177944 sshd\[23228\]: Invalid user zzz from 121.204.138.187 port 50104 Oct 20 15:02:13 h2177944 sshd\[23228\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.138.187 Oct 20 15:02:16 h2177944 sshd\[23228\]: Failed password for invalid user zzz from 121.204.138.187 port 50104 ssh2 Oct 20 15:07:45 h2177944 sshd\[23419\]: Invalid user qhsupport from 121.204.138.187 port 58860 ...	2019-10-21 02:45:36
attackbots	2019-10-19T15:21:57.784473abusebot-8.cloudsearch.cf sshd\[9900\]: Invalid user fk from 121.204.138.187 port 41804	2019-10-19 23:58:21
attackspambots	$f2bV_matches	2019-10-17 22:49:53

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.204.138.187
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27474
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.204.138.187.		IN	A

;; AUTHORITY SECTION:
.			595	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101700 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 17 22:49:50 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 187.138.204.121.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 187.138.204.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.216.140.6	attack	09/26/2019-08:39:25.238999 185.216.140.6 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-09-26 22:55:08
24.98.228.56	attackspam	firewall-block, port(s): 81/tcp	2019-09-26 22:25:40
69.172.87.212	attackspambots	Sep 26 04:15:13 lcprod sshd\[11725\]: Invalid user win from 69.172.87.212 Sep 26 04:15:13 lcprod sshd\[11725\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69-172-87-212.static.imsbiz.com Sep 26 04:15:15 lcprod sshd\[11725\]: Failed password for invalid user win from 69.172.87.212 port 39059 ssh2 Sep 26 04:19:28 lcprod sshd\[12111\]: Invalid user wiedeback from 69.172.87.212 Sep 26 04:19:28 lcprod sshd\[12111\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69-172-87-212.static.imsbiz.com	2019-09-26 22:31:33
42.234.130.4	attackspambots	Unauthorised access (Sep 26) SRC=42.234.130.4 LEN=40 TTL=49 ID=55007 TCP DPT=8080 WINDOW=51470 SYN Unauthorised access (Sep 25) SRC=42.234.130.4 LEN=40 TTL=49 ID=13347 TCP DPT=8080 WINDOW=51470 SYN Unauthorised access (Sep 25) SRC=42.234.130.4 LEN=40 TTL=49 ID=34514 TCP DPT=8080 WINDOW=49169 SYN	2019-09-26 22:41:14
217.61.14.223	attackbots	$f2bV_matches	2019-09-26 22:50:35
159.203.201.144	attackspambots	firewall-block, port(s): 61345/tcp	2019-09-26 22:14:27
78.85.92.194	attackbots	scan z	2019-09-26 22:43:46
117.211.161.171	attackbots	Sep 26 03:38:05 auw2 sshd\[16522\]: Invalid user pi from 117.211.161.171 Sep 26 03:38:05 auw2 sshd\[16524\]: Invalid user pi from 117.211.161.171 Sep 26 03:38:06 auw2 sshd\[16522\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.161.171 Sep 26 03:38:06 auw2 sshd\[16524\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.211.161.171 Sep 26 03:38:07 auw2 sshd\[16522\]: Failed password for invalid user pi from 117.211.161.171 port 59226 ssh2	2019-09-26 22:28:11
216.244.66.246	attackbots	Automated report (2019-09-26T12:39:42+00:00). Misbehaving bot detected at this address.	2019-09-26 22:40:26
23.129.64.193	attackbots	Sep 26 13:20:57 thevastnessof sshd[7488]: Failed password for root from 23.129.64.193 port 45912 ssh2 ...	2019-09-26 22:33:01
85.209.0.35	attackspam	port scanning, they should get a real job. One that contributes to society and not a leach on it.	2019-09-26 22:23:44
49.249.237.226	attackbotsspam	Sep 26 16:25:47 s64-1 sshd[14780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.249.237.226 Sep 26 16:25:48 s64-1 sshd[14780]: Failed password for invalid user kh from 49.249.237.226 port 47924 ssh2 Sep 26 16:30:32 s64-1 sshd[14844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.249.237.226 ...	2019-09-26 22:44:51
178.255.126.198	attackspam	DATE:2019-09-26 15:18:34, IP:178.255.126.198, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)	2019-09-26 22:15:26
106.13.67.22	attackspam	2019-09-26T09:58:13.3342621495-001 sshd\[7471\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.67.22 user=root 2019-09-26T09:58:15.1239611495-001 sshd\[7471\]: Failed password for root from 106.13.67.22 port 44932 ssh2 2019-09-26T10:11:38.0052861495-001 sshd\[8435\]: Invalid user bear from 106.13.67.22 port 40178 2019-09-26T10:11:38.0121191495-001 sshd\[8435\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.67.22 2019-09-26T10:11:40.3136391495-001 sshd\[8435\]: Failed password for invalid user bear from 106.13.67.22 port 40178 ssh2 2019-09-26T10:25:11.6065901495-001 sshd\[9454\]: Invalid user yuanwd from 106.13.67.22 port 35422 ...	2019-09-26 22:38:31
62.210.141.84	attackspambots	\[2019-09-26 10:21:50\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '62.210.141.84:61892' - Wrong password \[2019-09-26 10:21:50\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T10:21:50.838-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6800076",SessionID="0x7f1e1c011788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.141.84/61892",Challenge="01a66a5b",ReceivedChallenge="01a66a5b",ReceivedHash="425c304f230886f7ca3e2cc905ff69d9" \[2019-09-26 10:22:07\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '62.210.141.84:53479' - Wrong password \[2019-09-26 10:22:07\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T10:22:07.235-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3100074",SessionID="0x7f1e1c10d4f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U	2019-09-26 22:56:47

最近上报的IP列表

60.10.205.173	185.202.129.2	203.205.195.89	185.243.51.30
117.27.76.55	45.143.220.9	186.67.115.166	177.41.82.118
115.79.193.53	113.231.20.234	157.39.234.18	189.112.63.102
114.95.173.181	190.130.4.212	2001:b07:6469:f280:7051:a0b0:b4cf:a5be	194.50.254.224
195.162.70.105	122.166.159.56	46.187.59.240	186.209.193.63