121.238.107.92

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Jul 2 00:49:18 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2 Jul 2 00:49:22 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2 Jul 2 00:49:24 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2 Jul 2 00:49:26 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2 Jul 2 00:49:28 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2 Jul 2 00:49:30 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2 Jul 2 00:49:30 server6 sshd[23598]: Disconnecting: Too many authentication failures for invalid user service from 121.238.107.92 port 34032 ssh2 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.238.107.92	2019-07-02 10:44:38

类型

评论内容

时间

attackspambots

Jul  2 00:49:18 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2
Jul  2 00:49:22 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2
Jul  2 00:49:24 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2
Jul  2 00:49:26 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2
Jul  2 00:49:28 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2
Jul  2 00:49:30 server6 sshd[23598]: Failed password for invalid user service from 121.238.107.92 port 34032 ssh2
Jul  2 00:49:30 server6 sshd[23598]: Disconnecting: Too many authentication failures for invalid user service from 121.238.107.92 port 34032 ssh2 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=121.238.107.92

2019-07-02 10:44:38

相同子网IP讨论:

IP	类型	评论内容	时间
121.238.107.242	attackbots	Chat Spam	2019-09-20 11:51:44

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.238.107.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24682
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.238.107.92.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070102 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 10:44:32 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 92.107.238.121.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 92.107.238.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.129.195.196	attack	Port Scan detected! ...	2020-06-19 22:22:05
197.46.98.27	attack	DATE:2020-06-19 14:16:58, IP:197.46.98.27, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-19 21:54:20
49.235.75.19	attackspam	2020-06-19T16:08:14+0200 Failed SSH Authentication/Brute Force Attack.(Server 2)	2020-06-19 22:23:09
222.186.175.216	attackbotsspam	Jun 19 15:55:44 pve1 sshd[5240]: Failed password for root from 222.186.175.216 port 50636 ssh2 Jun 19 15:55:49 pve1 sshd[5240]: Failed password for root from 222.186.175.216 port 50636 ssh2 ...	2020-06-19 22:11:42
85.209.0.101	attack	TCP (SYN) 85.209.0.101:22062 -> port 22, len 60	2020-06-19 21:49:12
36.71.234.56	attackspambots	1592568976 - 06/19/2020 14:16:16 Host: 36.71.234.56/36.71.234.56 Port: 445 TCP Blocked	2020-06-19 21:41:44
176.67.81.9	attackbots	[2020-06-19 10:13:54] NOTICE[1273] chan_sip.c: Registration from '' failed for '176.67.81.9:53094' - Wrong password [2020-06-19 10:13:54] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-19T10:13:54.241-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="370",SessionID="0x7f31c0334138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.81.9/53094",Challenge="7dd825a4",ReceivedChallenge="7dd825a4",ReceivedHash="64bdd42b815cac4bfdda3d7d65b0f464" [2020-06-19 10:15:10] NOTICE[1273] chan_sip.c: Registration from '' failed for '176.67.81.9:64736' - Wrong password [2020-06-19 10:15:10] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-19T10:15:10.701-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="716",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.81.9/64736",Chal ...	2020-06-19 22:17:46
92.63.197.99	attackspambots	TCP (SYN) 92.63.197.99:58538 -> port 18300, len 44	2020-06-19 22:06:40
197.211.38.170	attackspam	Automatic report - Port Scan Attack	2020-06-19 21:47:41
51.75.142.122	attackspambots	k+ssh-bruteforce	2020-06-19 22:01:24
223.255.28.203	attackspam	Jun 19 13:17:43 rush sshd[27977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.255.28.203 Jun 19 13:17:45 rush sshd[27977]: Failed password for invalid user admin from 223.255.28.203 port 33231 ssh2 Jun 19 13:22:16 rush sshd[28086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.255.28.203 ...	2020-06-19 21:44:18
64.225.25.59	attackbots	2020-06-19T14:41:12+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	2020-06-19 21:50:32
119.254.155.187	attack	2020-06-19T13:43:51.359288shield sshd\[25117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.254.155.187 user=root 2020-06-19T13:43:52.936088shield sshd\[25117\]: Failed password for root from 119.254.155.187 port 2117 ssh2 2020-06-19T13:48:40.639629shield sshd\[26244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.254.155.187 user=root 2020-06-19T13:48:42.221713shield sshd\[26244\]: Failed password for root from 119.254.155.187 port 59461 ssh2 2020-06-19T13:51:57.035286shield sshd\[26918\]: Invalid user zabbix from 119.254.155.187 port 37776	2020-06-19 21:57:39
137.74.132.175	attackspambots	Jun 19 15:19:18 server sshd[13467]: Failed password for invalid user nice from 137.74.132.175 port 34846 ssh2 Jun 19 15:22:10 server sshd[16586]: Failed password for root from 137.74.132.175 port 54612 ssh2 Jun 19 15:25:04 server sshd[19843]: Failed password for root from 137.74.132.175 port 46154 ssh2	2020-06-19 22:19:11
139.59.108.237	attack	Jun 19 16:20:00 lukav-desktop sshd\[10610\]: Invalid user fxf from 139.59.108.237 Jun 19 16:20:00 lukav-desktop sshd\[10610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.108.237 Jun 19 16:20:02 lukav-desktop sshd\[10610\]: Failed password for invalid user fxf from 139.59.108.237 port 35538 ssh2 Jun 19 16:24:32 lukav-desktop sshd\[10667\]: Invalid user aem from 139.59.108.237 Jun 19 16:24:32 lukav-desktop sshd\[10667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.108.237	2020-06-19 21:48:41

最近上报的IP列表

46.101.255.104	119.29.104.238	181.224.250.101	191.207.22.8
103.53.188.122	212.25.60.138	187.218.0.146	187.87.7.166
184.168.193.204	103.45.229.20	180.249.203.109	190.205.115.82
95.255.197.184	85.246.129.162	207.154.194.145	203.189.252.50
88.65.224.253	119.95.48.144	103.248.83.230	40.8.174.73