121.239.150.195

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Automatic report - SSH Brute-Force Attack	2019-07-03 12:01:11

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.239.150.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7185
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.239.150.195.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070201 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 03 12:01:04 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 195.150.239.121.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 195.150.239.121.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
14.170.48.43	attackbotsspam	Unauthorized connection attempt from IP address 14.170.48.43 on Port 445(SMB)	2020-08-31 07:58:31
217.23.10.20	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-08-30T21:18:23Z and 2020-08-30T22:04:54Z	2020-08-31 07:57:10
122.3.47.79	attack	Unauthorized connection attempt from IP address 122.3.47.79 on Port 445(SMB)	2020-08-31 08:32:18
66.240.205.34	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 57 - port: 4282 proto: tcp cat: Misc Attackbytes: 60	2020-08-31 08:17:46
3.129.238.85	attackspambots	Automatic report - Banned IP Access	2020-08-31 08:30:01
188.169.165.198	attackbotsspam	188.169.165.198 - - [30/Aug/2020:22:32:51 +0200] "GET /phpMyAdmin/index.php HTTP/1.1" 404 444 ...	2020-08-31 08:22:12
117.141.73.133	attackbots	Aug 30 18:48:23 NPSTNNYC01T sshd[16844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.141.73.133 Aug 30 18:48:25 NPSTNNYC01T sshd[16844]: Failed password for invalid user odoo from 117.141.73.133 port 47160 ssh2 Aug 30 18:53:47 NPSTNNYC01T sshd[17487]: Failed password for root from 117.141.73.133 port 50002 ssh2 ...	2020-08-31 08:00:51
180.76.169.198	attackspambots	2020-08-31T02:13:57.673708vps751288.ovh.net sshd\[8586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.198 user=root 2020-08-31T02:13:59.181288vps751288.ovh.net sshd\[8586\]: Failed password for root from 180.76.169.198 port 44416 ssh2 2020-08-31T02:16:22.286798vps751288.ovh.net sshd\[8606\]: Invalid user wp-user from 180.76.169.198 port 44680 2020-08-31T02:16:22.295006vps751288.ovh.net sshd\[8606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.198 2020-08-31T02:16:23.707452vps751288.ovh.net sshd\[8606\]: Failed password for invalid user wp-user from 180.76.169.198 port 44680 ssh2	2020-08-31 08:25:12
64.250.210.44	attackspam	2020-08-30T22:33:47+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)	2020-08-31 07:55:28
106.12.215.238	attack	Aug 30 22:33:22 sso sshd[25887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.215.238 Aug 30 22:33:24 sso sshd[25887]: Failed password for invalid user linaro from 106.12.215.238 port 53774 ssh2 ...	2020-08-31 08:05:11
190.204.166.219	attackspam	Unauthorized connection attempt from IP address 190.204.166.219 on Port 445(SMB)	2020-08-31 08:34:17
185.220.102.6	attackbots	Aug 31 00:57:47 haigwepa sshd[28030]: Failed password for sshd from 185.220.102.6 port 39775 ssh2 Aug 31 00:57:51 haigwepa sshd[28030]: Failed password for sshd from 185.220.102.6 port 39775 ssh2 ...	2020-08-31 08:22:45
105.163.220.162	attackspambots	105.163.220.162 - - [30/Aug/2020:22:33:58 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 105.163.220.162 - - [30/Aug/2020:22:33:59 +0100] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" 105.163.220.162 - - [30/Aug/2020:22:34:01 +0100] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 41822 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" ...	2020-08-31 07:57:54
104.168.14.122	attack	TCP (SYN) 104.168.14.122:41260 -> port 22, len 44	2020-08-31 08:30:32
51.158.162.242	attack	Aug 31 01:10:26 PorscheCustomer sshd[30310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.162.242 Aug 31 01:10:28 PorscheCustomer sshd[30310]: Failed password for invalid user deploy from 51.158.162.242 port 43708 ssh2 Aug 31 01:13:11 PorscheCustomer sshd[30368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.162.242 ...	2020-08-31 08:00:22

最近上报的IP列表

81.22.45.114	67.165.155.238	117.89.173.33	178.46.167.102
103.14.38.130	189.53.156.166	87.207.92.83	190.34.209.218
168.187.46.189	183.88.239.97	178.128.87.176	171.25.249.254
148.70.146.6	54.36.148.118	148.70.65.31	179.108.173.5
122.146.96.34	182.150.58.166	189.13.32.157	94.45.92.8