137.117.68.157

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Port Scan detected from 137.117.68.157 (US/United States/Virginia/Ashburn/-). 4 hits in the last 50 seconds	2020-07-27 22:23:46

相同子网IP讨论:

IP	类型	评论内容	时间
137.117.68.211	attack	137.117.68.211 - - [06/Sep/2019:16:37:10 +0200] "GET /wp-login.php HTTP/1.1" 200 2895 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 137.117.68.211 - - [06/Sep/2019:16:37:11 +0200] "POST /wp-login.php HTTP/1.1" 200 3897 "http://ial.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 137.117.68.211 - - [06/Sep/2019:16:37:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3897 "http://ial.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 137.117.68.211 - - [06/Sep/2019:16:37:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3897 "http://ial.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 137.117.68.211 - - [06/Sep/2019:16:37:13 +0200] "POST /wp-login.php HTTP/1.1" 200	2019-09-06 23:13:26

类型

评论内容

时间

137.117.68.211

attack

137.117.68.211 - - [06/Sep/2019:16:37:10 +0200] "GET /wp-login.php HTTP/1.1" 200 2895 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
137.117.68.211 - - [06/Sep/2019:16:37:11 +0200] "POST /wp-login.php HTTP/1.1" 200 3897 "http://ial.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
137.117.68.211 - - [06/Sep/2019:16:37:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3897 "http://ial.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
137.117.68.211 - - [06/Sep/2019:16:37:12 +0200] "POST /wp-login.php HTTP/1.1" 200 3897 "http://ial.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36"
137.117.68.211 - - [06/Sep/2019:16:37:13 +0200] "POST /wp-login.php HTTP/1.1" 200

2019-09-06 23:13:26

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.117.68.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34165
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;137.117.68.157.			IN	A

;; AUTHORITY SECTION:
.			344	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072700 1800 900 604800 86400

;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 27 22:23:43 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 157.68.117.137.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.68.117.137.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
201.192.165.49	attack	Automatic report - Port Scan Attack	2020-09-05 01:35:11
45.142.120.20	attack	Sep 4 19:48:03 vmanager6029 postfix/smtpd\[14191\]: warning: unknown\[45.142.120.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 4 19:48:44 vmanager6029 postfix/smtpd\[14191\]: warning: unknown\[45.142.120.20\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-09-05 01:48:52
66.249.64.37	attack	Automatic report - Banned IP Access	2020-09-05 01:53:16
182.111.246.77	attack	spam (f2b h2)	2020-09-05 01:29:36
61.177.172.168	attackspambots	2020-09-04T19:27:58.007733ns386461 sshd\[17767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.168 user=root 2020-09-04T19:28:00.192899ns386461 sshd\[17767\]: Failed password for root from 61.177.172.168 port 39449 ssh2 2020-09-04T19:28:03.341410ns386461 sshd\[17767\]: Failed password for root from 61.177.172.168 port 39449 ssh2 2020-09-04T19:28:06.901627ns386461 sshd\[17767\]: Failed password for root from 61.177.172.168 port 39449 ssh2 2020-09-04T19:28:10.010150ns386461 sshd\[17767\]: Failed password for root from 61.177.172.168 port 39449 ssh2 ...	2020-09-05 01:28:25
45.142.120.36	attack	SMTP Screen: 45.142.120.36 (unknown location): connected 11 times within 2 minutes	2020-09-05 01:28:45
183.83.214.1	attackspam	Honeypot attack, port: 445, PTR: broadband.actcorp.in.	2020-09-05 01:40:38
104.206.128.14	attackspam	trying to access non-authorized port	2020-09-05 01:45:48
165.232.55.130	attack	SSH Scan	2020-09-05 02:03:20
138.97.242.113	attack	Sep 3 18:45:37 mellenthin postfix/smtpd[20478]: NOQUEUE: reject: RCPT from unknown[138.97.242.113]: 554 5.7.1 Service unavailable; Client host [138.97.242.113] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/138.97.242.113; from= to= proto=ESMTP helo=<138-97-242-113.altavelocidade>	2020-09-05 01:57:57
41.233.49.36	attackbotsspam	Port probing on unauthorized port 5501	2020-09-05 01:35:52
128.199.105.58	attackspam	Port scan denied	2020-09-05 02:08:10
174.243.64.122	attackbotsspam	Brute forcing email accounts	2020-09-05 02:04:38
197.214.11.1	attack	Unauthorized connection attempt from IP address 197.214.11.1 on Port 445(SMB)	2020-09-05 02:09:35
200.85.183.189	attack	Unauthorized connection attempt from IP address 200.85.183.189 on Port 445(SMB)	2020-09-05 01:39:56

最近上报的IP列表

117.221.45.16	125.164.177.118	119.156.29.42	180.30.70.53
175.139.190.165	113.204.1.6	20.44.229.142	167.86.123.214
103.145.12.7	78.38.30.38	83.169.245.34	92.250.88.50
223.238.63.94	147.253.212.0	111.72.193.152	232.212.183.169
51.75.16.206	53.220.187.127	52.247.7.222	14.230.215.161