138.99.216.27 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Belize

运营商(isp): Life is good LTD.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	21 attempts against mh_ha-misbehave-ban on hill.magehost.pro	2019-07-17 23:54:01

相同子网IP讨论:

IP	类型	评论内容	时间
138.99.216.147	attackbots	138.99.216.147 - - [07/Aug/2020:06:50:18 -0400] "GET /403.shtml HTTP/1.1"	2020-08-07 22:54:31
138.99.216.104	attack	SmallBizIT.US 7 packets to tcp(4444,4455,33333,33890,40000,43389,63389)	2020-08-01 14:07:36
138.99.216.171	attack	Multihost portscan.	2020-07-29 19:35:15
138.99.216.147	attackbotsspam	Unauthorized SSH login attempts	2020-07-26 02:39:10
138.99.216.92	attackspambots	SmallBizIT.US 4 packets to tcp(3380,3384,3386,3390)	2020-07-20 06:26:17
138.99.216.147	attackbotsspam	Hacking	2020-07-04 07:16:06
138.99.216.112	attack	Jun 16 01:36:26 mail postfix/postscreen[14633]: DNSBL rank 3 for [138.99.216.112]:61000 ...	2020-06-29 04:47:49
138.99.216.147	attackspam	Jun 20 02:05:08 mail postfix/postscreen[22396]: DNSBL rank 3 for [138.99.216.147]:61000 ...	2020-06-29 04:46:26
138.99.216.171	attackbots	Jun 17 01:03:35 mail postfix/postscreen[3929]: DNSBL rank 3 for [138.99.216.171]:61000 ...	2020-06-29 04:45:58
138.99.216.112	attackbots	Automatic report - Banned IP Access	2020-06-27 20:39:48
138.99.216.171	attack	bad	2020-06-17 18:35:22
138.99.216.92	attack	SmallBizIT.US 7 packets to tcp(3332,3335,3372,3420,3421,5901,11027)	2020-06-16 07:39:19
138.99.216.92	attack	SmallBizIT.US 3 packets to tcp(3372,3503,55389)	2020-06-06 18:19:38
138.99.216.92	attackbotsspam	port	2020-05-29 16:29:26
138.99.216.147	attackspambots	May 27 06:03:38 mail kernel: [926510.604365] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=7979 PROTO=TCP SPT=61000 DPT=2525 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 06:03:47 mail kernel: [926519.228627] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=52750 PROTO=TCP SPT=61000 DPT=23 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 06:04:32 mail kernel: [926564.272009] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17012 PROTO=TCP SPT=61000 DPT=8095 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 06:04:40 mail kernel: [926572.880879] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=138.99.216.147 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=34444 PROTO=TCP SPT=61000 DPT=20000 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-27 12:32:25

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.99.216.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51366
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.99.216.27.			IN	A

;; AUTHORITY SECTION:
.			1904	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052500 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat May 25 16:38:32 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 27.216.99.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 27.216.99.138.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
37.49.229.207	attackbots	[2020-08-08 08:02:02] NOTICE[1248][C-00004d6e] chan_sip.c: Call from '' (37.49.229.207:7069) to extension '01148323395006' rejected because extension not found in context 'public'. [2020-08-08 08:02:02] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-08T08:02:02.441-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01148323395006",SessionID="0x7f27203df9b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.229.207/7069",ACLName="no_extension_match" [2020-08-08 08:11:44] NOTICE[1248][C-00004d75] chan_sip.c: Call from '' (37.49.229.207:9255) to extension '901148323395006' rejected because extension not found in context 'public'. [2020-08-08 08:11:44] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-08T08:11:44.490-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="901148323395006",SessionID="0x7f27204f0348",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49 ...	2020-08-09 01:59:48
195.158.21.134	attack	$f2bV_matches	2020-08-09 01:52:43
174.139.46.123	attack	[Sat Aug 8 15:19:43 2020 GMT] Amazon [URIBL_INV,RDNS_NONE,DOS_OUTLOOK_TO_MX], Subject: お支払い方法の情報を更新	2020-08-09 02:12:17
157.245.37.160	attackspambots	Aug 8 18:21:10 PorscheCustomer sshd[32228]: Failed password for root from 157.245.37.160 port 59436 ssh2 Aug 8 18:25:15 PorscheCustomer sshd[32290]: Failed password for root from 157.245.37.160 port 42060 ssh2 ...	2020-08-09 02:06:55
115.78.122.110	attackbots	Spam Timestamp : 08-Aug-20 12:13 BlockList Provider truncate.gbudb.net (45)	2020-08-09 02:01:20
54.36.148.236	attack	Bad Web Bot (AhrefsBot).	2020-08-09 02:05:40
183.136.225.45	attack	TCP (SYN) 183.136.225.45:17090 -> port 17, len 44	2020-08-09 01:59:27
140.143.136.89	attack	Aug 8 14:05:15 sshgateway sshd\[13083\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.136.89 user=root Aug 8 14:05:17 sshgateway sshd\[13083\]: Failed password for root from 140.143.136.89 port 36760 ssh2 Aug 8 14:11:23 sshgateway sshd\[13134\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.136.89 user=root	2020-08-09 02:12:35
118.25.109.46	attack	2020-08-08T14:07:46.399513mail.broermann.family sshd[22827]: Failed password for root from 118.25.109.46 port 38402 ssh2 2020-08-08T14:09:59.900953mail.broermann.family sshd[22891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.109.46 user=root 2020-08-08T14:10:02.395585mail.broermann.family sshd[22891]: Failed password for root from 118.25.109.46 port 59088 ssh2 2020-08-08T14:12:12.166633mail.broermann.family sshd[22975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.109.46 user=root 2020-08-08T14:12:13.917631mail.broermann.family sshd[22975]: Failed password for root from 118.25.109.46 port 51542 ssh2 ...	2020-08-09 01:40:47
103.106.181.4	attackspambots	Port Scan ...	2020-08-09 02:05:20
165.227.210.71	attack	2020-08-08T19:33:50.463032amanda2.illicoweb.com sshd\[12850\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.210.71 user=root 2020-08-08T19:33:52.160989amanda2.illicoweb.com sshd\[12850\]: Failed password for root from 165.227.210.71 port 58752 ssh2 2020-08-08T19:37:26.564313amanda2.illicoweb.com sshd\[13318\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.210.71 user=root 2020-08-08T19:37:28.245964amanda2.illicoweb.com sshd\[13318\]: Failed password for root from 165.227.210.71 port 40284 ssh2 2020-08-08T19:41:01.724595amanda2.illicoweb.com sshd\[13511\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.210.71 user=root ...	2020-08-09 01:51:20
81.170.239.2	attackspam	81.170.239.2 - - [08/Aug/2020:18:59:18 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 81.170.239.2 - - [08/Aug/2020:18:59:18 +0100] "POST /wp-login.php HTTP/1.1" 200 1839 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 81.170.239.2 - - [08/Aug/2020:18:59:19 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-09 02:00:52
143.92.43.85	attackspambots	2020-08-08T13:32:07.720053 X postfix/smtpd[207066]: NOQUEUE: reject: RCPT from unknown[143.92.43.85]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= 2020-08-08T13:52:08.854472 X postfix/smtpd[207066]: NOQUEUE: reject: RCPT from unknown[143.92.43.85]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= 2020-08-08T14:12:11.935639 X postfix/smtpd[213202]: NOQUEUE: reject: RCPT from unknown[143.92.43.85]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=	2020-08-09 01:42:57
1.43.11.229	attack	TCP (SYN) 1.43.11.229:40690 -> port 23, len 44	2020-08-09 02:00:20
121.121.91.109	attackspambots	Aug 8 14:00:44 ns382633 sshd\[30429\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.121.91.109 user=root Aug 8 14:00:46 ns382633 sshd\[30429\]: Failed password for root from 121.121.91.109 port 50026 ssh2 Aug 8 14:03:56 ns382633 sshd\[30651\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.121.91.109 user=root Aug 8 14:03:59 ns382633 sshd\[30651\]: Failed password for root from 121.121.91.109 port 34976 ssh2 Aug 8 14:11:50 ns382633 sshd\[32369\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.121.91.109 user=root	2020-08-09 01:56:59

最近上报的IP列表

185.14.148.66	185.153.197.192	89.103.27.45	185.134.232.118
40.73.34.44	177.135.103.94	69.158.249.44	195.181.167.149
202.164.222.5	124.139.145.103	51.254.217.7	87.111.46.230
167.172.106.97	117.239.111.114	68.183.37.128	105.134.174.118
223.193.40.202	68.228.236.16	140.171.190.248	40.153.223.238