139.205.202.116

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Sichuan Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	[Thu Jul 23 17:19:00.047289 2020] [:error] [pid 115371] [client 139.205.202.116:26480] [client 139.205.202.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/GponForm/diag_Form"] [unique_id "Xxnws8C67Sko-VdEUDWKSgAAAAs"] ...	2020-07-24 06:45:40

类型

评论内容

时间

attackspambots

[Thu Jul 23 17:19:00.047289 2020] [:error] [pid 115371] [client 139.205.202.116:26480] [client 139.205.202.116] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/GponForm/diag_Form"] [unique_id "Xxnws8C67Sko-VdEUDWKSgAAAAs"]
...

2020-07-24 06:45:40

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.205.202.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37221
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.205.202.116.		IN	A

;; AUTHORITY SECTION:
.			317	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072301 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 24 06:45:37 CST 2020
;; MSG SIZE  rcvd: 119

HOST信息:

Host 116.202.205.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 116.202.205.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
110.72.251.22	attackspambots	B: f2b 404 5x	2020-01-06 08:08:28
77.31.20.58	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-06 08:17:30
200.232.139.107	attackspam	Honeypot attack, port: 23, PTR: 200-232-139-107.dsl.telesp.net.br.	2020-01-06 08:25:40
222.117.232.183	attack	Honeypot attack, port: 23, PTR: PTR record not found	2020-01-06 08:27:52
79.3.6.207	attackspam	(sshd) Failed SSH login from 79.3.6.207 (IT/Italy/host207-6-static.3-79-b.business.telecomitalia.it): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan 5 18:37:33 svr sshd[1028453]: Invalid user yuo from 79.3.6.207 port 49705 Jan 5 18:37:36 svr sshd[1028453]: Failed password for invalid user yuo from 79.3.6.207 port 49705 ssh2 Jan 5 18:45:18 svr sshd[1052642]: Invalid user klp from 79.3.6.207 port 56172 Jan 5 18:45:19 svr sshd[1052642]: Failed password for invalid user klp from 79.3.6.207 port 56172 ssh2 Jan 5 18:49:07 svr sshd[1064630]: Invalid user nn from 79.3.6.207 port 50543	2020-01-06 07:51:42
77.95.132.48	attackbots	Unauthorized connection attempt detected from IP address 77.95.132.48 to port 2220 [J]	2020-01-06 08:29:59
201.190.156.69	attack	Honeypot attack, port: 23, PTR: 201-190-156-69.supercanal.com.ar.	2020-01-06 08:22:55
113.1.156.242	attackbotsspam	Honeypot attack, port: 23, PTR: PTR record not found	2020-01-06 07:50:42
222.186.42.4	attackbotsspam	2020-01-06T01:13:55.213742scmdmz1 sshd[32372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root 2020-01-06T01:13:57.227532scmdmz1 sshd[32372]: Failed password for root from 222.186.42.4 port 16710 ssh2 2020-01-06T01:14:00.220386scmdmz1 sshd[32372]: Failed password for root from 222.186.42.4 port 16710 ssh2 2020-01-06T01:13:55.213742scmdmz1 sshd[32372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root 2020-01-06T01:13:57.227532scmdmz1 sshd[32372]: Failed password for root from 222.186.42.4 port 16710 ssh2 2020-01-06T01:14:00.220386scmdmz1 sshd[32372]: Failed password for root from 222.186.42.4 port 16710 ssh2 2020-01-06T01:13:55.213742scmdmz1 sshd[32372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root 2020-01-06T01:13:57.227532scmdmz1 sshd[32372]: Failed password for root from 222.186.42.4 port 16710 ssh2 2020-01-06T01:14:	2020-01-06 08:16:48
121.34.149.189	attack	Unauthorized connection attempt detected from IP address 121.34.149.189 to port 445	2020-01-06 08:02:04
132.232.112.217	attackbots	Unauthorized connection attempt detected from IP address 132.232.112.217 to port 2220 [J]	2020-01-06 08:17:09
112.231.213.112	attackbotsspam	2020-01-05T14:49:12.147921-07:00 suse-nuc sshd[29261]: Invalid user dbuser from 112.231.213.112 port 49539 ...	2020-01-06 07:52:38
217.208.141.71	attackbotsspam	Unauthorized connection attempt detected from IP address 217.208.141.71 to port 2323	2020-01-06 08:18:23
180.122.99.234	attackbots	Honeypot attack, port: 5555, PTR: PTR record not found	2020-01-06 08:24:35
186.24.6.35	attack	2020-01-05T22:48:22.244524MailD postfix/smtpd[10151]: NOQUEUE: reject: RCPT from 186-24-6-35.static.telcel.net.ve[186.24.6.35]: 554 5.7.1 Service unavailable; Client host [186.24.6.35] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?186.24.6.35; from= to= proto=ESMTP helo=<186-24-6-35.static.telcel.net.ve> 2020-01-05T22:48:22.645264MailD postfix/smtpd[10151]: NOQUEUE: reject: RCPT from 186-24-6-35.static.telcel.net.ve[186.24.6.35]: 554 5.7.1 Service unavailable; Client host [186.24.6.35] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?186.24.6.35; from= to= proto=ESMTP helo=<186-24-6-35.static.telcel.net.ve> 2020-01-05T22:48:23.053573MailD postfix/smtpd[10151]: NOQUEUE: reject: RCPT from 186-24-6-35.static.telcel.net.ve[186.24.6.35]: 554 5.7.1 Service unavailable; Client host [186.24.6.35] blocked using bl.spamcop.net; Blocked - see https://www.	2020-01-06 08:26:00

最近上报的IP列表

177.4.165.123	168.104.198.60	175.51.203.11	70.75.169.81
173.245.54.230	174.108.19.35	108.12.145.187	181.97.29.86
115.74.34.79	128.79.23.18	209.142.23.245	27.154.120.162
111.8.175.138	219.174.108.227	105.237.53.156	120.244.26.79
87.42.113.43	13.211.40.145	173.128.217.152	184.166.150.114