139.211.38.117

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Jilin Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	TCP (SYN) 139.211.38.117:61489 -> port 23, len 44	2020-09-05 12:47:39
attackbots	Telnet Honeypot -> Telnet Bruteforce / Login	2020-09-05 05:36:03

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.211.38.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12274
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.211.38.117.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020090401 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 05 05:36:00 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

117.38.211.139.in-addr.arpa domain name pointer 117.38.211.139.adsl-pool.jlccptt.net.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
117.38.211.139.in-addr.arpa	name = 117.38.211.139.adsl-pool.jlccptt.net.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
103.205.7.37	attack	1433/tcp 445/tcp [2019-10-23/31]2pkt	2019-10-31 16:38:21
89.248.160.193	attackspambots	Scanning for open ports	2019-10-31 16:19:21
182.139.134.107	attackspambots	$f2bV_matches	2019-10-31 16:30:36
195.31.160.73	attackbotsspam	Oct 31 06:32:42 legacy sshd[3228]: Failed password for root from 195.31.160.73 port 48056 ssh2 Oct 31 06:36:32 legacy sshd[3336]: Failed password for root from 195.31.160.73 port 33064 ssh2 Oct 31 06:40:22 legacy sshd[3436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.31.160.73 ...	2019-10-31 16:20:25
218.22.208.11	attack	1433/tcp 1433/tcp [2019-10-15/31]2pkt	2019-10-31 16:18:02
177.6.80.23	attackspambots	F2B jail: sshd. Time: 2019-10-31 09:16:38, Reported by: VKReport	2019-10-31 16:29:44
111.231.81.129	attackbots	Oct 31 10:31:48 server sshd\[15961\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.81.129 user=root Oct 31 10:31:49 server sshd\[15961\]: Failed password for root from 111.231.81.129 port 59862 ssh2 Oct 31 10:51:51 server sshd\[20284\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.81.129 user=root Oct 31 10:51:54 server sshd\[20284\]: Failed password for root from 111.231.81.129 port 47220 ssh2 Oct 31 10:58:49 server sshd\[21597\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.81.129 user=root ...	2019-10-31 16:01:57
95.227.48.109	attackspam	Oct 31 05:51:36 icinga sshd[3886]: Failed password for root from 95.227.48.109 port 55870 ssh2 ...	2019-10-31 16:34:29
192.3.207.82	attackspambots	\[2019-10-31 04:00:57\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '192.3.207.82:50273' - Wrong password \[2019-10-31 04:00:57\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-31T04:00:57.430-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5211",SessionID="0x7fdf2ca2e638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/192.3.207.82/50273",Challenge="33d40208",ReceivedChallenge="33d40208",ReceivedHash="953d47ffb7936b7d489229963bd5bf74" \[2019-10-31 04:10:51\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '192.3.207.82:62088' - Wrong password \[2019-10-31 04:10:51\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-31T04:10:51.472-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5300",SessionID="0x7fdf2c364088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/192.3.207.82	2019-10-31 16:20:55
196.218.127.68	attackbotsspam	Honeypot attack, port: 23, PTR: host-196.218.127.68-static.tedata.net.	2019-10-31 16:07:17
170.245.248.167	attackspambots	445/tcp 445/tcp 445/tcp... [2019-10-01/31]4pkt,1pt.(tcp)	2019-10-31 16:12:53
112.229.104.199	attackspam	8080/tcp 8080/tcp [2019-10-19/31]2pkt	2019-10-31 16:21:12
83.211.104.142	attack	Automatic report - Port Scan Attack	2019-10-31 16:38:47
115.78.8.83	attackspambots	Oct 30 18:05:47 php1 sshd\[12008\]: Invalid user delter from 115.78.8.83 Oct 30 18:05:47 php1 sshd\[12008\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.78.8.83 Oct 30 18:05:50 php1 sshd\[12008\]: Failed password for invalid user delter from 115.78.8.83 port 44403 ssh2 Oct 30 18:10:45 php1 sshd\[13008\]: Invalid user 123456 from 115.78.8.83 Oct 30 18:10:45 php1 sshd\[13008\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.78.8.83	2019-10-31 16:01:26
42.112.148.67	attack	Honeypot attack, port: 445, PTR: PTR record not found	2019-10-31 16:22:36

最近上报的IP列表

207.46.13.83	59.1.45.197	113.174.13.125	186.156.109.244
201.108.213.246	87.98.241.242	1.55.142.12	190.175.7.89
37.59.54.36	201.208.54.75	201.108.186.53	221.231.55.44
190.72.39.166	182.185.107.30	88.99.240.38	85.71.235.129
189.229.94.38	159.203.184.19	107.189.11.78	42.98.238.169