157.7.139.67 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Japan

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
157.7.139.121	attackspam	Jun 14 01:18:14 ns sshd[726]: Connection from 157.7.139.121 port 44108 on 134.119.36.27 port 22 Jun 14 01:18:16 ns sshd[726]: Invalid user zhou from 157.7.139.121 port 44108 Jun 14 01:18:16 ns sshd[726]: Failed password for invalid user zhou from 157.7.139.121 port 44108 ssh2 Jun 14 01:18:16 ns sshd[726]: Received disconnect from 157.7.139.121 port 44108:11: Bye Bye [preauth] Jun 14 01:18:16 ns sshd[726]: Disconnected from 157.7.139.121 port 44108 [preauth] Jun 14 01:31:41 ns sshd[10293]: Connection from 157.7.139.121 port 53588 on 134.119.36.27 port 22 Jun 14 01:31:43 ns sshd[10293]: Invalid user new from 157.7.139.121 port 53588 Jun 14 01:31:43 ns sshd[10293]: Failed password for invalid user new from 157.7.139.121 port 53588 ssh2 Jun 14 01:31:43 ns sshd[10293]: Received disconnect from 157.7.139.121 port 53588:11: Bye Bye [preauth] Jun 14 01:31:43 ns sshd[10293]: Disconnected from 157.7.139.121 port 53588 [preauth] Jun 14 01:36:57 ns sshd[13813]: Connection from 157......... -------------------------------	2020-06-15 04:36:52
157.7.139.138	attack	Mar 10 03:04:38 NPSTNNYC01T sshd[16875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.7.139.138 Mar 10 03:04:40 NPSTNNYC01T sshd[16875]: Failed password for invalid user bing from 157.7.139.138 port 34518 ssh2 Mar 10 03:08:29 NPSTNNYC01T sshd[17040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.7.139.138 ...	2020-03-10 15:23:43

类型

评论内容

时间

157.7.139.121

attackspam

Jun 14 01:18:14 ns sshd[726]: Connection from 157.7.139.121 port 44108 on 134.119.36.27 port 22
Jun 14 01:18:16 ns sshd[726]: Invalid user zhou from 157.7.139.121 port 44108
Jun 14 01:18:16 ns sshd[726]: Failed password for invalid user zhou from 157.7.139.121 port 44108 ssh2
Jun 14 01:18:16 ns sshd[726]: Received disconnect from 157.7.139.121 port 44108:11: Bye Bye [preauth]
Jun 14 01:18:16 ns sshd[726]: Disconnected from 157.7.139.121 port 44108 [preauth]
Jun 14 01:31:41 ns sshd[10293]: Connection from 157.7.139.121 port 53588 on 134.119.36.27 port 22
Jun 14 01:31:43 ns sshd[10293]: Invalid user new from 157.7.139.121 port 53588
Jun 14 01:31:43 ns sshd[10293]: Failed password for invalid user new from 157.7.139.121 port 53588 ssh2
Jun 14 01:31:43 ns sshd[10293]: Received disconnect from 157.7.139.121 port 53588:11: Bye Bye [preauth]
Jun 14 01:31:43 ns sshd[10293]: Disconnected from 157.7.139.121 port 53588 [preauth]
Jun 14 01:36:57 ns sshd[13813]: Connection from 157.........
-------------------------------

2020-06-15 04:36:52

157.7.139.138

attack

Mar 10 03:04:38 NPSTNNYC01T sshd[16875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.7.139.138
Mar 10 03:04:40 NPSTNNYC01T sshd[16875]: Failed password for invalid user bing from 157.7.139.138 port 34518 ssh2
Mar 10 03:08:29 NPSTNNYC01T sshd[17040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.7.139.138
...

2020-03-10 15:23:43

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.7.139.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10593
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;157.7.139.67.			IN	A

;; AUTHORITY SECTION:
.			103	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 05:04:22 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

67.139.7.157.in-addr.arpa domain name pointer v157-7-139-67.myvps.jp.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
67.139.7.157.in-addr.arpa	name = v157-7-139-67.myvps.jp.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
103.203.94.114	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.203.94.114/ BD - 1H : (8) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BD NAME ASN : ASN134841 IP : 103.203.94.114 CIDR : 103.203.94.0/24 PREFIX COUNT : 5 UNIQUE IP COUNT : 1280 WYKRYTE ATAKI Z ASN134841 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-12 07:58:28 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-12 18:23:39
117.50.67.214	attack	Brute force attempt	2019-10-12 18:31:57
185.219.168.254	attack	/administrator/manifests/files/joomla.xml	2019-10-12 18:04:45
157.230.226.7	attack	2019-10-12T09:47:39.856577abusebot-8.cloudsearch.cf sshd\[9382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.226.7 user=root	2019-10-12 17:57:05
185.53.88.127	attackspambots	\[2019-10-12 01:58:15\] NOTICE\[1887\] chan_sip.c: Registration from '"1" \' failed for '185.53.88.127:6386' - Wrong password \[2019-10-12 01:58:15\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-12T01:58:15.810-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1",SessionID="0x7fc3ac534428",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.127/6386",Challenge="100f6eac",ReceivedChallenge="100f6eac",ReceivedHash="898cdb24b6cb89c5d74345d475f69ee1" \[2019-10-12 01:58:15\] NOTICE\[1887\] chan_sip.c: Registration from '"1" \' failed for '185.53.88.127:6386' - Wrong password \[2019-10-12 01:58:15\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-12T01:58:15.916-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1",SessionID="0x7fc3ad3179c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.127/63	2019-10-12 18:27:25
58.212.142.86	attackspam	58.212.142.86 - wEb \[11/Oct/2019:23:02:17 -0700\] "GET /rss/catalog/notifystock/ HTTP/1.1" 401 2558.212.142.86 - Administrator \[11/Oct/2019:23:10:36 -0700\] "GET /rss/catalog/notifystock/ HTTP/1.1" 401 2558.212.142.86 - design \[11/Oct/2019:23:50:53 -0700\] "GET /rss/catalog/notifystock/ HTTP/1.1" 401 25 ...	2019-10-12 18:27:05
98.4.160.39	attack	Oct 12 02:58:48 xtremcommunity sshd\[439084\]: Invalid user Admin@1 from 98.4.160.39 port 51972 Oct 12 02:58:48 xtremcommunity sshd\[439084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.4.160.39 Oct 12 02:58:51 xtremcommunity sshd\[439084\]: Failed password for invalid user Admin@1 from 98.4.160.39 port 51972 ssh2 Oct 12 03:02:36 xtremcommunity sshd\[439170\]: Invalid user Einstein from 98.4.160.39 port 34018 Oct 12 03:02:36 xtremcommunity sshd\[439170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.4.160.39 ...	2019-10-12 18:33:49
222.186.175.150	attack	2019-10-12T10:00:05.333538abusebot-8.cloudsearch.cf sshd\[9433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root	2019-10-12 18:01:55
121.122.76.102	attackspam	Automatic report - Port Scan Attack	2019-10-12 18:13:26
222.186.190.92	attackspam	SSH bruteforce	2019-10-12 18:16:51
51.68.123.192	attack	Oct 12 11:23:23 v22019058497090703 sshd[5556]: Failed password for root from 51.68.123.192 port 53930 ssh2 Oct 12 11:27:28 v22019058497090703 sshd[5881]: Failed password for root from 51.68.123.192 port 37212 ssh2 ...	2019-10-12 17:53:19
121.161.30.126	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/121.161.30.126/ KR - 1H : (83) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN4766 IP : 121.161.30.126 CIDR : 121.161.0.0/16 PREFIX COUNT : 8136 UNIQUE IP COUNT : 44725248 WYKRYTE ATAKI Z ASN4766 : 1H - 2 3H - 6 6H - 9 12H - 20 24H - 63 DateTime : 2019-10-12 07:59:09 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery	2019-10-12 18:09:05
51.15.11.70	attack	Oct 12 10:14:09 venus sshd\[15361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.11.70 user=root Oct 12 10:14:11 venus sshd\[15361\]: Failed password for root from 51.15.11.70 port 50774 ssh2 Oct 12 10:18:30 venus sshd\[15441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.11.70 user=root ...	2019-10-12 18:31:38
165.227.41.202	attackbots	Oct 12 09:22:59 ovpn sshd\[16796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.41.202 user=root Oct 12 09:23:01 ovpn sshd\[16796\]: Failed password for root from 165.227.41.202 port 47782 ssh2 Oct 12 09:31:35 ovpn sshd\[18478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.41.202 user=root Oct 12 09:31:37 ovpn sshd\[18478\]: Failed password for root from 165.227.41.202 port 42372 ssh2 Oct 12 09:34:57 ovpn sshd\[19100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.41.202 user=root	2019-10-12 18:02:11
138.204.186.27	attackspam	Unauthorised access (Oct 12) SRC=138.204.186.27 LEN=40 TTL=244 ID=14369 TCP DPT=1433 WINDOW=1024 SYN	2019-10-12 18:16:19

最近上报的IP列表

157.7.107.94	157.7.156.235	157.7.163.35	157.7.165.38
157.7.167.25	157.7.168.115	157.7.169.154	157.7.162.49
157.7.174.190	157.7.184.13	157.7.170.217	157.7.183.111
157.7.184.11	157.7.184.22	157.7.184.23	157.7.184.26
157.7.184.25	157.7.184.30	157.7.184.28	157.7.188.223