162.244.80.114

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Data Room Inc

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Aug 21 09:48:27 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=162.244.80.114 DST=109.74.200.221 LEN=37 TOS=0x00 PREC=0x00 TTL=56 ID=51980 DF PROTO=UDP SPT=39453 DPT=123 LEN=17 ...	2019-09-10 19:48:18

类型

评论内容

时间

attackspam

Aug 21 09:48:27 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=162.244.80.114 DST=109.74.200.221 LEN=37 TOS=0x00 PREC=0x00 TTL=56 ID=51980 DF PROTO=UDP SPT=39453 DPT=123 LEN=17 
...

2019-09-10 19:48:18

相同子网IP讨论:

IP	类型	评论内容	时间
162.244.80.191	attackbots	port	2020-05-23 05:58:59
162.244.80.191	attackspambots	Scanning	2020-05-09 18:49:20
162.244.80.191	attackbots	Scanning	2020-05-05 21:18:01
162.244.80.14	attack	162.244.80.14 was recorded 8 times by 8 hosts attempting to connect to the following ports: 389. Incident counter (4h, 24h, all-time): 8, 17, 17	2020-03-12 07:19:12
162.244.80.228	attack	Port Scan: UDP/1900	2019-10-25 18:37:51
162.244.80.209	attackspambots	Scanning random ports - tries to find possible vulnerable services	2019-09-16 16:15:34
162.244.80.125	attack	" "	2019-07-25 05:49:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.244.80.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16321
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;162.244.80.114.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 10 19:48:04 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

114.80.244.162.in-addr.arpa has no PTR record

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 114.80.244.162.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
59.149.237.145	attack	2019-09-18 17:05:48,619 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 59.149.237.145 2019-09-18 17:36:13,352 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 59.149.237.145 2019-09-18 18:10:49,465 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 59.149.237.145 2019-09-18 18:45:22,213 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 59.149.237.145 2019-09-18 19:19:56,076 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 59.149.237.145 ...	2019-09-23 00:37:14
79.120.183.51	attackbots	2019-09-20 09:09:43,871 fail2ban.actions [800]: NOTICE [sshd] Ban 79.120.183.51 2019-09-20 12:16:46,480 fail2ban.actions [800]: NOTICE [sshd] Ban 79.120.183.51 2019-09-20 15:24:13,054 fail2ban.actions [800]: NOTICE [sshd] Ban 79.120.183.51 ...	2019-09-23 00:46:54
113.11.187.196	attack	RDP Bruteforce	2019-09-23 01:09:08
85.147.116.124	attack	Sep 22 16:04:36 vserver sshd\[12357\]: Invalid user pi from 85.147.116.124Sep 22 16:04:36 vserver sshd\[12355\]: Invalid user pi from 85.147.116.124Sep 22 16:04:38 vserver sshd\[12355\]: Failed password for invalid user pi from 85.147.116.124 port 34042 ssh2Sep 22 16:04:38 vserver sshd\[12357\]: Failed password for invalid user pi from 85.147.116.124 port 34052 ssh2 ...	2019-09-23 01:08:07
185.137.234.127	attackbots	$f2bV_matches	2019-09-23 01:00:30
171.244.18.14	attackbots	Automated report - ssh fail2ban: Sep 22 15:43:56 authentication failure Sep 22 15:43:58 wrong password, user=admin, port=45026, ssh2 Sep 22 15:49:20 authentication failure	2019-09-23 00:44:17
129.213.194.201	attack	Sep 22 15:27:36 game-panel sshd[1932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.194.201 Sep 22 15:27:38 game-panel sshd[1932]: Failed password for invalid user gopher from 129.213.194.201 port 49375 ssh2 Sep 22 15:33:26 game-panel sshd[2086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.194.201	2019-09-23 01:07:07
183.131.82.99	attackspam	Sep 22 18:15:57 fr01 sshd[3011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.131.82.99 user=root Sep 22 18:15:59 fr01 sshd[3011]: Failed password for root from 183.131.82.99 port 23471 ssh2 ...	2019-09-23 00:27:28
100.37.253.46	attackspambots	Sep 22 18:41:08 vmd17057 sshd\[8037\]: Invalid user admin from 100.37.253.46 port 47489 Sep 22 18:41:09 vmd17057 sshd\[8037\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=100.37.253.46 Sep 22 18:41:11 vmd17057 sshd\[8037\]: Failed password for invalid user admin from 100.37.253.46 port 47489 ssh2 ...	2019-09-23 01:00:54
81.241.235.191	attack	Sep 22 14:37:58 apollo sshd\[18242\]: Invalid user carolyn from 81.241.235.191Sep 22 14:38:00 apollo sshd\[18242\]: Failed password for invalid user carolyn from 81.241.235.191 port 56374 ssh2Sep 22 14:42:50 apollo sshd\[18285\]: Invalid user ns2cserver from 81.241.235.191 ...	2019-09-23 01:04:51
58.254.132.49	attack	2019-09-20 06:11:20,629 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 58.254.132.49 2019-09-20 06:43:48,003 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 58.254.132.49 2019-09-20 07:16:31,925 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 58.254.132.49 2019-09-20 07:48:09,711 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 58.254.132.49 2019-09-20 08:19:10,001 fail2ban.actions \[946\]: NOTICE \[sshd\] Ban 58.254.132.49 ...	2019-09-23 00:55:02
119.60.255.90	attack	2019-09-11 20:40:29,010 fail2ban.actions [814]: NOTICE [sshd] Ban 119.60.255.90 2019-09-11 23:48:53,804 fail2ban.actions [814]: NOTICE [sshd] Ban 119.60.255.90 2019-09-12 02:56:31,055 fail2ban.actions [814]: NOTICE [sshd] Ban 119.60.255.90 ...	2019-09-23 01:14:21
193.32.160.136	attackspambots	Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 22 17:36:50 relay postfix/smtpd\[27190\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from= ...	2019-09-23 00:41:29
189.114.67.213	attackbots	Automatic report - Banned IP Access	2019-09-23 01:19:39
27.197.198.178	attackspambots	Unauthorised access (Sep 22) SRC=27.197.198.178 LEN=44 TTL=50 ID=52938 TCP DPT=23 WINDOW=18788 SYN	2019-09-23 01:16:34

最近上报的IP列表

113.172.204.255	123.148.147.209	109.105.54.169	162.196.148.84
171.5.110.80	190.204.50.242	2.186.28.92	171.22.254.76
113.172.131.241	171.22.254.192	197.26.59.102	68.64.217.4
113.172.121.222	94.202.23.210	139.191.234.44	238.94.121.230
209.105.233.228	77.5.180.116	123.148.147.100	113.17.17.42