202.200.144.112

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Xi'an University of Architecture & Technology

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorised access (Oct 12) SRC=202.200.144.112 LEN=44 PREC=0x20 TTL=231 ID=26797 TCP DPT=1433 WINDOW=1024 SYN	2019-10-12 23:25:08

相同子网IP讨论:

IP	类型	评论内容	时间
202.200.144.150	attack	firewall-block, port(s): 445/tcp	2020-08-16 17:14:38
202.200.144.150	attackbots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 60	2020-07-21 15:03:37
202.200.144.69	attack	firewall-block, port(s): 1433/tcp	2020-07-11 18:09:41
202.200.144.150	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-09 01:51:51
202.200.144.113	attack	Unauthorized connection attempt from IP address 202.200.144.113 on Port 445(SMB)	2020-02-10 02:44:33
202.200.144.150	attack	" "	2019-11-30 20:26:44
202.200.144.113	attack	Unauthorized connection attempt from IP address 202.200.144.113 on Port 445(SMB)	2019-11-29 21:59:37
202.200.144.150	attackbots	[portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859)	2019-11-19 18:07:06
202.200.144.68	attackbotsspam	firewall-block, port(s): 1433/tcp	2019-10-19 16:48:08
202.200.144.161	attackbots	Port Scan: TCP/445	2019-09-20 19:03:52
202.200.144.161	attack	Port Scan: TCP/445	2019-09-16 06:39:54
202.200.144.150	attackbots	firewall-block, port(s): 445/tcp	2019-08-29 07:15:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.200.144.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64001
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.200.144.112.		IN	A

;; AUTHORITY SECTION:
.			193	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101200 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 12 23:25:02 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

112.144.200.202.in-addr.arpa domain name pointer 112.144.200.202.in-addr.arpa.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
112.144.200.202.in-addr.arpa	name = 112.144.200.202.in-addr.arpa.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
81.171.75.48	attack	\[2019-11-08 15:05:02\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:64619' - Wrong password \[2019-11-08 15:05:02\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-08T15:05:02.018-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8515",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48/64619",Challenge="0dc0dca4",ReceivedChallenge="0dc0dca4",ReceivedHash="e7059e50f0ddf1ae6c424dc2c6f14944" \[2019-11-08 15:05:40\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:52933' - Wrong password \[2019-11-08 15:05:40\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-08T15:05:40.832-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="641",SessionID="0x7fdf2c2677c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48/5	2019-11-09 04:18:22
183.81.84.173	attackspam	Unauthorized connection attempt from IP address 183.81.84.173 on Port 445(SMB)	2019-11-09 04:45:48
121.186.74.53	attackbotsspam	Automatic report - Port Scan Attack	2019-11-09 04:23:18
103.252.117.115	attack	Unauthorized connection attempt from IP address 103.252.117.115 on Port 445(SMB)	2019-11-09 04:43:24
212.129.138.67	attackbots	Nov 8 19:08:21 work-partkepr sshd\[12761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.138.67 user=root Nov 8 19:08:23 work-partkepr sshd\[12761\]: Failed password for root from 212.129.138.67 port 51668 ssh2 ...	2019-11-09 04:38:31
106.75.123.238	attack	Invalid user qe from 106.75.123.238 port 54598 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.123.238 Failed password for invalid user qe from 106.75.123.238 port 54598 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.123.238 user=root Failed password for root from 106.75.123.238 port 32918 ssh2	2019-11-09 04:27:17
177.8.172.218	attackbotsspam	Unauthorized connection attempt from IP address 177.8.172.218 on Port 445(SMB)	2019-11-09 04:53:26
186.144.72.32	attackspambots	Brute force attempt	2019-11-09 04:13:51
212.152.35.78	attack	Nov 8 20:19:58 bouncer sshd\[6856\]: Invalid user nrpe123 from 212.152.35.78 port 49039 Nov 8 20:19:58 bouncer sshd\[6856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.152.35.78 Nov 8 20:20:00 bouncer sshd\[6856\]: Failed password for invalid user nrpe123 from 212.152.35.78 port 49039 ssh2 ...	2019-11-09 04:46:14
188.166.181.139	attackbots	Forged login request.	2019-11-09 04:34:32
91.250.84.231	attackbotsspam	Nov 8 14:58:33 marvibiene sshd[10968]: Invalid user admin from 91.250.84.231 port 54024 Nov 8 14:58:33 marvibiene sshd[10968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.250.84.231 Nov 8 14:58:33 marvibiene sshd[10968]: Invalid user admin from 91.250.84.231 port 54024 Nov 8 14:58:35 marvibiene sshd[10968]: Failed password for invalid user admin from 91.250.84.231 port 54024 ssh2 ...	2019-11-09 04:15:57
108.62.5.84	attack	Multiple attempts: Microsoft Windows win.ini Access Attempt Detected, OpenVAS Vulnerability Scanner Detection, HTTP Directory Traversal Request Attempt, Apache Tomcat URIencoding Directory Traversal Vulnerability, Advantech Studio NTWebServer Arbitrary File Access Vulnerability, Generic HTTP Cross Site Scripting Attempt	2019-11-09 04:23:47
86.123.201.148	attackspambots	Unauthorized IMAP connection attempt	2019-11-09 04:50:46
27.72.78.220	attackspam	Unauthorized connection attempt from IP address 27.72.78.220 on Port 445(SMB)	2019-11-09 04:31:52
212.1.67.138	attack	Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445	2019-11-09 04:45:35

最近上报的IP列表

163.172.206.78	93.48.49.66	93.81.168.78	77.236.228.26
132.148.151.162	216.127.214.37	67.227.223.172	58.187.67.68
241.179.151.91	79.200.185.232	21.127.210.229	55.127.91.90
49.146.58.26	50.141.175.185	72.171.26.98	218.166.88.237
126.179.238.122	199.68.139.23	141.124.44.5	133.143.192.144