202.200.144.113

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Xi'an University of Architecture & Technology

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt from IP address 202.200.144.113 on Port 445(SMB)	2020-02-10 02:44:33
attack	Unauthorized connection attempt from IP address 202.200.144.113 on Port 445(SMB)	2019-11-29 21:59:37

相同子网IP讨论:

IP	类型	评论内容	时间
202.200.144.150	attack	firewall-block, port(s): 445/tcp	2020-08-16 17:14:38
202.200.144.150	attackbots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 60	2020-07-21 15:03:37
202.200.144.69	attack	firewall-block, port(s): 1433/tcp	2020-07-11 18:09:41
202.200.144.150	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-09 01:51:51
202.200.144.150	attack	" "	2019-11-30 20:26:44
202.200.144.150	attackbots	[portscan] tcp/1433 [MsSQL] *(RWIN=1024)(11190859)	2019-11-19 18:07:06
202.200.144.68	attackbotsspam	firewall-block, port(s): 1433/tcp	2019-10-19 16:48:08
202.200.144.112	attack	Unauthorised access (Oct 12) SRC=202.200.144.112 LEN=44 PREC=0x20 TTL=231 ID=26797 TCP DPT=1433 WINDOW=1024 SYN	2019-10-12 23:25:08
202.200.144.161	attackbots	Port Scan: TCP/445	2019-09-20 19:03:52
202.200.144.161	attack	Port Scan: TCP/445	2019-09-16 06:39:54
202.200.144.150	attackbots	firewall-block, port(s): 445/tcp	2019-08-29 07:15:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.200.144.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52645
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.200.144.113.		IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112900 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 29 21:59:32 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 113.144.200.202.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
113.144.200.202.in-addr.arpa	name = 113.144.200.202.in-addr.arpa.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
129.28.115.92	attackbotsspam	Aug 16 01:59:14 server sshd\[20532\]: Invalid user adela from 129.28.115.92 port 37649 Aug 16 01:59:14 server sshd\[20532\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.115.92 Aug 16 01:59:17 server sshd\[20532\]: Failed password for invalid user adela from 129.28.115.92 port 37649 ssh2 Aug 16 02:04:32 server sshd\[10813\]: Invalid user jk from 129.28.115.92 port 55777 Aug 16 02:04:32 server sshd\[10813\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.115.92	2019-08-16 07:20:39
188.233.185.240	attack	Aug 15 20:18:11 localhost sshd\[4612\]: Invalid user rudolf from 188.233.185.240 port 47278 Aug 15 20:18:11 localhost sshd\[4612\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.233.185.240 Aug 15 20:18:13 localhost sshd\[4612\]: Failed password for invalid user rudolf from 188.233.185.240 port 47278 ssh2 ...	2019-08-16 07:28:57
176.31.100.19	attackspam	Aug 16 01:53:54 pkdns2 sshd\[30139\]: Invalid user test from 176.31.100.19Aug 16 01:53:56 pkdns2 sshd\[30139\]: Failed password for invalid user test from 176.31.100.19 port 41012 ssh2Aug 16 01:57:56 pkdns2 sshd\[30328\]: Invalid user final from 176.31.100.19Aug 16 01:57:58 pkdns2 sshd\[30328\]: Failed password for invalid user final from 176.31.100.19 port 60214 ssh2Aug 16 02:01:57 pkdns2 sshd\[30515\]: Invalid user tomcat from 176.31.100.19Aug 16 02:02:00 pkdns2 sshd\[30515\]: Failed password for invalid user tomcat from 176.31.100.19 port 51190 ssh2 ...	2019-08-16 07:23:17
114.247.177.155	attack	Port Scan detected from 114.247.177.155 (CN/China/-). 4 hits in the last 195 seconds	2019-08-16 07:55:29
174.87.187.161	attackspam	22/tcp [2019-08-15]1pkt	2019-08-16 07:38:10
143.0.58.173	attack	Aug 16 00:45:16 microserver sshd[47906]: Invalid user walter from 143.0.58.173 port 20552 Aug 16 00:45:16 microserver sshd[47906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.0.58.173 Aug 16 00:45:17 microserver sshd[47906]: Failed password for invalid user walter from 143.0.58.173 port 20552 ssh2 Aug 16 00:50:45 microserver sshd[48620]: Invalid user cameras from 143.0.58.173 port 21136 Aug 16 00:50:45 microserver sshd[48620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.0.58.173 Aug 16 01:01:35 microserver sshd[50054]: Invalid user tec from 143.0.58.173 port 19998 Aug 16 01:01:35 microserver sshd[50054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.0.58.173 Aug 16 01:01:37 microserver sshd[50054]: Failed password for invalid user tec from 143.0.58.173 port 19998 ssh2 Aug 16 01:07:00 microserver sshd[50803]: Invalid user debian from 143.0.58.173 port 20154 Aug 16 01:07:	2019-08-16 07:27:59
192.162.237.36	attack	Aug 15 23:32:13 yabzik sshd[2194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.162.237.36 Aug 15 23:32:16 yabzik sshd[2194]: Failed password for invalid user jiao123 from 192.162.237.36 port 41162 ssh2 Aug 15 23:36:53 yabzik sshd[4566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.162.237.36	2019-08-16 07:19:55
107.170.233.150	attackspambots	B: /wp-login.php attack	2019-08-16 07:21:32
117.239.69.117	attackbots	Aug 12 11:56:39 mailman sshd[7407]: Invalid user sybase from 117.239.69.117 Aug 12 11:56:39 mailman sshd[7407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.239.69.117 Aug 12 11:56:41 mailman sshd[7407]: Failed password for invalid user sybase from 117.239.69.117 port 41519 ssh2	2019-08-16 07:46:31
113.176.64.135	attackspam	Aug 9 07:26:57 mailman postfix/smtpd[28876]: NOQUEUE: reject: RCPT from unknown[113.176.64.135]: 554 5.7.1 Service unavailable; Client host [113.176.64.135] blocked using dnsbl.dronebl.org; IRC spam drone (litmus/sdbot/fyle); from= to= proto=ESMTP helo= Aug 9 07:27:01 mailman postfix/smtpd[28876]: NOQUEUE: reject: RCPT from unknown[113.176.64.135]: 554 5.7.1 Service unavailable; Client host [113.176.64.135] blocked using dnsbl.dronebl.org; IRC spam drone (litmus/sdbot/fyle); from= to= proto=ESMTP helo=	2019-08-16 07:52:44
139.59.238.14	attack	Aug 15 13:30:33 php2 sshd\[31221\]: Invalid user mauro from 139.59.238.14 Aug 15 13:30:33 php2 sshd\[31221\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.238.14 Aug 15 13:30:35 php2 sshd\[31221\]: Failed password for invalid user mauro from 139.59.238.14 port 52126 ssh2 Aug 15 13:38:33 php2 sshd\[32041\]: Invalid user vjohnson from 139.59.238.14 Aug 15 13:38:33 php2 sshd\[32041\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.238.14	2019-08-16 07:51:05
46.27.35.55	attackspam	$f2bV_matches	2019-08-16 07:16:58
104.236.38.105	attackspam	Aug 15 13:21:09 hiderm sshd\[19536\]: Invalid user grace from 104.236.38.105 Aug 15 13:21:09 hiderm sshd\[19536\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.38.105 Aug 15 13:21:11 hiderm sshd\[19536\]: Failed password for invalid user grace from 104.236.38.105 port 60938 ssh2 Aug 15 13:25:24 hiderm sshd\[19936\]: Invalid user ubuntu from 104.236.38.105 Aug 15 13:25:24 hiderm sshd\[19936\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.38.105	2019-08-16 07:25:58
112.217.225.59	attack	Aug 15 13:15:33 hiderm sshd\[18997\]: Invalid user majordomo from 112.217.225.59 Aug 15 13:15:33 hiderm sshd\[18997\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.217.225.59 Aug 15 13:15:35 hiderm sshd\[18997\]: Failed password for invalid user majordomo from 112.217.225.59 port 52931 ssh2 Aug 15 13:20:49 hiderm sshd\[19475\]: Invalid user proffice from 112.217.225.59 Aug 15 13:20:49 hiderm sshd\[19475\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.217.225.59	2019-08-16 07:21:03
176.122.9.102	attack	445/tcp [2019-08-15]1pkt	2019-08-16 07:18:41

最近上报的IP列表

209.123.227.120	115.98.77.83	51.140.60.221	189.254.255.67
125.222.148.112	1.10.252.78	14.175.244.151	5.139.211.204
188.131.172.142	1.0.170.14	125.164.98.59	46.221.46.2
103.82.209.189	101.102.9.79	181.13.32.186	180.245.153.21
246.94.123.3	77.222.101.10	242.53.221.49	138.108.113.112