216.106.138.8 - IPInfo

基本信息:

城市(city): Norman

省份(region): Oklahoma

国家(country): United States

运营商(isp): Elauwit Networks LLC

主机名(hostname): unknown

机构(organization): Level 3 Parent, LLC

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Apr 17 07:57:30 ms-srv sshd[37745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.106.138.8 user=root Apr 17 07:57:32 ms-srv sshd[37745]: Failed password for invalid user root from 216.106.138.8 port 65216 ssh2	2020-03-08 23:00:45

类型

评论内容

时间

attackbotsspam

Apr 17 07:57:30 ms-srv sshd[37745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.106.138.8  user=root
Apr 17 07:57:32 ms-srv sshd[37745]: Failed password for invalid user root from 216.106.138.8 port 65216 ssh2

2020-03-08 23:00:45

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.106.138.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28389
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;216.106.138.8.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 28 22:05:37 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 8.138.106.216.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 8.138.106.216.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
114.40.147.227	attackspam	Honeypot attack, port: 23, PTR: 114-40-147-227.dynamic-ip.hinet.net.	2019-11-14 06:34:49
111.251.157.165	attackbots	Honeypot attack, port: 445, PTR: 111-251-157-165.dynamic-ip.hinet.net.	2019-11-14 06:07:06
103.237.144.136	attackspambots	fail2ban honeypot	2019-11-14 06:39:54
91.98.142.229	attack	Honeypot attack, port: 23, PTR: 91.98.142.229.pol.ir.	2019-11-14 06:32:55
93.144.211.236	attackspambots	Automatic report - Banned IP Access	2019-11-14 06:13:24
157.245.103.143	attackspambots	\[2019-11-13 15:34:46\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '157.245.103.143:43962' - Wrong password \[2019-11-13 15:34:46\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-13T15:34:46.982-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="091",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/157.245.103.143/43962",Challenge="2208666c",ReceivedChallenge="2208666c",ReceivedHash="43295b19109fff5fcf473eef4577ccfd" \[2019-11-13 15:34:49\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '157.245.103.143:38408' - Wrong password \[2019-11-13 15:34:49\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-13T15:34:49.688-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5000001",SessionID="0x7fdf2c21c7b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP	2019-11-14 06:31:36
54.37.8.91	attackbotsspam	Nov 13 04:38:42 auw2 sshd\[19702\]: Invalid user solomea from 54.37.8.91 Nov 13 04:38:42 auw2 sshd\[19702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.ip-54-37-8.eu Nov 13 04:38:43 auw2 sshd\[19702\]: Failed password for invalid user solomea from 54.37.8.91 port 47150 ssh2 Nov 13 04:42:28 auw2 sshd\[20148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.ip-54-37-8.eu user=root Nov 13 04:42:31 auw2 sshd\[20148\]: Failed password for root from 54.37.8.91 port 56020 ssh2	2019-11-14 06:17:08
61.231.183.116	attack	Port scan	2019-11-14 06:11:51
46.38.144.202	attack	2019-11-13T23:06:26.090654mail01 postfix/smtpd[8260]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-13T23:06:53.185661mail01 postfix/smtpd[8260]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-13T23:07:19.160783mail01 postfix/smtpd[14986]: warning: unknown[46.38.144.202]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-14 06:19:27
27.0.61.98	attackspambots	Automatic report - Banned IP Access	2019-11-14 06:36:00
183.237.131.157	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-11-14 06:19:50
45.82.34.30	attackbotsspam	Nov 13 15:42:19 server postfix/smtpd[22312]: NOQUEUE: reject: RCPT from silent.geomaticvista.com[45.82.34.30]: 554 5.7.1 Service unavailable; Client host [45.82.34.30] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2019-11-14 06:27:47
37.32.10.12	attackspam	Honeypot attack, port: 23, PTR: PTR record not found	2019-11-14 06:00:16
111.38.82.64	attack	port scan and connect, tcp 23 (telnet)	2019-11-14 06:01:11
139.190.56.141	attack	Honeypot attack, port: 445, PTR: PTR record not found	2019-11-14 06:09:18

最近上报的IP列表

107.175.96.132	132.96.152.89	202.57.46.242	189.6.173.152
190.7.128.74	55.122.172.246	56.122.5.67	185.116.21.6
198.79.230.247	202.86.167.74	165.21.69.247	254.131.117.198
152.36.118.90	197.210.135.139	80.17.52.208	119.18.153.154
202.80.228.67	179.11.221.255	202.80.192.204	54.39.187.138