221.203.6.138 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Liaoning Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorised access (Sep 16) SRC=221.203.6.138 LEN=40 TTL=237 ID=22238 TCP DPT=1433 WINDOW=1024 SYN	2020-09-16 21:34:23
attack	Unauthorised access (Sep 16) SRC=221.203.6.138 LEN=40 TTL=237 ID=22238 TCP DPT=1433 WINDOW=1024 SYN	2020-09-16 14:04:31
attack	Auto Detect Rule! proto TCP (SYN), 221.203.6.138:42746->gjan.info:1433, len 40	2020-09-16 05:50:53

类型

评论内容

时间

attackspam

Unauthorised access (Sep 16) SRC=221.203.6.138 LEN=40 TTL=237 ID=22238 TCP DPT=1433 WINDOW=1024 SYN

2020-09-16 21:34:23

attack

Unauthorised access (Sep 16) SRC=221.203.6.138 LEN=40 TTL=237 ID=22238 TCP DPT=1433 WINDOW=1024 SYN

2020-09-16 14:04:31

attack

Auto Detect Rule!
proto TCP (SYN), 221.203.6.138:42746->gjan.info:1433, len 40

2020-09-16 05:50:53

相同子网IP讨论:

IP	类型	评论内容	时间
221.203.63.54	attackspam	Unauthorized connection attempt detected from IP address 221.203.63.54 to port 1433 [T]	2020-08-16 18:12:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.203.6.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30256
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;221.203.6.138.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091501 1800 900 604800 86400

;; Query time: 285 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 05:50:50 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 138.6.203.221.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.6.203.221.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
81.163.41.49	attackspam	A spam email was sent from this SMTP server. This kind of spam emails had the following features.: - They attempted to camouflage the SMTP server with a KDDI's legitimate server. - The domain of URLs in the messages was best-self.info (103.212.223.59).	2019-11-17 06:19:27
178.93.36.126	attack	port scan and connect, tcp 23 (telnet)	2019-11-17 05:52:16
193.82.231.28	attackbotsspam	Automatic report - Port Scan Attack	2019-11-17 06:06:30
54.37.121.239	attack	LGS,WP GET /wp-login.php	2019-11-17 06:19:01
88.99.95.219	attackspambots	SSH bruteforce (Triggered fail2ban)	2019-11-17 05:53:38
51.83.138.91	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 43 - port: 33891 proto: TCP cat: Misc Attack	2019-11-17 06:07:02
201.207.179.123	attackbots	Automatic report - Port Scan Attack	2019-11-17 05:56:10
177.38.242.45	attackbotsspam	Automatic report - Banned IP Access	2019-11-17 06:03:25
182.61.176.105	attack	Nov 16 17:54:12 venus sshd\[31294\]: Invalid user teamspeak from 182.61.176.105 port 35786 Nov 16 17:54:12 venus sshd\[31294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.176.105 Nov 16 17:54:14 venus sshd\[31294\]: Failed password for invalid user teamspeak from 182.61.176.105 port 35786 ssh2 ...	2019-11-17 05:51:43
132.145.153.124	attackbotsspam	Nov 16 17:24:41 vps647732 sshd[32764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.153.124 Nov 16 17:24:43 vps647732 sshd[32764]: Failed password for invalid user martorana from 132.145.153.124 port 61737 ssh2 ...	2019-11-17 06:24:12
151.31.48.126	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/151.31.48.126/ IT - 1H : (115) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IT NAME ASN : ASN1267 IP : 151.31.48.126 CIDR : 151.31.0.0/16 PREFIX COUNT : 161 UNIQUE IP COUNT : 6032640 ATTACKS DETECTED ASN1267 : 1H - 2 3H - 3 6H - 4 12H - 12 24H - 27 DateTime : 2019-11-16 15:44:23 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-17 06:16:15
185.175.93.17	attack	11/16/2019-17:18:20.855557 185.175.93.17 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-11-17 06:18:29
111.161.74.112	attack	Nov 16 06:55:19 web1 sshd\[18103\]: Invalid user contrasena_123 from 111.161.74.112 Nov 16 06:55:19 web1 sshd\[18103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.112 Nov 16 06:55:21 web1 sshd\[18103\]: Failed password for invalid user contrasena_123 from 111.161.74.112 port 34970 ssh2 Nov 16 07:00:09 web1 sshd\[18521\]: Invalid user goldenberg from 111.161.74.112 Nov 16 07:00:09 web1 sshd\[18521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.112	2019-11-17 05:49:50
41.214.138.178	attack	Nov 16 08:42:33 askasleikir sshd[58601]: Failed password for invalid user mysql from 41.214.138.178 port 34542 ssh2	2019-11-17 05:53:04
81.171.85.101	attackspambots	\[2019-11-16 16:44:27\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.101:60009' - Wrong password \[2019-11-16 16:44:27\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-16T16:44:27.956-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9220",SessionID="0x7fdf2c4868a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.101/60009",Challenge="7b97aa0b",ReceivedChallenge="7b97aa0b",ReceivedHash="de79b1b6a07d89c28a93ac3bc27be57c" \[2019-11-16 16:44:28\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.101:60403' - Wrong password \[2019-11-16 16:44:28\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-16T16:44:28.990-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9993",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85	2019-11-17 05:59:43

最近上报的IP列表

188.55.141.47	142.43.44.149	145.51.186.153	196.39.224.125
38.145.86.50	187.135.19.68	159.65.226.96	116.89.93.209
60.243.173.65	192.35.168.156	190.0.54.218	77.38.210.143
209.141.40.202	180.249.166.2	60.243.123.93	3.7.23.132
82.148.31.110	203.129.218.76	183.179.74.160	102.45.195.231