114.239.17.157

Basic Info

City: Suqian

Region: Jiangsu

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
114.239.172.110	attack	Unauthorized connection attempt detected from IP address 114.239.172.110 to port 6656 [T]	2020-01-30 06:24:57
114.239.172.254	attack	Unauthorized connection attempt detected from IP address 114.239.172.254 to port 6656 [T]	2020-01-27 05:10:15
114.239.178.241	attackbotsspam	unauthorized connection attempt	2020-01-22 15:09:39
114.239.174.93	attackbots	Unauthorized connection attempt detected from IP address 114.239.174.93 to port 80 [T]	2020-01-09 02:39:29
114.239.177.104	attackspambots	Netgear DGN Device Remote Command Execution Vulnerability	2019-12-05 02:03:35
114.239.172.65	attackbotsspam	Port Scan: TCP/25	2019-09-25 09:21:48
114.239.172.65	attackspam	Port Scan: TCP/25	2019-09-20 21:25:30
114.239.177.20	attackbotsspam	Brute force attempt	2019-08-03 06:55:37
114.239.174.26	attackspam	" "	2019-07-06 14:49:19
114.239.172.60	attack	Forbidden directory scan :: 2019/07/06 13:52:20 [error] 1120#1120: *3008 access forbidden by rule, client: 114.239.172.60, server: [censored_1], request: "GET /.../exchange-2010-disconnected-mailbox-not-appearing HTTP/1.1", host: "www.[censored_1]"	2019-07-06 13:36:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.239.17.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29798
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.239.17.157.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041702 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 18 06:15:05 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 157.17.239.114.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.17.239.114.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
157.245.117.187	attack	157.245.117.187 Multiple Bad Request error 400...	2020-09-11 02:31:33
177.137.96.14	attack	Unauthorized connection attempt from IP address 177.137.96.14 on Port 445(SMB)	2020-09-11 02:05:02
117.242.147.93	attack	Sep 9 18:42:56 xeon cyrus/imaps[34233]: badlogin: [117.242.147.93] plaintext szabo.abel@taylor.hu SASL(-13): authentication failure: checkpass failed	2020-09-11 01:55:48
89.248.168.108	attack	Sep 9 20:43:57 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session=<6RN01eWuruBZ+Khs> Sep 10 18:13:09 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session= Sep 10 18:45:27 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session= Sep 10 19:18:11 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session= Sep 10 19:51:05 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=89.248.168.108, lip=144.91.77.193, session=	2020-09-11 02:16:44
49.235.136.49	attackbotsspam	Sep 10 09:24:38 dignus sshd[32395]: Invalid user 1922 from 49.235.136.49 port 49434 Sep 10 09:24:38 dignus sshd[32395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.136.49 Sep 10 09:24:40 dignus sshd[32395]: Failed password for invalid user 1922 from 49.235.136.49 port 49434 ssh2 Sep 10 09:26:09 dignus sshd[32533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.136.49 user=root Sep 10 09:26:11 dignus sshd[32533]: Failed password for root from 49.235.136.49 port 36400 ssh2 ...	2020-09-11 02:32:52
34.95.129.29	attackspambots	34.95.129.29 - - [10/Sep/2020:15:28:14 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-11 02:25:48
94.43.81.75	attackspam	Icarus honeypot on github	2020-09-11 02:17:53
89.100.106.42	attackbots	Failed password for invalid user chase from 89.100.106.42 port 50138 ssh2	2020-09-11 02:13:57
213.32.91.71	attackspambots	WordPress wp-login brute force :: 213.32.91.71 0.100 - [10/Sep/2020:17:27:30 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 2414 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2020-09-11 01:59:14
2607:5300:203:d86::	attackbotsspam	xmlrpc attack	2020-09-11 02:18:08
43.229.153.13	attackbotsspam	43.229.153.13 (HK/Hong Kong/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 10 08:43:24 server2 sshd[2541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.156 user=root Sep 10 08:43:27 server2 sshd[2541]: Failed password for root from 188.166.251.156 port 32866 ssh2 Sep 10 08:43:54 server2 sshd[2620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.229.153.13 user=root Sep 10 08:43:31 server2 sshd[2595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.189.117.121 user=root Sep 10 08:43:33 server2 sshd[2595]: Failed password for root from 90.189.117.121 port 54692 ssh2 Sep 10 08:41:37 server2 sshd[1651]: Failed password for root from 91.134.240.130 port 42668 ssh2 IP Addresses Blocked: 188.166.251.156 (SG/Singapore/-)	2020-09-11 01:58:48
82.65.23.62	attack	Failed password for invalid user karolina from 82.65.23.62 port 57136 ssh2	2020-09-11 01:52:26
74.120.14.35	attack	Attempts against Pop3/IMAP	2020-09-11 01:58:25
139.59.25.135	attackspambots	139.59.25.135 Multiple Bad Request error 400...	2020-09-11 02:07:58
14.207.43.165	attackspambots	TCP (SYN) 14.207.43.165:6483 -> port 2323, len 44	2020-09-11 01:57:02

Recently Reported IPs

189.58.130.213	173.114.50.184	76.254.206.121	202.99.246.65
103.247.183.24	173.30.7.224	58.240.130.162	137.229.69.88
110.164.35.55	175.52.58.232	82.170.19.130	89.89.174.240
85.12.209.73	47.58.108.82	115.216.59.131	68.64.122.203
94.191.105.232	52.20.143.239	177.80.229.72	187.53.127.16