114.92.117.248

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shanghai Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 114.92.117.248 on Port 445(SMB)	2019-10-22 08:01:34

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.92.117.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51069
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.92.117.248.			IN	A

;; AUTHORITY SECTION:
.			541	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102101 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 22 08:01:30 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 248.117.92.114.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 248.117.92.114.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.189	attackspambots	$f2bV_matches	2019-11-08 14:02:22
54.39.187.138	attackbotsspam	Nov 7 19:32:25 hpm sshd\[17517\]: Invalid user COM from 54.39.187.138 Nov 7 19:32:25 hpm sshd\[17517\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=srv-test.faceldi.net Nov 7 19:32:28 hpm sshd\[17517\]: Failed password for invalid user COM from 54.39.187.138 port 38011 ssh2 Nov 7 19:35:36 hpm sshd\[17770\]: Invalid user fucker from 54.39.187.138 Nov 7 19:35:36 hpm sshd\[17770\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=srv-test.faceldi.net	2019-11-08 13:47:20
125.212.207.205	attackspambots	F2B jail: sshd. Time: 2019-11-08 06:09:58, Reported by: VKReport	2019-11-08 13:42:46
222.122.31.133	attackbots	Nov 8 05:29:13 web8 sshd\[19492\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.122.31.133 user=root Nov 8 05:29:16 web8 sshd\[19492\]: Failed password for root from 222.122.31.133 port 45406 ssh2 Nov 8 05:34:13 web8 sshd\[21950\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.122.31.133 user=root Nov 8 05:34:15 web8 sshd\[21950\]: Failed password for root from 222.122.31.133 port 54910 ssh2 Nov 8 05:39:11 web8 sshd\[24483\]: Invalid user andy from 222.122.31.133	2019-11-08 13:39:39
139.198.191.86	attackbots	2019-11-08T05:26:32.536291abusebot-6.cloudsearch.cf sshd\[1369\]: Invalid user hanjin from 139.198.191.86 port 43928	2019-11-08 13:33:43
80.211.67.90	attackbots	Nov 8 00:48:28 plusreed sshd[14846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.67.90 user=root Nov 8 00:48:30 plusreed sshd[14846]: Failed password for root from 80.211.67.90 port 49404 ssh2 ...	2019-11-08 13:58:55
46.38.144.57	attackbotsspam	abuse-sasl	2019-11-08 13:49:36
164.132.100.13	attack	www.geburtshaus-fulda.de 164.132.100.13 \[08/Nov/2019:06:53:11 +0100\] "POST /wp-login.php HTTP/1.1" 200 5785 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 164.132.100.13 \[08/Nov/2019:06:53:12 +0100\] "POST /wp-login.php HTTP/1.1" 200 5789 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-08 13:55:38
200.126.236.187	attackspam	Nov 8 06:36:40 markkoudstaal sshd[10975]: Failed password for root from 200.126.236.187 port 48078 ssh2 Nov 8 06:42:07 markkoudstaal sshd[11753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.126.236.187 Nov 8 06:42:09 markkoudstaal sshd[11753]: Failed password for invalid user admin from 200.126.236.187 port 38994 ssh2	2019-11-08 13:56:11
93.174.93.5	attack	Nov 8 05:50:14 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session= Nov 8 05:51:04 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session= Nov 8 05:53:32 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session= Nov 8 05:53:49 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session= Nov 8 05:54:14 host3 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.5, lip=207.180.241.50, session= ...	2019-11-08 13:35:21
139.193.35.30	attackspam	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2019-11-08 13:57:19
222.186.175.215	attackbots	Nov 8 06:21:40 root sshd[22606]: Failed password for root from 222.186.175.215 port 37670 ssh2 Nov 8 06:21:45 root sshd[22606]: Failed password for root from 222.186.175.215 port 37670 ssh2 Nov 8 06:21:49 root sshd[22606]: Failed password for root from 222.186.175.215 port 37670 ssh2 Nov 8 06:21:54 root sshd[22606]: Failed password for root from 222.186.175.215 port 37670 ssh2 ...	2019-11-08 13:32:26
117.139.166.20	attack	Nov 7 19:46:05 auw2 sshd\[19760\]: Invalid user urged from 117.139.166.20 Nov 7 19:46:05 auw2 sshd\[19760\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.20 Nov 7 19:46:08 auw2 sshd\[19760\]: Failed password for invalid user urged from 117.139.166.20 port 49725 ssh2 Nov 7 19:51:22 auw2 sshd\[20186\]: Invalid user salesg from 117.139.166.20 Nov 7 19:51:22 auw2 sshd\[20186\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.139.166.20	2019-11-08 13:53:31
118.70.233.163	attackbots	Nov 8 10:56:24 areeb-Workstation sshd[9203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.233.163 Nov 8 10:56:27 areeb-Workstation sshd[9203]: Failed password for invalid user backuptest from 118.70.233.163 port 40192 ssh2 ...	2019-11-08 13:31:59
185.17.128.158	attack	[portscan] Port scan	2019-11-08 14:00:39

Recently Reported IPs

133.169.69.118	241.107.111.82	186.122.141.51	153.17.169.11
33.98.9.74	153.180.139.160	254.231.244.17	103.254.175.52
134.207.156.168	26.104.198.69	125.139.169.66	22.139.100.56
6.120.64.67	167.59.132.195	85.117.90.4	188.17.96.233
83.236.242.17	95.181.132.140	247.193.144.59	241.124.198.220