111.94.116.31 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): PT. First Media TBK

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Brute forcing Wordpress login	2019-06-24 23:05:01

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.94.116.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59738
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;111.94.116.31.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 24 23:04:43 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

31.116.94.111.in-addr.arpa domain name pointer fm-dyn-111-94-116-31.fast.net.id.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
31.116.94.111.in-addr.arpa	name = fm-dyn-111-94-116-31.fast.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
118.25.39.110	attackbots	2020-06-30T10:52:49.580562server.espacesoutien.com sshd[27783]: Invalid user www-data from 118.25.39.110 port 39360 2020-06-30T10:52:49.595904server.espacesoutien.com sshd[27783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.39.110 2020-06-30T10:52:49.580562server.espacesoutien.com sshd[27783]: Invalid user www-data from 118.25.39.110 port 39360 2020-06-30T10:52:51.745263server.espacesoutien.com sshd[27783]: Failed password for invalid user www-data from 118.25.39.110 port 39360 ssh2 ...	2020-07-02 04:33:30
185.22.142.197	attack	Jul 1 01:24:55 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:24:57 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:25:19 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 180 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:30:31 relay dovecot: imap-login: Disconnected: Inactivity $auth failed, 1 attempts in 181 secs$: user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 1 01:30:32 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-07-02 05:11:44
45.95.168.228	attackbots	DATE:2020-06-30 20:10:29, IP:45.95.168.228, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-07-02 05:03:18
83.233.120.250	attackspambots	$f2bV_matches	2020-07-02 04:44:22
87.121.77.137	attack	Jul 1 01:29:18 mail sshd\[26459\]: Invalid user ubnt from 87.121.77.137 Jul 1 01:29:18 mail sshd\[26459\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.121.77.137 Jul 1 01:29:20 mail sshd\[26459\]: Failed password for invalid user ubnt from 87.121.77.137 port 60483 ssh2	2020-07-02 05:14:22
81.12.72.68	attackbotsspam	Unauthorized connection attempt from IP address 81.12.72.68 on Port 445(SMB)	2020-07-02 04:54:23
94.176.165.13	attackbotsspam	(Jun 30) LEN=48 TOS=0x08 PREC=0x20 TTL=120 ID=1953 DF TCP DPT=445 WINDOW=8192 SYN (Jun 30) LEN=52 TOS=0x08 PREC=0x20 TTL=120 ID=27432 DF TCP DPT=445 WINDOW=8192 SYN (Jun 30) LEN=52 PREC=0x20 TTL=119 ID=16476 DF TCP DPT=445 WINDOW=8192 SYN (Jun 29) LEN=52 PREC=0x20 TTL=119 ID=23313 DF TCP DPT=445 WINDOW=8192 SYN (Jun 29) LEN=52 TOS=0x08 PREC=0x20 TTL=120 ID=7864 DF TCP DPT=445 WINDOW=8192 SYN (Jun 29) LEN=52 PREC=0x20 TTL=119 ID=31951 DF TCP DPT=445 WINDOW=8192 SYN (Jun 28) LEN=52 PREC=0x20 TTL=119 ID=10201 DF TCP DPT=445 WINDOW=8192 SYN (Jun 28) LEN=52 PREC=0x20 TTL=119 ID=28731 DF TCP DPT=445 WINDOW=8192 SYN (Jun 28) LEN=48 PREC=0x20 TTL=119 ID=1984 DF TCP DPT=445 WINDOW=8192 SYN	2020-07-02 04:47:06
199.249.230.148	attackspam	Unauthorized connection attempt detected from IP address 199.249.230.148 to port 80	2020-07-02 05:19:19
23.105.215.254	attackbots	SSH Brute-Force. Ports scanning.	2020-07-02 05:10:39
151.253.125.136	attackbotsspam	Jul 1 01:30:00 plex sshd[19920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.253.125.136 user=root Jul 1 01:30:02 plex sshd[19920]: Failed password for root from 151.253.125.136 port 60214 ssh2	2020-07-02 05:10:57
180.167.195.167	attackspambots	SSH Invalid Login	2020-07-02 04:49:51
138.197.189.136	attackbotsspam	Jul 1 00:44:25 OPSO sshd\[18280\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136 user=root Jul 1 00:44:27 OPSO sshd\[18280\]: Failed password for root from 138.197.189.136 port 45964 ssh2 Jul 1 00:47:22 OPSO sshd\[18892\]: Invalid user ubuntu from 138.197.189.136 port 43096 Jul 1 00:47:22 OPSO sshd\[18892\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.136 Jul 1 00:47:23 OPSO sshd\[18892\]: Failed password for invalid user ubuntu from 138.197.189.136 port 43096 ssh2	2020-07-02 04:35:52
51.68.11.231	attackbots	51.68.11.231 - - [30/Jun/2020:04:54:22 +0000] "GET /newsleter.php.suspected HTTP/1.1" 404 221 "http://site.ru" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4"	2020-07-02 05:33:01
188.166.6.130	attack	939. On Jun 30 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 188.166.6.130.	2020-07-02 05:19:31
35.201.138.19	attack	Jun 30 16:59:47 pi sshd[4771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.201.138.19 Jun 30 16:59:50 pi sshd[4771]: Failed password for invalid user ftp from 35.201.138.19 port 59222 ssh2	2020-07-02 05:16:53

最近上报的IP列表

55.135.63.168	195.135.84.45	207.30.53.166	58.221.127.139
139.210.1.128	240e:360:c202:be:215:5d05:1f58:235	137.33.207.97	209.108.121.169
191.53.106.21	107.192.28.126	196.27.135.255	109.23.62.136
114.231.27.62	31.244.184.217	192.87.206.197	94.4.175.2
24.146.172.220	89.53.117.84	149.17.50.165	124.137.120.65