112.16.7.94 - IPInfo

基本信息:

城市(city): Wenzhou

省份(region): Zhejiang

国家(country): China

运营商(isp): China Mobile Communications Corporation

主机名(hostname): unknown

机构(organization): China Mobile communications corporation

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	port scan and connect, tcp 23 (telnet)	2019-07-31 17:49:00

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.16.7.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51725
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.16.7.94.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050401 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun May 05 02:59:10 +08 2019
;; MSG SIZE  rcvd: 115

HOST信息:

Host 94.7.16.112.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.3, trying next server
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 94.7.16.112.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
93.131.70.79	attackspam	Nov 3 06:47:39 server1 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\ Nov 3 06:47:39 server1 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\ Nov 3 06:47:39 server1 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\ Nov 3 06:47:39 server1 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\ Nov 3 06:47:45 server1 dovecot: imap-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, ses	2019-11-03 19:55:08
163.172.93.133	attackspam	Nov 2 20:44:15 web9 sshd\[30398\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.93.133 user=root Nov 2 20:44:18 web9 sshd\[30398\]: Failed password for root from 163.172.93.133 port 35390 ssh2 Nov 2 20:48:03 web9 sshd\[30960\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.93.133 user=root Nov 2 20:48:05 web9 sshd\[30960\]: Failed password for root from 163.172.93.133 port 44690 ssh2 Nov 2 20:51:53 web9 sshd\[31493\]: Invalid user user1 from 163.172.93.133 Nov 2 20:51:53 web9 sshd\[31493\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.93.133	2019-11-03 20:09:11
123.206.13.46	attackbotsspam	2019-11-03T10:06:06.253121struts4.enskede.local sshd\[7035\]: Invalid user liang from 123.206.13.46 port 37828 2019-11-03T10:06:06.262161struts4.enskede.local sshd\[7035\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.13.46 2019-11-03T10:06:09.482856struts4.enskede.local sshd\[7035\]: Failed password for invalid user liang from 123.206.13.46 port 37828 ssh2 2019-11-03T10:15:26.471806struts4.enskede.local sshd\[7076\]: Invalid user gitadmin from 123.206.13.46 port 48108 2019-11-03T10:15:26.479372struts4.enskede.local sshd\[7076\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.13.46 ...	2019-11-03 20:38:42
195.159.103.189	attackspambots	Nov 2 19:42:15 hanapaa sshd\[29693\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-159-103-189.customer.powertech.no user=root Nov 2 19:42:17 hanapaa sshd\[29693\]: Failed password for root from 195.159.103.189 port 44562 ssh2 Nov 2 19:47:27 hanapaa sshd\[30090\]: Invalid user biz from 195.159.103.189 Nov 2 19:47:27 hanapaa sshd\[30090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195-159-103-189.customer.powertech.no Nov 2 19:47:29 hanapaa sshd\[30090\]: Failed password for invalid user biz from 195.159.103.189 port 54576 ssh2	2019-11-03 20:06:34
188.166.42.50	attackspam	2019-11-03T13:15:12.005558mail01 postfix/smtpd[25831]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-03T13:17:52.085123mail01 postfix/smtpd[14312]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-03T13:22:51.311953mail01 postfix/smtpd[4068]: warning: unknown[188.166.42.50]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-03 20:30:36
86.120.62.75	attack	/editBlackAndWhiteList	2019-11-03 19:56:05
123.16.154.55	attackbots	port scan and connect, tcp 22 (ssh)	2019-11-03 20:07:06
178.69.88.37	attackspambots	Nov 3 05:47:09 venus sshd\[30760\]: Invalid user admin from 178.69.88.37 port 48016 Nov 3 05:47:09 venus sshd\[30760\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.69.88.37 Nov 3 05:47:11 venus sshd\[30760\]: Failed password for invalid user admin from 178.69.88.37 port 48016 ssh2 ...	2019-11-03 20:17:04
110.137.179.197	attack	Unauthorised access (Nov 3) SRC=110.137.179.197 LEN=52 TTL=116 ID=11145 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-03 19:59:46
63.80.88.197	attackspambots	2019-11-03T06:34:29.932791stark.klein-stark.info postfix/smtpd\[5553\]: NOQUEUE: reject: RCPT from shallow.nabhaa.com\[63.80.88.197\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ 2019-11-03T06:46:23.217152stark.klein-stark.info postfix/smtpd\[6230\]: NOQUEUE: reject: RCPT from shallow.nabhaa.com\[63.80.88.197\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ ...	2019-11-03 20:34:31
103.75.103.211	attack	Nov 3 13:19:24 rotator sshd\[11919\]: Invalid user qqqqqqq from 103.75.103.211Nov 3 13:19:26 rotator sshd\[11919\]: Failed password for invalid user qqqqqqq from 103.75.103.211 port 33244 ssh2Nov 3 13:23:46 rotator sshd\[12696\]: Invalid user tosoigoceebatse from 103.75.103.211Nov 3 13:23:48 rotator sshd\[12696\]: Failed password for invalid user tosoigoceebatse from 103.75.103.211 port 42102 ssh2Nov 3 13:28:03 rotator sshd\[13473\]: Invalid user !@\#QWE123qwe from 103.75.103.211Nov 3 13:28:05 rotator sshd\[13473\]: Failed password for invalid user !@\#QWE123qwe from 103.75.103.211 port 50960 ssh2 ...	2019-11-03 20:32:20
217.182.196.178	attack	$f2bV_matches	2019-11-03 20:35:01
51.158.74.228	attackspambots	Nov 3 11:46:19 microserver sshd[38035]: Invalid user ts from 51.158.74.228 port 35570 Nov 3 11:46:19 microserver sshd[38035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.228 Nov 3 11:46:20 microserver sshd[38035]: Failed password for invalid user ts from 51.158.74.228 port 35570 ssh2 Nov 3 11:47:41 microserver sshd[38108]: Invalid user ts from 51.158.74.228 port 40048 Nov 3 11:47:41 microserver sshd[38108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.228 Nov 3 11:58:30 microserver sshd[39472]: Invalid user web from 51.158.74.228 port 47766 Nov 3 11:58:30 microserver sshd[39472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.228 Nov 3 11:58:32 microserver sshd[39472]: Failed password for invalid user web from 51.158.74.228 port 47766 ssh2 Nov 3 11:59:48 microserver sshd[39525]: Invalid user web from 51.158.74.228 port 52250 Nov 3 11:59:48 micr	2019-11-03 20:21:27
219.90.115.237	attackbotsspam	Nov 3 19:20:51 itv-usvr-01 sshd[26186]: Invalid user flavio from 219.90.115.237 Nov 3 19:20:51 itv-usvr-01 sshd[26186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.90.115.237 Nov 3 19:20:51 itv-usvr-01 sshd[26186]: Invalid user flavio from 219.90.115.237 Nov 3 19:20:54 itv-usvr-01 sshd[26186]: Failed password for invalid user flavio from 219.90.115.237 port 58840 ssh2 Nov 3 19:24:27 itv-usvr-01 sshd[26341]: Invalid user sysadmin from 219.90.115.237	2019-11-03 20:25:27
165.227.154.59	attack	Invalid user toker from 165.227.154.59 port 50856	2019-11-03 20:12:24

最近上报的IP列表

129.225.213.109	106.129.250.207	113.34.204.171	74.113.236.119
190.115.18.183	166.129.24.216	181.99.132.213	152.20.36.75
212.30.52.243	162.131.0.14	241.55.25.66	110.159.206.17
186.183.72.203	118.145.145.63	28.239.72.83	165.22.243.33
71.227.54.243	190.2.111.218	103.71.48.232	46.119.28.75