112.66.104.82 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
112.66.104.41	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410875db8eeeb29 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:36:01

类型

评论内容

时间

112.66.104.41

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5410875db8eeeb29 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:36:01

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.104.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.104.82.			IN	A

;; AUTHORITY SECTION:
.			221	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:32:07 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 82.104.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 82.104.66.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
2002:b9ea:d8ce::b9ea:d8ce	attackbotsspam	Apr 25 07:42:06 web01.agentur-b-2.de postfix/smtpd[938913]: warning: unknown[2002:b9ea:d8ce::b9ea:d8ce]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 07:42:06 web01.agentur-b-2.de postfix/smtpd[938913]: lost connection after AUTH from unknown[2002:b9ea:d8ce::b9ea:d8ce] Apr 25 07:44:17 web01.agentur-b-2.de postfix/smtpd[942519]: warning: unknown[2002:b9ea:d8ce::b9ea:d8ce]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 07:44:17 web01.agentur-b-2.de postfix/smtpd[942519]: lost connection after AUTH from unknown[2002:b9ea:d8ce::b9ea:d8ce] Apr 25 07:46:45 web01.agentur-b-2.de postfix/smtpd[938916]: warning: unknown[2002:b9ea:d8ce::b9ea:d8ce]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 07:46:45 web01.agentur-b-2.de postfix/smtpd[938916]: lost connection after AUTH from unknown[2002:b9ea:d8ce::b9ea:d8ce]	2020-04-25 14:09:11
103.120.224.222	attack	Apr 25 05:56:40 ArkNodeAT sshd\[25458\]: Invalid user slider from 103.120.224.222 Apr 25 05:56:40 ArkNodeAT sshd\[25458\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.120.224.222 Apr 25 05:56:41 ArkNodeAT sshd\[25458\]: Failed password for invalid user slider from 103.120.224.222 port 47248 ssh2	2020-04-25 14:15:46
61.244.206.38	attack	20/4/24@23:56:37: FAIL: Alarm-Network address from=61.244.206.38 20/4/24@23:56:37: FAIL: Alarm-Network address from=61.244.206.38 ...	2020-04-25 14:18:59
125.208.26.42	attackspam	$f2bV_matches	2020-04-25 14:29:15
91.197.77.148	attackspam	Apr 25 08:27:01 nextcloud sshd\[25858\]: Invalid user rose from 91.197.77.148 Apr 25 08:27:01 nextcloud sshd\[25858\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.197.77.148 Apr 25 08:27:02 nextcloud sshd\[25858\]: Failed password for invalid user rose from 91.197.77.148 port 50482 ssh2	2020-04-25 14:32:44
216.127.164.144	attackbots	Apr 25 03:52:08 game-panel sshd[27227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.127.164.144 Apr 25 03:52:11 game-panel sshd[27227]: Failed password for invalid user monitoring123 from 216.127.164.144 port 57316 ssh2 Apr 25 03:56:24 game-panel sshd[27394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.127.164.144	2020-04-25 14:27:21
128.199.197.161	attackspam	Apr 25 07:44:15 srv01 sshd[14580]: Invalid user tomcat from 128.199.197.161 port 44976 Apr 25 07:44:15 srv01 sshd[14580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.197.161 Apr 25 07:44:15 srv01 sshd[14580]: Invalid user tomcat from 128.199.197.161 port 44976 Apr 25 07:44:17 srv01 sshd[14580]: Failed password for invalid user tomcat from 128.199.197.161 port 44976 ssh2 Apr 25 07:48:22 srv01 sshd[14790]: Invalid user admin from 128.199.197.161 port 48646 ...	2020-04-25 14:28:50
197.157.254.34	attackspam	Apr 25 05:56:12 web01.agentur-b-2.de postfix/smtpd[923801]: NOQUEUE: reject: RCPT from unknown[197.157.254.34]: 554 5.7.1 Service unavailable; Client host [197.157.254.34] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.157.254.34 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to=<2c.thomssen@rhythm-and-arts.de> proto=ESMTP helo=<042.ru> Apr 25 05:56:12 web01.agentur-b-2.de postfix/smtpd[923801]: NOQUEUE: reject: RCPT from unknown[197.157.254.34]: 554 5.7.1 Service unavailable; Client host [197.157.254.34] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.157.254.34 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to=<3c.thomssen@rhythm-and-arts.de> proto=ESMTP helo=<042.ru> Apr 25 05:56:12 web01.agentur-b-2.de postfix/smtpd[923801]: NOQUEUE: reject: RCPT from unknown[197.157.254.34]: 554 5.7.1 Service unavailable; Client host [197.157.254.34] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.157.254.34 / http	2020-04-25 13:58:21
78.128.113.99	attack	Apr 25 07:37:49 mail.srvfarm.net postfix/smtpd[888612]: warning: unknown[78.128.113.99]: SASL PLAIN authentication failed: Apr 25 07:37:49 mail.srvfarm.net postfix/smtps/smtpd[891313]: lost connection after CONNECT from unknown[78.128.113.99] Apr 25 07:37:50 mail.srvfarm.net postfix/smtpd[888612]: lost connection after AUTH from unknown[78.128.113.99] Apr 25 07:37:53 mail.srvfarm.net postfix/smtps/smtpd[890609]: lost connection after AUTH from unknown[78.128.113.99] Apr 25 07:37:58 mail.srvfarm.net postfix/smtps/smtpd[891316]: lost connection after CONNECT from unknown[78.128.113.99] Apr 25 07:37:58 mail.srvfarm.net postfix/smtps/smtpd[891308]: lost connection after AUTH from unknown[78.128.113.99]	2020-04-25 14:03:40
59.26.23.148	attackspambots	Apr 25 07:41:00 srv-ubuntu-dev3 sshd[57659]: Invalid user jts3 from 59.26.23.148 Apr 25 07:41:00 srv-ubuntu-dev3 sshd[57659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.26.23.148 Apr 25 07:41:00 srv-ubuntu-dev3 sshd[57659]: Invalid user jts3 from 59.26.23.148 Apr 25 07:41:02 srv-ubuntu-dev3 sshd[57659]: Failed password for invalid user jts3 from 59.26.23.148 port 37710 ssh2 Apr 25 07:44:15 srv-ubuntu-dev3 sshd[58206]: Invalid user crawler from 59.26.23.148 Apr 25 07:44:15 srv-ubuntu-dev3 sshd[58206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.26.23.148 Apr 25 07:44:15 srv-ubuntu-dev3 sshd[58206]: Invalid user crawler from 59.26.23.148 Apr 25 07:44:17 srv-ubuntu-dev3 sshd[58206]: Failed password for invalid user crawler from 59.26.23.148 port 59044 ssh2 Apr 25 07:47:38 srv-ubuntu-dev3 sshd[58825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.26.23 ...	2020-04-25 14:10:06
216.218.217.69	attackbots	SASL broute force	2020-04-25 14:39:02
18.178.100.123	attackbots	DATE:2020-04-25 08:09:50, IP:18.178.100.123, PORT:ssh SSH brute force auth (docker-dc)	2020-04-25 14:25:58
190.15.59.5	attack	Apr 25 01:59:52 firewall sshd[12374]: Invalid user miamor from 190.15.59.5 Apr 25 01:59:54 firewall sshd[12374]: Failed password for invalid user miamor from 190.15.59.5 port 56261 ssh2 Apr 25 02:04:23 firewall sshd[12431]: Invalid user trails from 190.15.59.5 ...	2020-04-25 14:24:27
185.234.219.105	attackspam	Apr 25 06:37:14 web01.agentur-b-2.de postfix/smtpd[929649]: lost connection after CONNECT from unknown[185.234.219.105] Apr 25 06:41:50 web01.agentur-b-2.de postfix/smtpd[929650]: warning: unknown[185.234.219.105]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 06:41:50 web01.agentur-b-2.de postfix/smtpd[929650]: lost connection after AUTH from unknown[185.234.219.105] Apr 25 06:44:30 web01.agentur-b-2.de postfix/smtpd[928928]: warning: unknown[185.234.219.105]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 25 06:44:30 web01.agentur-b-2.de postfix/smtpd[928928]: lost connection after AUTH from unknown[185.234.219.105]	2020-04-25 13:59:57
184.82.14.227	attackbots	xmlrpc attack	2020-04-25 14:30:35

最近上报的IP列表

112.66.105.139	112.66.105.160	112.66.105.154	112.66.105.164
112.66.104.22	112.66.105.193	112.66.105.227	112.66.105.218
112.66.105.176	112.66.105.239	112.66.105.30	112.66.105.248
112.66.105.242	112.66.105.62	112.66.105.81	112.66.105.33
112.66.105.65	112.66.105.83	112.66.105.252	112.66.105.180