112.86.225.102

基本信息:

城市(city): Nanjing

省份(region): Jiangsu

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '112.80.0.0 - 112.87.255.255'

% Abuse contact for '112.80.0.0 - 112.87.255.255' is 'hqs-ipabuse@chinaunicom.cn'

inetnum:        112.80.0.0 - 112.87.255.255
netname:        UNICOM-JS
descr:          China Unicom Jiangsu province network
descr:          China Unicom
country:        CN
admin-c:        CH1302-AP
tech-c:         LL58-AP
abuse-c:        AC1718-AP
status:         ALLOCATED PORTABLE
remarks:        service provider
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-CNCGROUP-JS
mnt-routes:     MAINT-CNCGROUP-RR
mnt-irt:        IRT-CU-CN
last-modified:  2025-01-22T13:12:40Z
source:         APNIC

irt:            IRT-CU-CN
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
e-mail:         hqs-ipabuse@chinaunicom.cn
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
auth:           # Filtered
mnt-by:         MAINT-CNCGROUP
last-modified:  2026-08-04T00:39:34Z
source:         APNIC

role:           ABUSE CUCN
country:        ZZ
address:        No.21,Financial Street
address:        Beijing,100033
address:        P.R.China
phone:          +000000000
e-mail:         hqs-ipabuse@chinaunicom.cn
admin-c:        CH1302-AP
tech-c:         CH1302-AP
nic-hdl:        AC1718-AP
remarks:        Generated from irt object IRT-CU-CN
abuse-mailbox:  hqs-ipabuse@chinaunicom.cn
mnt-by:         APNIC-ABUSE
last-modified:  2026-08-04T00:39:32Z
source:         APNIC

person:         ChinaUnicom Hostmaster
nic-hdl:        CH1302-AP
e-mail:         hqs-ipabuse@chinaunicom.cn
address:        No.21,Jin-Rong Street
address:        Beijing,100033
address:        P.R.China
phone:          +86-10-66259764
fax-no:         +86-10-66259764
country:        CN
mnt-by:         MAINT-CNCGROUP
last-modified:  2017-08-17T06:13:16Z
source:         APNIC

person:         Lan Li
nic-hdl:        LL58-AP
e-mail:         js-cu-ipmanage@chinaunicom.cn
address:        No. 65 Beijing West Road,Nanjing,China
phone:          +86257900060
fax-no:         +86252900280
country:        CN
mnt-by:         MAINT-NEW
last-modified:  2013-08-15T02:13:11Z
source:         APNIC

% Information related to '112.80.0.0/13AS4837'

route:          112.80.0.0/13
descr:          China Unicom CHINA169 Jiangsu Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-12-31T01:00:07Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.86.225.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42657
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.86.225.102.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026081600 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 20:13:45 CST 2026
;; MSG SIZE  rcvd: 107

HOST信息:

102.225.86.112.in-addr.arpa domain name pointer sogouspider-112-86-225-102.crawl.sogou.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
102.225.86.112.in-addr.arpa	name = sogouspider-112-86-225-102.crawl.sogou.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
128.199.80.164	attack	'Fail2Ban'	2020-09-21 03:50:41
107.174.249.108	attack	107.174.249.108 - - [19/Sep/2020:18:57:42 +0200] "GET /awstats.pl?config=register.transportscotland.gov.uk%2FSubscribe%2FWidgetSignup%3Furl%3Dhttps%3A%2F%2Fwww.linkedin.com%2Fshowcase%2Fdewapoker&lang=en&output=main HTTP/1.0" 404 280 "https://oraux.pnzone.net/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-21 03:44:21
64.225.119.100	attack	Sep 20 21:12:36 ip106 sshd[27264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.119.100 Sep 20 21:12:38 ip106 sshd[27264]: Failed password for invalid user test from 64.225.119.100 port 60812 ssh2 ...	2020-09-21 04:19:30
102.65.90.61	attackbots	Sep 20 16:01:33 roki-contabo sshd\[24714\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.65.90.61 user=root Sep 20 16:01:35 roki-contabo sshd\[24714\]: Failed password for root from 102.65.90.61 port 55900 ssh2 Sep 20 21:04:55 roki-contabo sshd\[27398\]: Invalid user admin from 102.65.90.61 Sep 20 21:04:55 roki-contabo sshd\[27398\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.65.90.61 Sep 20 21:04:57 roki-contabo sshd\[27398\]: Failed password for invalid user admin from 102.65.90.61 port 58504 ssh2 ...	2020-09-21 04:00:11
62.234.115.152	attackspambots	Lines containing failures of 62.234.115.152 Sep 19 20:34:03 nxxxxxxx sshd[917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152 user=r.r Sep 19 20:34:05 nxxxxxxx sshd[917]: Failed password for r.r from 62.234.115.152 port 51692 ssh2 Sep 19 20:34:05 nxxxxxxx sshd[917]: Received disconnect from 62.234.115.152 port 51692:11: Bye Bye [preauth] Sep 19 20:34:05 nxxxxxxx sshd[917]: Disconnected from authenticating user r.r 62.234.115.152 port 51692 [preauth] Sep 19 20:39:16 nxxxxxxx sshd[1598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152 user=r.r Sep 19 20:39:18 nxxxxxxx sshd[1598]: Failed password for r.r from 62.234.115.152 port 47858 ssh2 Sep 19 20:39:18 nxxxxxxx sshd[1598]: Received disconnect from 62.234.115.152 port 47858:11: Bye Bye [preauth] Sep 19 20:39:18 nxxxxxxx sshd[1598]: Disconnected from authenticating user r.r 62.234.115.152 port 47858 [preauth] S........ ------------------------------	2020-09-21 03:48:48
1.171.98.88	attackbots	Sep 20 19:04:01 vps639187 sshd\[29853\]: Invalid user cablecom from 1.171.98.88 port 38513 Sep 20 19:04:02 vps639187 sshd\[29853\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.171.98.88 Sep 20 19:04:04 vps639187 sshd\[29853\]: Failed password for invalid user cablecom from 1.171.98.88 port 38513 ssh2 ...	2020-09-21 04:06:16
209.141.34.104	attack	srvr2: (mod_security) mod_security (id:920350) triggered by 209.141.34.104 (US/-/-): 1 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/20 21:45:24 [error] 7235#0: 49761 [client 209.141.34.104] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "160063112458.029310"] [ref "o0,12v21,12"], client: 209.141.34.104, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-09-21 04:03:06
180.151.9.198	attackspam	Sep 20 21:14:43 pornomens sshd\[15323\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.151.9.198 user=root Sep 20 21:14:45 pornomens sshd\[15323\]: Failed password for root from 180.151.9.198 port 52954 ssh2 Sep 20 21:15:25 pornomens sshd\[15332\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.151.9.198 user=root ...	2020-09-21 04:12:30
80.15.139.251	attack	(imapd) Failed IMAP login from 80.15.139.251 (FR/France/lmontsouris-656-1-243-251.w80-15.abo.wanadoo.fr): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 20 09:34:35 ir1 dovecot[1917636]: imap-login: Disconnected (auth failed, 1 attempts in 18 secs): user=, method=PLAIN, rip=80.15.139.251, lip=5.63.12.44, TLS, session=	2020-09-21 03:51:13
106.12.28.152	attack	Sep 20 15:38:41 george sshd[7922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.28.152 Sep 20 15:38:43 george sshd[7922]: Failed password for invalid user www from 106.12.28.152 port 56776 ssh2 Sep 20 15:40:48 george sshd[8055]: Invalid user user from 106.12.28.152 port 59296 Sep 20 15:40:48 george sshd[8055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.28.152 Sep 20 15:40:50 george sshd[8055]: Failed password for invalid user user from 106.12.28.152 port 59296 ssh2 ...	2020-09-21 03:54:32
79.18.88.6	attack	(sshd) Failed SSH login from 79.18.88.6 (IT/Italy/host-79-18-88-6.retail.telecomitalia.it): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 20 13:03:53 internal2 sshd[8103]: Invalid user admin from 79.18.88.6 port 40675 Sep 20 13:03:55 internal2 sshd[8128]: Invalid user admin from 79.18.88.6 port 40731 Sep 20 13:03:57 internal2 sshd[8188]: Invalid user admin from 79.18.88.6 port 40791	2020-09-21 04:12:00
173.244.209.5	attackbotsspam	Sep 20 12:21:42 ws26vmsma01 sshd[229697]: Failed password for root from 173.244.209.5 port 56528 ssh2 Sep 20 12:21:56 ws26vmsma01 sshd[229697]: error: maximum authentication attempts exceeded for root from 173.244.209.5 port 56528 ssh2 [preauth] ...	2020-09-21 03:50:18
45.142.120.183	attackspam	Sep 20 21:28:13 srv01 postfix/smtpd\[19570\]: warning: unknown\[45.142.120.183\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 21:28:20 srv01 postfix/smtpd\[22874\]: warning: unknown\[45.142.120.183\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 21:28:22 srv01 postfix/smtpd\[24578\]: warning: unknown\[45.142.120.183\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 21:28:39 srv01 postfix/smtpd\[19570\]: warning: unknown\[45.142.120.183\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 21:28:40 srv01 postfix/smtpd\[24662\]: warning: unknown\[45.142.120.183\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-21 03:45:25
162.243.128.109	attackspam	Found on CINS badguys / proto=6 . srcport=52816 . dstport=5094 . (2348)	2020-09-21 04:15:04
54.39.209.237	attack	2020-09-19T17:27:57.128310hostname sshd[67794]: Failed password for root from 54.39.209.237 port 59144 ssh2 ...	2020-09-21 03:49:07

最近上报的IP列表

46.39.53.201	46.246.235.1	47.99.115.135	18.175.58.148
46.218.88.223	46.148.164.252	46.56.183.183	46.32.95.77
165.154.62.227	34.22.251.168	47.37.138.64	45.56.151.79
44.130.88.25	44.13.145.138	84.206.254.106	43.241.56.14
110.77.187.159	112.22.19.74	42.48.183.200	42.208.43.249