113.199.6.36 - IPInfo

基本信息:

城市(city): Seongnam-si

省份(region): Gyeonggi-do

国家(country): South Korea

运营商(isp): ABN

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-06-30 07:13:57

相同子网IP讨论:

IP	类型	评论内容	时间
113.199.64.31	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/113.199.64.31/ KR - 1H : (66) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN17608 IP : 113.199.64.31 CIDR : 113.199.64.0/21 PREFIX COUNT : 70 UNIQUE IP COUNT : 143360 WYKRYTE ATAKI Z ASN17608 : 1H - 1 3H - 1 6H - 2 12H - 2 24H - 2 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery	2019-09-16 23:06:50

类型

评论内容

时间

113.199.64.31

attackspam

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/113.199.64.31/ 
 KR - 1H : (66)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KR 
 NAME ASN : ASN17608 
 
 IP : 113.199.64.31 
 
 CIDR : 113.199.64.0/21 
 
 PREFIX COUNT : 70 
 
 UNIQUE IP COUNT : 143360 
 
 
 WYKRYTE ATAKI Z ASN17608 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 2 
 24H - 2 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery

2019-09-16 23:06:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.199.6.36
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12347
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.199.6.36.			IN	A

;; AUTHORITY SECTION:
.			440	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062901 1800 900 604800 86400

;; Query time: 284 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 30 07:13:52 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 36.6.199.113.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 36.6.199.113.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
54.37.66.73	attack	Jul 20 05:23:23 SilenceServices sshd[14173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.66.73 Jul 20 05:23:25 SilenceServices sshd[14173]: Failed password for invalid user mrx from 54.37.66.73 port 47881 ssh2 Jul 20 05:27:56 SilenceServices sshd[17276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.66.73	2019-07-20 11:37:35
185.222.211.234	attackspam	postfix-gen jail [dl]	2019-07-20 11:53:36
206.189.208.157	attack	MagicSpam Rule: block_rbl_lists (b.barracudacentral.org); Spammer IP: 206.189.208.157	2019-07-20 11:47:36
185.254.122.102	attackspam	Port scan on 13 port(s): 2270 3030 9912 9995 10002 13391 33387 33390 33929 39999 42424 59999 65000	2019-07-20 11:41:21
185.222.211.246	attackbots	Jul 20 04:59:54 relay postfix/smtpd\[3956\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.246\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 20 04:59:54 relay postfix/smtpd\[3956\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.246\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 20 04:59:54 relay postfix/smtpd\[3956\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.246\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\ Jul 20 04:59:54 relay postfix/smtpd\[3956\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.246\]: 554 5.7.1 \: Relay access denied\; from=\	2019-07-20 11:49:40
213.25.134.96	attackspam	Honeypot attack, port: 23, PTR: komp213.25.134.96.uninet.net.pl.	2019-07-20 12:19:28
177.37.199.46	attackspam	Automatic report - Port Scan Attack	2019-07-20 11:40:36
5.13.174.189	attackspam	Automatic report - Port Scan Attack	2019-07-20 11:34:41
37.59.104.76	attackbotsspam	Jul 20 05:46:58 v22018076622670303 sshd\[6669\]: Invalid user oliver from 37.59.104.76 port 37074 Jul 20 05:46:58 v22018076622670303 sshd\[6669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.104.76 Jul 20 05:47:00 v22018076622670303 sshd\[6669\]: Failed password for invalid user oliver from 37.59.104.76 port 37074 ssh2 ...	2019-07-20 12:24:36
184.105.139.70	attackspam	Automatic report - Port Scan Attack	2019-07-20 12:21:25
104.248.174.126	attack	2019-07-20T03:23:39.517444abusebot-7.cloudsearch.cf sshd\[27657\]: Invalid user jean from 104.248.174.126 port 37689	2019-07-20 11:31:35
188.6.50.177	attackbots	Jul 20 04:12:34 localhost sshd\[75451\]: Invalid user sad from 188.6.50.177 port 49307 Jul 20 04:12:34 localhost sshd\[75451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.6.50.177 Jul 20 04:12:36 localhost sshd\[75451\]: Failed password for invalid user sad from 188.6.50.177 port 49307 ssh2 Jul 20 04:21:39 localhost sshd\[75752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.6.50.177 user=root Jul 20 04:21:41 localhost sshd\[75752\]: Failed password for root from 188.6.50.177 port 49426 ssh2 ...	2019-07-20 12:32:15
182.254.146.167	attack	Jul 20 06:16:54 server01 sshd\[28139\]: Invalid user prios from 182.254.146.167 Jul 20 06:16:54 server01 sshd\[28139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.146.167 Jul 20 06:16:56 server01 sshd\[28139\]: Failed password for invalid user prios from 182.254.146.167 port 34690 ssh2 ...	2019-07-20 11:39:48
190.85.203.254	attack	2019-07-20T06:33:06.938375centos sshd\[23748\]: Invalid user vampire from 190.85.203.254 port 48780 2019-07-20T06:33:06.943118centos sshd\[23748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.203.254 2019-07-20T06:33:08.925662centos sshd\[23748\]: Failed password for invalid user vampire from 190.85.203.254 port 48780 ssh2	2019-07-20 12:34:57
159.89.31.136	attackbots	MagicSpam Rule: block_rbl_lists (spam.spamrats.com); Spammer IP: 159.89.31.136	2019-07-20 12:00:25

最近上报的IP列表

223.6.69.86	35.129.47.81	220.49.52.192	111.30.248.117
119.133.149.254	98.98.89.166	105.253.9.12	74.75.106.235
2.181.167.72	171.239.142.63	3.139.204.9	41.109.71.154
65.45.153.108	176.99.14.124	84.16.120.130	24.238.106.49
132.205.244.189	173.120.57.206	76.174.94.75	221.44.93.61