114.112.72.130

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Beijing Capitalonline Data Service Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	TCP (SYN) 114.112.72.130:28991 -> port 23, len 44	2020-09-16 21:36:57
attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-09-16 14:06:57
attack	TCP (SYN) 114.112.72.130:42573 -> port 23, len 44	2020-09-16 05:53:53
attack	TCP (SYN) 114.112.72.130:44766 -> port 23, len 44	2020-07-14 06:54:49
attack	Jun 22 09:31:48 debian-2gb-nbg1-2 kernel: \[15069784.811760\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=114.112.72.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=50966 PROTO=TCP SPT=61250 DPT=23 WINDOW=28981 RES=0x00 SYN URGP=0	2020-06-22 19:30:29
attack	trying to access non-authorized port	2020-04-25 04:51:33
attack	Telnet Server BruteForce Attack	2020-04-09 15:50:08
attack	Fail2Ban Ban Triggered	2020-02-12 14:18:01
attack	firewall-block, port(s): 23/tcp	2020-02-05 05:28:19
attack	unauthorized connection attempt	2020-01-13 16:46:50
attackspam	firewall-block, port(s): 23/tcp	2020-01-08 21:59:03
attack	firewall-block, port(s): 23/tcp	2019-12-29 16:16:28

相同子网IP讨论:

IP	类型	评论内容	时间
114.112.72.133	attack	5555/tcp 23/tcp... [2019-05-05/06-26]10pkt,3pt.(tcp)	2019-06-27 01:27:19

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.112.72.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51199
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.112.72.130.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050801 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu May 09 08:57:38 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 130.72.112.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 130.72.112.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
180.66.207.67	attackspambots	$f2bV_matches	2020-06-26 01:01:49
211.108.69.103	attackspambots	B: Abusive ssh attack	2020-06-26 01:01:19
176.31.252.148	attack	Jun 25 14:11:08 django-0 sshd[19043]: Invalid user sw from 176.31.252.148 ...	2020-06-26 00:51:53
51.38.238.165	attack	Jun 25 14:24:13 pornomens sshd\[28269\]: Invalid user hari from 51.38.238.165 port 45756 Jun 25 14:24:13 pornomens sshd\[28269\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.165 Jun 25 14:24:16 pornomens sshd\[28269\]: Failed password for invalid user hari from 51.38.238.165 port 45756 ssh2 ...	2020-06-26 01:05:40
133.130.119.178	attackbotsspam	Jun 25 14:10:26 vps sshd[4330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.119.178 Jun 25 14:10:28 vps sshd[4330]: Failed password for invalid user migrate from 133.130.119.178 port 13315 ssh2 Jun 25 14:24:21 vps sshd[5110]: Failed password for root from 133.130.119.178 port 17981 ssh2 ...	2020-06-26 00:57:30
223.206.184.212	attack	Automatic report - Port Scan Attack	2020-06-26 01:06:14
104.211.5.175	attackbots	Lines containing failures of 104.211.5.175 Jun 24 18:12:19 keyhelp sshd[12893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.5.175 user=r.r Jun 24 18:12:19 keyhelp sshd[12895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.5.175 user=r.r Jun 24 18:12:21 keyhelp sshd[12893]: Failed password for r.r from 104.211.5.175 port 37072 ssh2 Jun 24 18:12:21 keyhelp sshd[12893]: Received disconnect from 104.211.5.175 port 37072:11: Client disconnecting normally [preauth] Jun 24 18:12:21 keyhelp sshd[12893]: Disconnected from authenticating user r.r 104.211.5.175 port 37072 [preauth] Jun 24 18:12:21 keyhelp sshd[12895]: Failed password for r.r from 104.211.5.175 port 37151 ssh2 Jun 24 18:12:21 keyhelp sshd[12895]: Received disconnect from 104.211.5.175 port 37151:11: Client disconnecting normally [preauth] Jun 24 18:12:21 keyhelp sshd[12895]: Disconnected from authenticating user r........ ------------------------------	2020-06-26 00:58:31
46.38.145.247	attack	2020-06-25T09:45:10.689773linuxbox-skyline auth[201424]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=m200b311 rhost=46.38.145.247 ...	2020-06-26 00:36:10
191.232.169.189	attack	SSH BruteForce Attack	2020-06-26 00:46:48
157.55.39.137	attackbots	Automatic report - Banned IP Access	2020-06-26 00:50:37
46.182.6.77	attack	Jun 25 14:24:38 melroy-server sshd[30126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.182.6.77 Jun 25 14:24:40 melroy-server sshd[30126]: Failed password for invalid user sdtdserver from 46.182.6.77 port 37914 ssh2 ...	2020-06-26 00:46:23
111.231.87.245	attackbots	no	2020-06-26 01:03:51
65.78.99.127	attack	fail2ban	2020-06-26 01:08:05
109.24.144.69	attack	Jun 25 17:20:00 vmd17057 sshd[9405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.24.144.69 Jun 25 17:20:02 vmd17057 sshd[9405]: Failed password for invalid user spam from 109.24.144.69 port 51824 ssh2 ...	2020-06-26 00:48:06
206.189.88.253	attack	[ssh] SSH attack	2020-06-26 00:49:07

最近上报的IP列表

96.9.86.228	253.162.157.4	228.141.170.253	89.22.130.54
200.192.236.71	32.30.69.103	95.168.96.42	81.213.150.212
255.137.252.55	88.147.142.103	5.196.125.42	212.54.45.123
185.81.157.201	68.183.183.18	37.49.224.189	173.230.251.234
129.205.158.203	43.248.24.157	77.73.70.103	71.34.149.153