114.86.166.63 - IPInfo

基本信息:

城市(city): Shanghai

省份(region): Shanghai

国家(country): China

运营商(isp): ChinaNet Shanghai Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 114.86.166.63 to port 81 [J]	2020-02-04 04:10:33

相同子网IP讨论:

IP	类型	评论内容	时间
114.86.166.167	attackbotsspam	Port probing on unauthorized port 8000	2020-06-06 06:49:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.86.166.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42367
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.86.166.63.			IN	A

;; AUTHORITY SECTION:
.			459	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020301 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 04:10:27 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 63.166.86.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 63.166.86.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
114.237.109.138	attackspam	Jul 12 12:40:40 elektron postfix/smtpd\[14191\]: NOQUEUE: reject: RCPT from unknown\[114.237.109.138\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[114.237.109.138\]\; from=\ to=\ proto=ESMTP helo=\ Jul 12 12:40:55 elektron postfix/smtpd\[12655\]: NOQUEUE: reject: RCPT from unknown\[114.237.109.138\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[114.237.109.138\]\; from=\ to=\ proto=ESMTP helo=\ Jul 12 12:41:32 elektron postfix/smtpd\[12655\]: NOQUEUE: reject: RCPT from unknown\[114.237.109.138\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[114.237.109.138\]\; from=\ to=\ proto=ESMTP helo=\	2019-07-12 22:01:44
119.42.175.200	attack	2019-07-12T13:25:01.650885abusebot-4.cloudsearch.cf sshd\[834\]: Invalid user ts3server from 119.42.175.200 port 47818	2019-07-12 21:36:41
142.93.203.108	attackbots	Jul 12 15:18:00 s64-1 sshd[9319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.203.108 Jul 12 15:18:02 s64-1 sshd[9319]: Failed password for invalid user neel from 142.93.203.108 port 41592 ssh2 Jul 12 15:23:15 s64-1 sshd[9346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.203.108 ...	2019-07-12 21:24:51
185.242.5.46	attackspambots	" "	2019-07-12 21:26:08
128.199.233.101	attackbots	Jul 12 13:05:57 mail sshd\[555\]: Invalid user weblogic from 128.199.233.101 port 36322 Jul 12 13:05:57 mail sshd\[555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.233.101 Jul 12 13:05:59 mail sshd\[555\]: Failed password for invalid user weblogic from 128.199.233.101 port 36322 ssh2 Jul 12 13:11:58 mail sshd\[706\]: Invalid user oscar from 128.199.233.101 port 37960 Jul 12 13:11:58 mail sshd\[706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.233.101 ...	2019-07-12 21:15:13
191.36.154.241	attackbots	mail.log:Jun 30 12:48:24 mail postfix/smtpd[13828]: warning: unknown[191.36.154.241]: SASL PLAIN authentication failed: authentication failure	2019-07-12 21:24:35
132.148.142.117	attackbots	www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:23 +0200\] "POST /wp-login.php HTTP/1.1" 200 2174 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 2144 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:26 +0200\] "POST /wp-login.php HTTP/1.1" 200 2131 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-07-12 21:35:55
36.71.234.231	attackbotsspam	Unauthorized connection attempt from IP address 36.71.234.231 on Port 445(SMB)	2019-07-12 21:58:19
51.15.209.109	attackspam	445/tcp [2019-07-12]1pkt	2019-07-12 21:40:31
134.175.23.46	attackspam	Jul 12 13:17:38 mail sshd\[803\]: Invalid user share from 134.175.23.46 port 53398 Jul 12 13:17:38 mail sshd\[803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.23.46 Jul 12 13:17:40 mail sshd\[803\]: Failed password for invalid user share from 134.175.23.46 port 53398 ssh2 Jul 12 13:23:50 mail sshd\[940\]: Invalid user git from 134.175.23.46 port 51002 Jul 12 13:23:50 mail sshd\[940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.23.46 ...	2019-07-12 21:35:22
191.36.156.78	attack	mail.log:Jun 27 17:12:27 mail postfix/smtpd[29830]: warning: unknown[191.36.156.78]: SASL PLAIN authentication failed: authentication failure	2019-07-12 21:59:45
117.93.113.103	attack	Caught in portsentry honeypot	2019-07-12 21:37:07
50.239.140.1	attackbots	2019-07-12T20:48:39.495227enmeeting.mahidol.ac.th sshd\[5970\]: Invalid user sleeper from 50.239.140.1 port 45660 2019-07-12T20:48:39.513384enmeeting.mahidol.ac.th sshd\[5970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.239.140.1 2019-07-12T20:48:41.480914enmeeting.mahidol.ac.th sshd\[5970\]: Failed password for invalid user sleeper from 50.239.140.1 port 45660 ssh2 ...	2019-07-12 21:57:21
193.112.219.75	attackspam	WordPress brute force	2019-07-12 22:06:20
13.95.8.102	attackspambots	Jul 12 08:24:51 vps200512 sshd\[20786\]: Invalid user maggie from 13.95.8.102 Jul 12 08:24:51 vps200512 sshd\[20786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.95.8.102 Jul 12 08:24:53 vps200512 sshd\[20786\]: Failed password for invalid user maggie from 13.95.8.102 port 32836 ssh2 Jul 12 08:30:11 vps200512 sshd\[20959\]: Invalid user cisco from 13.95.8.102 Jul 12 08:30:11 vps200512 sshd\[20959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.95.8.102	2019-07-12 21:59:11

最近上报的IP列表

103.222.21.30	103.47.218.40	245.207.40.241	91.114.40.209
116.76.101.91	166.62.176.89	70.111.84.17	120.146.182.140
44.193.242.214	125.71.59.104	176.252.193.241	120.125.232.171
88.241.116.244	190.237.121.47	95.58.121.135	201.148.146.213
178.145.140.181	84.220.243.109	68.124.121.35	56.202.92.69