114.99.130.52 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Anhui Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
114.99.130.129	attackbots	Brute forcing email accounts	2020-10-02 01:44:05
114.99.130.129	attackspambots	Brute forcing email accounts	2020-10-01 17:50:55
114.99.130.92	attackbotsspam	MAIL: User Login Brute Force Attempt	2020-08-09 15:22:01
114.99.130.196	attackspam	MAIL: User Login Brute Force Attempt	2020-08-08 23:54:02
114.99.130.170	attackspambots	Jul 30 05:54:20 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:23 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:24 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:27 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure Jul 30 05:54:29 andromeda postfix/smtpd\[25889\]: warning: unknown\[114.99.130.170\]: SASL LOGIN authentication failed: authentication failure	2020-07-30 13:49:42
114.99.130.2	attackbotsspam	SSH invalid-user multiple login try	2020-03-10 19:49:35
114.99.130.22	attackspambots	Feb 11 07:38:40 mailman postfix/smtpd[6162]: warning: unknown[114.99.130.22]: SASL LOGIN authentication failed: authentication failure	2020-02-12 06:17:08
114.99.130.5	attackspam	Unauthorized connection attempt detected from IP address 114.99.130.5 to port 6656 [T]	2020-01-30 17:00:48
114.99.130.91	attack	Unauthorized connection attempt detected from IP address 114.99.130.91 to port 6656 [T]	2020-01-29 19:07:45
114.99.130.186	attackspambots	Brute force attempt	2020-01-11 00:21:23
114.99.130.15	attack	Brute force attempt	2019-09-28 18:39:19
114.99.130.250	attack	Aug 12 04:34:30 lnxmail61 postfix/smtpd[17408]: warning: unknown[114.99.130.250]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 04:34:30 lnxmail61 postfix/smtpd[17408]: lost connection after AUTH from unknown[114.99.130.250] Aug 12 04:34:38 lnxmail61 postfix/smtpd[14894]: warning: unknown[114.99.130.250]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 04:34:38 lnxmail61 postfix/smtpd[14894]: lost connection after AUTH from unknown[114.99.130.250] Aug 12 04:34:49 lnxmail61 postfix/smtpd[17408]: warning: unknown[114.99.130.250]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 12 04:34:49 lnxmail61 postfix/smtpd[17408]: lost connection after AUTH from unknown[114.99.130.250]	2019-08-12 16:32:28
114.99.130.64	attack	[2019/7/25 AM 05:44:59] [1240] 114.99.130.64 This mailbox could not be found or has been disabled: bbbb@xxxxxx.com.tw	2019-07-25 15:28:03
114.99.130.6	attack	Jun 28 00:16:09 mailman postfix/smtpd[31101]: warning: unknown[114.99.130.6]: SASL LOGIN authentication failed: authentication failure	2019-06-28 14:42:44

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.130.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49240
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.99.130.52.			IN	A

;; AUTHORITY SECTION:
.			2597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070701 1800 900 604800 86400

;; Query time: 6 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 08 05:56:11 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 52.130.99.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 52.130.99.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
176.32.230.23	attack	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools	2020-06-21 14:11:49
106.12.56.136	attackbots	Invalid user jjjjj from 106.12.56.136 port 43488	2020-06-21 14:10:59
104.248.205.67	attackbots	2020-06-21T03:56:53.246919randservbullet-proofcloud-66.localdomain sshd[10890]: Invalid user andy from 104.248.205.67 port 52466 2020-06-21T03:56:53.251194randservbullet-proofcloud-66.localdomain sshd[10890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.205.67 2020-06-21T03:56:53.246919randservbullet-proofcloud-66.localdomain sshd[10890]: Invalid user andy from 104.248.205.67 port 52466 2020-06-21T03:56:55.438602randservbullet-proofcloud-66.localdomain sshd[10890]: Failed password for invalid user andy from 104.248.205.67 port 52466 ssh2 ...	2020-06-21 14:13:34
3.113.132.97	attackbotsspam	Jun 20 23:56:10 mail sshd\[40184\]: Invalid user shop from 3.113.132.97 Jun 20 23:56:10 mail sshd\[40184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.113.132.97 ...	2020-06-21 14:41:59
103.81.156.8	attack	2020-06-21T06:00:00.262973shield sshd\[5281\]: Invalid user venkat from 103.81.156.8 port 54962 2020-06-21T06:00:00.267032shield sshd\[5281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.156.8 2020-06-21T06:00:02.227641shield sshd\[5281\]: Failed password for invalid user venkat from 103.81.156.8 port 54962 ssh2 2020-06-21T06:04:47.249369shield sshd\[5699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.156.8 user=root 2020-06-21T06:04:49.611259shield sshd\[5699\]: Failed password for root from 103.81.156.8 port 53584 ssh2	2020-06-21 14:18:28
139.59.243.224	attackbotsspam	Invalid user wanghai from 139.59.243.224 port 56028	2020-06-21 14:33:19
94.25.181.15	attackbots	T: f2b postfix aggressive 3x	2020-06-21 14:43:53
194.26.29.25	attackspam	Jun 21 08:43:00 debian-2gb-nbg1-2 kernel: \[14980461.203622\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.25 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=42112 PROTO=TCP SPT=40852 DPT=5389 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-21 14:45:01
165.227.140.245	attackspam	Jun 20 21:29:32 mockhub sshd[3975]: Failed password for root from 165.227.140.245 port 51511 ssh2 ...	2020-06-21 14:26:23
185.22.142.197	attackspam	Jun 21 08:09:55 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 21 08:09:57 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 21 08:10:19 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 21 08:15:30 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 21 08:15:32 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-06-21 14:39:58
132.232.12.62	attack	CN - - [21/Jun/2020:03:38:23 +0300] GET /wp-login.php HTTP/1.1 404 2029 - Apache-HttpClient/4.5.2 Java/1.8.0_151	2020-06-21 14:27:01
14.176.157.254	attackspambots	VN_MAINT-VN-VNNIC_<177>1592711789 [1:2403312:58145] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 7 [Classification: Misc Attack] [Priority: 2]: {TCP} 14.176.157.254:33113	2020-06-21 14:28:36
138.197.147.128	attackbots	SSH authentication failure x 6 reported by Fail2Ban ...	2020-06-21 14:32:41
40.80.146.137	attackspam	2020-06-21T08:01:21.850766sd-86998 sshd[31402]: Invalid user centos from 40.80.146.137 port 50566 2020-06-21T08:01:21.853230sd-86998 sshd[31402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.80.146.137 2020-06-21T08:01:21.850766sd-86998 sshd[31402]: Invalid user centos from 40.80.146.137 port 50566 2020-06-21T08:01:23.266878sd-86998 sshd[31402]: Failed password for invalid user centos from 40.80.146.137 port 50566 ssh2 2020-06-21T08:05:59.076908sd-86998 sshd[31938]: Invalid user centos from 40.80.146.137 port 57762 ...	2020-06-21 14:28:20
36.67.248.206	attackbots	2020-06-21T00:14:36.792194devel sshd[31464]: Invalid user tigrou from 36.67.248.206 port 43682 2020-06-21T00:14:38.919195devel sshd[31464]: Failed password for invalid user tigrou from 36.67.248.206 port 43682 ssh2 2020-06-21T00:24:57.778593devel sshd[32142]: Invalid user jose from 36.67.248.206 port 36324	2020-06-21 14:35:12

最近上报的IP列表

69.94.159.254	27.153.80.184	185.156.177.142	188.215.72.57
201.186.41.142	45.7.230.226	190.65.220.94	163.172.28.200
115.153.14.154	78.167.244.35	89.246.124.122	103.216.59.75
81.169.179.75	38.79.241.142	184.61.213.29	106.47.29.234
41.236.216.222	179.108.245.91	196.189.5.33	186.84.229.167